User authentication protocol in a Mobile Computing Environment

本文研究了移动计算环境下的网络安全问题，尤其是身份认证问题。在环境中，指已注册到其主服务器的用户。而当他搬到一个新的地方时，他必须通过未注册的移动服务器进行身份验证。我们于1997年构建了在移动环境中使用的第三方身份验证协议的基本结构，该协议是为有线网络提出的Kerberos的扩展。建议的协议被称为GMAP(全球移动认证协议)。利用GMAP，移动用户访问最近的移动服务器，服务器将加密的请求路由到认证服务器和票证服务器，然后由服务器对用户进行认证，并可以访问目的主机。1998年，为了保证协议的健壮性，我们开发了认证协议安全模拟器SS/AG(Security Simulator With Attack Generator)。SS/AG模拟预定义的协议，在每条链路上进行可能的攻击，如窃听、重放攻击等，并将该协议应用到一个称为SFM(Secure Floating Market)的代理系统模型中，该模型的应用之一是电子商务，并在Unix工作站上实现了该模型的原型。

This research have studied a network security problem, especially authentication arisen in a mobile computing environment. In the environment, a user who had been registered to its home server. And when he moves to a new location, he has to be authenticated through unregistered mobile server. We build in 1997 the fundamental structure of a third party authentication protocol utilized in a mobile environment, which is an extension of Kerberos proposed for a wired network. The proposed protocol is called GMAP (Global Mobile Authentication Protocol). With GMAP a mobile user accesses the nearest mobile server, the server routes the encrypted request to an authentication server and a ticket server, then the user is authenticated by the servers and can access to the destination host. The protocol reduces the wireless traffic.In 1998, we developed authentication protocol security simulator called SS/AG (Security Simulator with Attack Generator) to ensure the robustness of the protocol. SS/AG simulates predefined protocol with possible attacks on every link, i. e., wiretapping, replay attack etc. The protocol is applied to an agent system called SFM (Secure Floating Market) model one of whose applications is electric commerce, and the prototype of the model is implemented on UNIX workstation.