The dissertation makes a deep study on security mechanisms of WLAN, and summarizes experiences and lessons in previous protocol design. The dissertation proposed principle of designing security protocol, and proposed a authentication scheme based on PKI.