User authentication protocol in a Mobile Computing Environment

本研究研究了移动计算环境下的网络安全问题，特别是身份认证问题。在环境中，已注册到其主服务器的用户。当他搬到一个新地方时，他必须通过未注册的移动服务器进行身份验证。我们在1997年构建了移动环境中使用的第三方身份验证协议的基本结构，这是为有线网络提出的Kerberos的扩展。该协议被称为GMAP（全球移动认证协议）。使用GMAP，移动用户访问最近的移动服务器，服务器将加密请求路由到身份验证服务器和票证服务器，然后用户通过服务器的身份验证，可以访问目标主机。该协议减少了无线流量。1998年，为了保证认证协议的鲁棒性，我们开发了名为SS/AG （security simulator with Attack Generator）的认证协议安全模拟器。SS/AG模拟预定义的协议与可能的攻击在每个链路，即，窃听，重放攻击等。将该协议应用于一个以电子商务为主要应用领域的代理系统SFM （Secure Floating Market）模型，并在UNIX工作站上实现了该模型的原型。

This research have studied a network security problem, especially authentication arisen in a mobile computing environment. In the environment, a user who had been registered to its home server. And when he moves to a new location, he has to be authenticated through unregistered mobile server. We build in 1997 the fundamental structure of a third party authentication protocol utilized in a mobile environment, which is an extension of Kerberos proposed for a wired network. The proposed protocol is called GMAP (Global Mobile Authentication Protocol). With GMAP a mobile user accesses the nearest mobile server, the server routes the encrypted request to an authentication server and a ticket server, then the user is authenticated by the servers and can access to the destination host. The protocol reduces the wireless traffic.In 1998, we developed authentication protocol security simulator called SS/AG (Security Simulator with Attack Generator) to ensure the robustness of the protocol. SS/AG simulates predefined protocol with possible attacks on every link, i. e., wiretapping, replay attack etc. The protocol is applied to an agent system called SFM (Secure Floating Market) model one of whose applications is electric commerce, and the prototype of the model is implemented on UNIX workstation.