目前,无线局域网中使用的认证和密钥协商协议结构复杂,且存在安全隐患。文中依据无线局域网的特性,对MB-IBAKA协议进行改进,并在此基础上给出了一种新的密钥协商和身份认证方案。利用模型检测技术对新方案进行形式化分析,分析结果表明,该方案满足认证性、保密性和完整性。另外,新方案在系统开销方面均低于已有方案。 At present, the authentication and key agreement protocols used in wireless LAN are complicated in structure and have potential security risks. In this paper, based on the characteristics of wireless LAN, MB-IBAKA protocol is improved, and a new key agreement and identity authentication scheme is given. The formal analysis of the new scheme is carried out by using the model detection technology. The analysis results show that the scheme meets the requirements of authenticity, confidentiality and integrity. In addition, the new scheme is lower than the existing scheme in terms of system overhead.