Home Authentication Server Research Articles

Using a Trusted WLAN Network to Offload Mobile Traffic and Leverage Deployed Broadband Network Gateways

This paper introduces the concept and architecture for the Alcatel-Lucent solution to wireless local area network (WLAN) offload in a case where the WLAN network can be considered as trusted by the home operator of the user. Leveraging up-to-date WLAN access points (APs) that provide both support for strong user equipment (UE) authentication — Universal Subscriber Identity Module (USIM) based- and ciphering (AES-based), WLAN access can offer “trusted” access to the Evolved Packet Core (EPC). This trusted access to the EPC can provide Internet Protocol (IP) address preservation when the terminal moves between 3rd Generation Partnership Project (3GPP) access and WLAN access without requiring the UE to support IPsec tunnels to the EPC or Dual Stack Mobile IP version 6 (DSMIPv6). A WLAN gateway (WLAN-GW) acting as an edge router for the UE is able to get policies from the home operator's authorization, authentication, and accounting (AAA) server at UE authentication, and based on these policies, to either send the user traffic to the EPC anchor point — the Packet Data Network Gateway (P-GW) — or to offload such traffic, for example, to the Internet. © 2012 Alcatel-Lucent.

An AAA scheme using ID-based ticket with anonymity in future mobile communication

An AAA protocol is an information protection technology that systematically provides authentication, authorization and accounting functions not only in existing wired networks, but also in rapidly developing wireless networks. Currently, standardization of various applied services is in progress and involves AAA standardization for a mobile user in a wireless network. Various studies have considered using AAA with a roaming service in a mobile IPv6 network, between heterogeneous networks. In this paper, we proposed an ID-based ticket for user authentication with a mobile device in a ubiquitous environment. Service is seamless, even when a mobile device moves from the home network to a foreign network. In addition, since the ticket is renewed from the foreign network, the overhead of the home authentication server is reduced, and the anonymity ID guarantees anonymity during service.

Managing Handover Authentication in Big-domain Wireless Environment

Mobility management is the key feature of wireless network. When the mobile node roams from the home network to the foreign network, the foreign network access server usually does not have the security material of the mobile node, and can not authenticate the mobile node by itself. Thus the three-party authentication is used, and the foreign network access server consults the home authentication server of the mobile node for authentication (usually through the foreign authentication server). However, this sort of authentication will lead to a long latency. With the wide deployment of latency sensitive services in wireless network, the handover authentication latency becomes more and more flagrant. Currently, many standards organizations are working on this issue, and they defined a lot of protocols for optimizing the handover authentication procedure. These protocols mainly include the fast re-authentication protocol, the pre-authentication protocol and the context transfer based authentication protocol. However, current protocols will put a heavy burden on the authentication server in big domain, and thus add a long latency to the handover authentication procedure. This paper presents an elliptic curve based authenticated key agreement protocol with mutual authentication property to address this problem.

글로벌 로밍 환경에서 시간 동기화 OTP를 포함한 티켓 기반 AAA 메커니즘에 관한 연구

AAA(Authentication, Authorixation, Accounting) 프로토콜은 유선망뿐만 아니라 무선망과 다양한 서비스 및 프로토콜 상에서 안전하고 신뢰성 있는 사용자 인증, 인가, 과금 기능을 체계적으로 제공하는 정보보호 기술이다. 현재 IETF(Internet Engineering Task Force) AAA 워킹그룹에서도 AAA 프로토콜에 관하여 중요하게 다루고 있으며, 활발히 연구 중 이다. 최근 사용자의 익명성과 프라이버시 침해 측면에서 많은 문제점을 드러내고 있어 본 연구에서는 모바일 디바이스가 홈 인증 서버로부터 인증을 받고 난 후에 외부 네트워크로 이동하더라도 홈 인증서버로부터 발급받은 티켓을 이용하여 홈 인증 서버로 접근 하지 않고 외부 네트워크에서의 인증을 제공하여 서비스를 받을 수 있게 한다. 또한 서비스를 이용하는데 있어 사용자의 프라이버시 및 익명성을 제공할 수 있는 방안에 초점을 맞춘다. 본 방식은 인증, 인가, 과금 중 인증과 인가에 초점을 두고 시간 동기화 OTP를 사용함으로써 제 3자의 공격에 안전하며, 안전하고 효율적인 인증방식을 제공한다. 또한 티켓을 사용함으로써 정당한 사용자만이 서비스를 제공받을 수 있고 교환되는 메시지 및 지연을 줄이며 지속적인 서비스를 제공받을 수 있어 안전성과 효율성을 높일 수 있다. AAA(Aluthentieation, Authorization, Accounting) protocol is an information securitv technology that offer secure and reliable user Authentication, Authorization, Accounting function systematically in various services. protocol and wireless network work as well as win network. Currently IETF(Internet Engineering Task Force) AAA Working Group deal with about AAA protocol and studying with activity, But, recently it exposing much problems side to user's anonymity and privacv violation. Therefore, in this paper, AAAH(Home Authentication Server) authenticaters Mobile device, after that, use ticket that is issued from AAAH even if move to outside network and can be serviced offering authentication in outside network without approaching by AAAH, Also, we study mechanism that can offer user's privacy and anonymousness to when use service. Our mechanism is using Time Synchronization OTP and focusing authentication and authorization. Therefore, our mechanism is secure from third party attack and offer secure and effective authentication scheme. Also only right user can offer services by using ticket. can reduce signal and reduce delay of message exchanged, can offer persistent service and beighten security and efficiency.

A Hierarchical Key Management Scheme for Authentication of Roaming Mobile Nodes between Domains in Mobile Networks

This letter proposes a hierarchical key management scheme based on hash key chain for authentication of roaming mobile nodes in both intra-domain and inter-domain. The key management scheme uses a local master key concept for reducing the latency of the authentication procedure and the communication overhead between a home authentication server and an access point in the foreign domain. The proposed scheme also supports secure separation of the authentication key among local authentication servers using hash kev chain.

AAA시스템에서의 이동에 따른 PIN 기반의 인증 및 ID 등록에 관한 연구

AAA(Authentication, Authorization, Accounting) is the service that offers authentication, authorization, and accounting method, and every terminal that accesses the network requires this AAA service. The authentication process of a mobile terminal is as follows: a mobile phone accesses an authentication server in a home network via the authentication service in an external network, which receives the authentication result. And, for the home authentication server to offer secure service, a unique key is distributed for the secure communication between the external agent and the user, the external agent and the home authentication server, and the user and the home authentication server. This paper discusses and proposes the key distribution for secure communication among external authentication servers when a mobile terminal travels to an external network. As the proposed method does not require the home authentication server to reissue another authentication when a user travels to other external networks, it reduces the overload in the home authentication server. It can also distribute a PIN-driven key.