Design of Data Conversion Module Based on WAPI Protocol

This paper introduces a design method for a data conversion module based on the WAPI (WLAN Authentication and Privacy Infrastructure) wireless local area network. WAPI is China's first WLAN security standard that was independently developed. WAPI is composed of two parts: the WLAN Authentication Infrastructure (WAI) and the WLAN Privacy Infrastructure (WPI). The WAI provides mutual authentication between the STA and AP, as well as session key negotiation, and adopts a public key certificate scheme based on elliptic curves. The WPI provides confidential transmission of communication data and adopts the domestically developed block cipher algorithm SMS4. In the gateway mode of the module, it supports forwarding Ethernet data to the WAPI wireless local area network. Through port forwarding, data from the Ethernet subnet can be transmitted to the corresponding port of a specific host in the WAPI local area network. It supports both pre-shared key and certificate modes for WAPI access, allows uploading of WAPI certificates, and has functions such as AP roaming and service persistence.