Generic AAA Architecture

Laat, Cees de; Groß, Gisela; Gommans, Leon; Vollbrecht, J.; Spence, David R.

doi:10.17487/rfc2903

Cited by 133 publications

(1 citation statement)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although this scheme ensures the security of the handover procedure, it does not improve the situation of long handover latency and suffers from the packet loss problem. [11] proposed a PMIPv6 authentication scheme based on Diameter protocol [4] where access authentication is achieved by pre-sharing the key between AAA [1] sever and proxy mobile entities. But the enhancement of signal interaction between AAA sever and proxy mobile entities also reduces MN access efficiency.…”

Section: Introductionmentioning

confidence: 99%

An Efficient Handover Authentication Scheme Based on HMAC for Proxy Mobile IPv6 Network

Tianhan Gao,

Ling Tan,

Peiyu Qiao

et al. 2015

ReBICTE

View full text Add to dashboard Cite

Proxy mobile IPv6 plays a significant role in optimizing the performance of mobile IPv6 and achievingthe support for network mobility management. But the open nature and lack of security considerationresult in potential threat. The requirement of the real-time application of mobile node leads usto develop a handover authentication scheme which satisfies certain security and efficiency needs. Inthis paper, based on the 2-HIBS scheme, the handover authentication scheme is implemented by utilizinghash-based message authentication code (HMAC). The proposed scheme makes an excellentcombination between initial access authentication and handover authentication procedures. We alsoevaluate the handover authentication latency between our scheme and other authentication schemes.The results show that our scheme has higher efficiency and lower communication cost than existingones.

show abstract

Section: Introductionmentioning

confidence: 99%

An Efficient Handover Authentication Scheme Based on HMAC for Proxy Mobile IPv6 Network

Tianhan Gao,

Ling Tan,

Peiyu Qiao

et al. 2015

ReBICTE

View full text Add to dashboard Cite

show abstract

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

Méndez

Millán

López

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

Identity federations enable users, service providers and identity providers from different organizations to exchange authentication and authorization information in a secure way. In this paper we present a novel identity federation architecture for cloud services based on the integration of a cloud identity management service with an Authentication, Authorization and Accounting (AAA) infrastructure. Specifically we analyse how this type of AAA-based federation can be smoothly integrated into OpenStack, the leading open source cloud software solution, using the IETF Application Bridging for Federated Access Beyond web (ABFAB) specification for authentication and authorization. We provide details of the implementation undertaken in GÉANT s CLASSe project, and show its validation in a real testbed.

show abstract

An overview of online charging in 3GPP networks: new ways of utilizing user, network, and service‐related information

Grgic

Matijašević

2012

Int J Network Mgmt

View full text Add to dashboard Cite

SUMMARY Modern charging systems routinely apply the user, network, and service‐related information while performing online charging. Compared, however, to all the information available to and used in managing the network as a whole, the charging systems only use a limited subset. This work is motivated by the challenge to identify which information is used, and how it is used in online charging‐related processes, and also to explore whether it could be utilized ‘better’ or ‘smarter’ to improve future online charging systems functionality. We do not attempt to predict which information will be utilized in such systems and for what purpose, but instead summarize the open issues in view of the emerging trend of exploiting the user, network and service‐related information in service provisioning. We focus on the most recent 3GPP standards and relevant research papers, and propose three key aspects of online charging, with respect to information utilization: (a) signaling aspect, (b) inter‐domain aspect, and (c) service‐ and component‐based aspect. We present a state‐of‐the‐art review by grouping the works found in the literature based on the aspects they are associated with, and compare them based on the proposed comparison criteria. The discussion presented at the end of the paper indicates three common open issues, namely: (1) lack of common charging information specification and structure; (2) lack of mechanisms for information sharing among stakeholders in the service delivery process; and (3) lack of a common framework for sharing information while protecting user privacy. Copyright © 2012 John Wiley & Sons, Ltd.

show abstract

Generic AAA Architecture

Cited by 133 publications

References 1 publication

An Efficient Handover Authentication Scheme Based on HMAC for Proxy Mobile IPv6 Network

An Efficient Handover Authentication Scheme Based on HMAC for Proxy Mobile IPv6 Network

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

An overview of online charging in 3GPP networks: new ways of utilizing user, network, and service‐related information

Contact Info

Product

Resources

About