Network Access Control Mechanisms Research Articles

Enhancing Network Security: A Robust Network Access Control and Authentication Mechanism for Secure Data Transmission

In an era dominated by digital communication and networked systems, the imperative to secure data transmission is more critical than ever. This paper introduces a cutting-edge Network Access Control (NAC) and authentication mechanism aimed at fortifying the security of data transmission across networks. Leveraging advanced technologies such as biometric authentication, multi-factor authentication (MFA), and anomaly detection, the proposed mechanism establishes a robust line of defense against unauthorized access and evolving cyber threats. Drawing on a comprehensive review of literature, real-world case studies, and practical implementations, this paper substantiates the efficacy and feasibility of the proposed approach. The integration of innovative security protocols serves to address the vulnerabilities inherent in traditional access control systems, contributing to a dynamic and proactive network security paradigm.

Research on the communication mechanism between entities based on end-to-end credible state assessment

In the information age, with the development of internet technology, there are more and more various business services, at the same time, network security issues are also increasing. However, traditional protection methods are gradually hard to cope with the complex network environment. Aiming at the credible connection establishment and data communication problems that need to be solved urgently in the credible network, an interentity communication mechanism based on end-to-end credibility assessment is proposed. This mechanism combines trusted computing with network access control mechanisms, integrates network access authority control technology, server identity authentication technology, communication subject measurement technology and network link transparent encryption technology, adopts real-time monitoring of terminal status, dynamic adjustment of access authorities, optimized network access control mechanism and data transmission method, to against security issues of the network communication. After security analysis, this mechanism improves the security of the connection and communication between the terminal and the network. It can effectively avoid security threats to information systems, and make the service of the information system safe and reliable.

Security and privacy in Internet of things: methods, architectures, and solutions

Security and privacy in Internet of things: methods, architectures, and solutions

Research on Gateway Security Isolation Technology Based on Trusted Computing

This paper analyzes the lack of the existing network security isolation technology in internal information network, for these deficiencies, designed new gateway security isolation scheme. Based on analyzing the computing trust mechanism and the gateway security isolation system security requirements, using the fifth generation of network isolation technology, identification authentication technology, tags technology and other technologies, proposed a new network security isolation programs based on trusted computing technology, designed gateway security isolation system and trusted computing information protection model, studied network access control mechanism based on the model. The program is simple and flexible and more secure than traditional security isolation scheme.

Radio-Resource Management and Access-Control Mechanism Based on a Novel Economic Model in Heterogeneous Wireless Networks

In this paper, we first investigate the radio-resource management and network-selection schemes in heterogeneous wireless networks. Then, we propose a novel economic model to allocate radio resources for both code-division multiple-access (CDMA) networks and wireless local area networks (WLANs). Particularly, the resource-usage constraint is deduced in the CDMA uplink, where the radio resource is allocated with the aim of maximizing the total welfare of the CDMA network while satisfying the signal quality requirement of all mobile users. Moreover, we formulate and solve the optimization problem in the WLAN to maximize the network welfare when the maximum throughput in the WLAN is achieved by controlling the optimum collision probability. An approximated closed-form expression for the network welfare is also given when the assigned bandwidth for each user is close to the bandwidth request. Finally, we design the joint access-control mechanism under different load conditions in coupled heterogeneous networks. Numerical results show that the proposed scheme can achieve approximately 20% more users and 10% more network social welfare, which outperforms the utility-function-based access selection and single network access-control mechanisms in the literature for heterogeneous wireless networks.

An Identifier-Based Network Access Control Mechanism Based on Locator/Identifier Split

Legacy IP address-based access control has met many challenges, because the network nodes cannot be identified accurately based on their variable IP addresses. “Locator/Identifier Split” has made it possible to build a network access control mechanism based on the permanent identifier. With the support of “Locator/Identifier Split” routing and addressing concept, the Identifier-based Access Control (IBAC) makes net-work access control more accurate and efficient, and fits for mobile nodes’ access control quite well. Moreover, Self-verifying Identifier makes it possible for the receiver to verify the packet sender’s identity without the third part authentication, which greatly reduces the probability of “Identifier Spoofing”.

Location aware self-adapting firewall policies

Private access to corporate servers from Internet can be achieved using various security mechanisms. This article presents a network access control mechanism that employs a policy management archit...

A network access control approach based on the AAA architecture and authorization attributes

Network access control mechanisms constitute an increasingly needed service, when communications are becoming more and more ubiquitous thanks to some technologies such as wireless networks or Mobile IP. This paper presents a particular scenario where access rules are based not only on the identity of the different users but also on authorization data related to those users. In order to accomplish this general goal, it will be necessary to add to the traditional system-specific services for authentication and authorization, and also some entities able to manage the information related to identity, roles and permissions. Network access will be based on the 802.1X framework and the Authentication, Authorization, and Accounting (AAA) architecture, as they constitute the basis for most of the existing proposals for limiting the access to a restricted network. These proposals will be extended making use of an authorization infrastructure based on SAML statements, the RBAC model, and XACML as the main language for expressing authorization policies. The solution that we present in this paper is a consequence of an exhaustive and non-trivial analysis of the different mechanisms that could be used to provide this kind of service. As we will see, the correct integration of these different mechanisms leads to the definition of a scalable and versatile network access control system which conforms to the guidelines outlined by the AAA initiative.

URSA: Ubiquitous and Robust Access Control for Mobile Ad Hoc Networks

Restricting network access of routing and packet forwarding to well-behaving nodes and denying access from misbehaving nodes are critical for the proper functioning of a mobile ad-hoc network where cooperation among all networking nodes is usually assumed. However, the lack of a network infrastructure, the dynamics of the network topology and node membership, and the potential attacks from inside the network by malicious and/or noncooperative selfish nodes make the conventional network access control mechanisms not applicable. We present URSA, a ubiquitous and robust access control solution for mobile ad hoc networks. URSA implements ticket certification services through multiple-node consensus and fully localized instantiation. It uses tickets to identify and grant network access to well-behaving nodes. In URSA, no single node monopolizes the access decision or is completely trusted. Instead, multiple nodes jointly monitor a local node and certify/revoke its ticket. Furthermore, URSA ticket certification services are fully localized into each node's neighborhood to ensure service ubiquity and resilience. Through analysis, simulations, and experiments, we show that our design effectively enforces access control in the highly dynamic, mobile ad hoc network.