针对目前用户上网时广泛采用的IEEE 802.1x认证协议,为了增加认证系统的安全性,通常在认证的过程中加入计算机的硬件信息。本文首先介绍了IEEE 802.1x协议,接着论述了基于IEEE 802.1x体系的硬件身份验证的原理,以及硬件信息绑定身份验证系统的工作流程,由于这一协议自身存在缺陷,所以基于它的一些身份验证系统也存在漏洞,最后通过具体的实例剖析了这一问题。 In view of the IEEE 802.1x authentication protocol that is widely used by the current users to access the Internet, in order to increase the security of the authentication system, the hardware information of the computer is usually added during the authentication process. This paper first introduces the IEEE 802.1x protocol, and then discusses the principle of hardware authentication based on the IEEE 802.1x system, as well as hardware information binding authentication system workflow, due to its own flaws in this agreement, based on some of its identity There are also loopholes in the verification system, and finally analyzed this problem through concrete examples.