User authentication protocol in a Mobile Computing Environment

本文研究了移动的计算环境下的网络安全问题，特别是认证问题。在环境中，已注册到其主服务器的用户。当他移动到一个新的位置时，他必须通过未注册的移动的服务器进行身份验证。我们在1997年建立的第三方认证协议的基本结构中使用的移动的环境中，这是一个扩展的有线网络提出的认证。提出的协议被称为GMAP（全球移动的认证协议）。通过GMAP协议，移动的用户访问最近的移动的服务器，服务器将加密后的请求路由到认证服务器和票证服务器，然后用户通过认证服务器的认证，可以访问目的主机。1998年，我们开发了一个认证协议安全模拟器SS/AG（Security Simulator with Attack Generator），以保证协议的健壮性。SS/AG在每个链路上模拟预定义的协议，即可能的攻击。例如，将该协议应用于一个以电子商务为应用的代理系统SFM（Secure Floating Market）模型，并在UNIX工作站上实现了该模型的原型。

This research have studied a network security problem, especially authentication arisen in a mobile computing environment. In the environment, a user who had been registered to its home server. And when he moves to a new location, he has to be authenticated through unregistered mobile server. We build in 1997 the fundamental structure of a third party authentication protocol utilized in a mobile environment, which is an extension of Kerberos proposed for a wired network. The proposed protocol is called GMAP (Global Mobile Authentication Protocol). With GMAP a mobile user accesses the nearest mobile server, the server routes the encrypted request to an authentication server and a ticket server, then the user is authenticated by the servers and can access to the destination host. The protocol reduces the wireless traffic.In 1998, we developed authentication protocol security simulator called SS/AG (Security Simulator with Attack Generator) to ensure the robustness of the protocol. SS/AG simulates predefined protocol with possible attacks on every link, i. e., wiretapping, replay attack etc. The protocol is applied to an agent system called SFM (Secure Floating Market) model one of whose applications is electric commerce, and the prototype of the model is implemented on UNIX workstation.