NR: Distributed Inter-System Authentication Mechanisms for Seamless Roaming in Multi-network Environments

本文研究了多网络环境下的系统间认证问题。在这样的环境中，允许用户在多种类型的网络之间无缝漫游会产生网络安全问题。目前还没有办法转移在网络之间漫游的用户的身份或信任记录。例如，在2G和3G蜂窝系统中，移动的用户的认证通过用户注册来完成。然而，目前的注册技术假设一个集中的认证机构，这是不适合的分布式，多网络环境。此外，注册研究传统上集中在位置更新和寻呼方案，离开新的认证和安全问题尚未解决。该建议解决了在多网络环境中的系统间认证的问题，通过以下的研究议程中的设计和架构尺寸的一个系统间认证代理（伊萨），以及在设计的所谓的护照和签证机制发出许可（或拒绝服务）漫游用户。此外，该项目还将根据护照/签证系统制定一个系统间登记协议，并评价伊萨架构和护照/签证系统的成本效益分析的执行情况。该项目将推进未知用户身份验证成为问题的领域。特别是，该项目的成功将对分布式计算研究产生影响，例如在Internet上买卖计算资源，科学和工程应用的共享信息网格，以及安全事务处理技术的开发。

This research addresses the problem of inter-system authentication in multi-network environments. In such environments, allowing users to roam seamlessly between multiple types of networks creates problems for network security. There is currently no means to transfer the identity or trust record of a user that roams between networks. For example, in 2G and 3G cellular systems, the authentication of mobile users is accomplished through user registration. However, current registration techniques assume a centralized authentication authority, which is not suitable for the distributed, multi-network environment. In addition, registration research traditionally focuses on location update and paging schemes, leaving the new authentication and security issues unresolved. This proposal addresses the problem of inter-system authentication in multi-network environments, by following the research agenda in the design and architectural dimensioning of an inter-system authentication agent (ISA), as well as in the design of the so-called passport and visa mechanism to issue permissions (or service denials) to roaming users. In addition, the project will develop an inter-system registration protocol based on the passport/visa system and evaluate the performance of a cost-benefit analysis for the ISA architecture and the passport/visa system. This project will advance the field where the authentication of unknown users is an issue. In particular, the success of this project will have an impact on distributed computing research, such as the buying and selling of computing resources over the Internet, shared information grids for scientific and engi-neering applications, and the development of techniques for secure transaction processing.