Towards a Global AAA Framework for Internet

Abstract

A common Authentication, Authorization and Accounting (AAA) framework enables communication between control structures across several interconnected organizations. It is a requirement to allow users mobility or emergence of new distributed services. The path leading to a global framework contains many obstacles, technical and political, that must be overcome to achieve new generation network features such as pervasive computing. While creating a new framework implementation focused on extensibility, we have found some issues in Diameter, the state-of-the-art AAA framework in Internet. This paper summarizes the fundamentals of a AAA architecture, then presents our implementation waaad and our findings on Diameter limitations. It shows that Diameter is suitable for AAA in the future, but some problems must be addressed first. The next phase in our evaluation of the Diameter framework is the deployment of our implementation in a multi-realm environment, one step closer to a global AAA framework.

Ephemeral-Secret-Leakage Secure ID-Based Three-Party Authenticated Key Agreement Protocol for Mobile Distributed Computing Environments

“…Authentication, Authorization, Accounting (AAA) services are the commonly used mechanisms to protect the security of networks in distributed computing environments [32][33][34]. The authentication service is the first inspection mechanism that prevents and traces network crime.…”