NR: Distributed Inter-System Authentication Mechanisms for Seamless Roaming in Multi-network Environments

本研究针对多网络环境下的系统间认证问题进行研究。在这样的环境中，允许用户在多种类型的网络之间无缝漫游会给网络安全带来问题。目前没有办法传输在网络之间漫游的用户的身份或信任记录。例如，在2G和3G蜂窝系统中，移动用户的认证是通过用户注册来完成的。然而，目前的注册技术采用集中式认证机构，这不适合分布式、多网络环境。此外，注册研究传统上主要集中在位置更新和寻呼方案上，而没有解决新的认证和安全问题。该提案通过遵循系统间认证代理(ISA)的设计和体系结构尺寸以及向漫游用户发放许可(或拒绝服务)的所谓护照和签证机制的设计的研究议程，解决了多网络环境中的系统间认证问题。此外，该项目还将制定基于护照/签证系统的系统间登记协议，并评估ISA架构和护照/签证系统的成本效益分析的绩效。该项目将推进未知用户的身份验证是一个问题的领域。特别是，该项目的成功将对分布式计算研究产生影响，例如通过因特网买卖计算资源、用于科学和工程应用的共享信息网格以及安全事务处理技术的开发。

This research addresses the problem of inter-system authentication in multi-network environments. In such environments, allowing users to roam seamlessly between multiple types of networks creates problems for network security. There is currently no means to transfer the identity or trust record of a user that roams between networks. For example, in 2G and 3G cellular systems, the authentication of mobile users is accomplished through user registration. However, current registration techniques assume a centralized authentication authority, which is not suitable for the distributed, multi-network environment. In addition, registration research traditionally focuses on location update and paging schemes, leaving the new authentication and security issues unresolved. This proposal addresses the problem of inter-system authentication in multi-network environments, by following the research agenda in the design and architectural dimensioning of an inter-system authentication agent (ISA), as well as in the design of the so-called passport and visa mechanism to issue permissions (or service denials) to roaming users. In addition, the project will develop an inter-system registration protocol based on the passport/visa system and evaluate the performance of a cost-benefit analysis for the ISA architecture and the passport/visa system. This project will advance the field where the authentication of unknown users is an issue. In particular, the success of this project will have an impact on distributed computing research, such as the buying and selling of computing resources over the Internet, shared information grids for scientific and engi-neering applications, and the development of techniques for secure transaction processing.