The　main　benefits　of　the　access　authentication　in　IEEE　802.11s　are　both　easy　administration　of　the　subscribers　and　compatibility　with　IEEE　802.11i.　However,　there　still　exist　some　shortcomings,　such　as　worse　authentication　delay,　suffering　from　intermediate　attack,　lower　expansibility　and　the　inequality　among　users.　In　order　to　overcome　these　shortcomings,　a　zone-based　hierarchical　topology　structure,　virtual　certification　authority　(CA),　off-line　CA,　authorized　certificates　and　authorized　keys　are　used　in　the　access　authentication　scheme　proposed　in　this　paper.　Qualitative　analysis　and　simulation　show　that　the　access　authentication　scheme　would　improve　authentication　of　the　802.11s　in　authentication　latency,　security,　expansibility　and　the　inequality　in　users.　©　2014　ACADEMY　PUBLISHER.