NR: Distributed Inter-System Authentication Mechanisms for Seamless Roaming in Multi-network Environments

NR：用于多网络环境中无缝漫游的分布式系统间身份验证机制

• 批准号: 0322893
• 负责人: Janise McNair
• 金额: $ 29.8万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-10-01 至 2006-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0322893&HistoricalAwards=false
• 关键词: NR; Distributed; Inter; System; Authentication

This research addresses the problem of inter-system authentication in multi-network environments. In such environments, allowing users to roam seamlessly between multiple types of networks creates problems for network security. There is currently no means to transfer the identity or trust record of a user that roams between networks. For example, in 2G and 3G cellular systems, the authentication of mobile users is accomplished through user registration. However, current registration techniques assume a centralized authentication authority, which is not suitable for the distributed, multi-network environment. In addition, registration research traditionally focuses on location update and paging schemes, leaving the new authentication and security issues unresolved. This proposal addresses the problem of inter-system authentication in multi-network environments, by following the research agenda in the design and architectural dimensioning of an inter-system authentication agent (ISA), as well as in the design of the so-called passport and visa mechanism to issue permissions (or service denials) to roaming users. In addition, the project will develop an inter-system registration protocol based on the passport/visa system and evaluate the performance of a cost-benefit analysis for the ISA architecture and the passport/visa system. This project will advance the field where the authentication of unknown users is an issue. In particular, the success of this project will have an impact on distributed computing research, such as the buying and selling of computing resources over the Internet, shared information grids for scientific and engi-neering applications, and the development of techniques for secure transaction processing.

这项研究解决了多网络环境中的系统间身份验证问题。在这样的环境中，允许用户在多种类型的网络之间无缝漫游会给网络安全带来问题。目前还没有办法传输在网络之间漫游的用户的身份或信任记录。例如，在2G和3G蜂窝系统中，移动用户的认证是通过用户注册来完成的。然而，现有的注册技术采用集中式认证机构，不适合分布式、多网络环境。此外，注册研究传统上侧重于位置更新和寻呼方案，而新的身份验证和安全问题尚未得到解决。该提案通过遵循系统间身份验证代理 (ISA) 的设计和架构尺寸以及所谓的护照设计的研究议程，解决多网络环境中的系统间身份验证问题向漫游用户颁发许可（或服务拒绝）的签证机制。此外，该项目还将开发基于护照/签证系统的系统间注册协议，并评估ISA架构和护照/签证系统的成本效益分析的性能。该项目将推进未知用户身份验证问题的领域。特别是，该项目的成功将对分布式计算研究产生影响，例如通过互联网买卖计算资源、科学和工程应用的共享信息网格以及安全事务处理技术的开发。