AAA and mobile networks: security aspects and architectural efficiency

ABSTRACT

Security is a crucial factor in the provision of the network services, in both wireless and wired communications. Day by day, the number of subscribers is increased by an exponential function. Furthermore, the continued growth of network services, in addition to the available networks resources each time caused special needs for security and safety, throughout the transmission channel. Finally, billing services for network users is another crucial factor for the applied security mechanisms. AAA, or in different 3"A"s is a security standard which has lately been developed. The name of this standard (AAA) defines Authentication, Authorization and Accounting services for the network subscribers. This work deals with the technical aspects of the three main security processes of AAA. In addition, an architectural model of this standard is also presented, from a generic point of view. Finally, key management issues are examined, which are applied in AAA.

REFERENCES

• 1: William Stallings, Cryptography and Network Security: Principles and Practice, Pearson Education, 2002
• 2: N. Sklavos, X. Zhang, Handbook of Wireless Security: From Specifications to Implementations, CRC-Press, A Taylor and Francis Group, 2007.
• 3: J. Vollbrecht , P. Calhoun , S. Farrell , L. Gommans , G. Gross , B. de Bruijn , C. de Laat , M. Holdrege , D. Spence, AAA Authorization Framework, RFC Editor, 2000
• 4: J. Vollbrecht , P. Calhoun , S. Farrell , L. Gommans , G. Gross , B. de Bruijn , C. de Laat , M. Holdrege , D. Spence, AAA Authorization Application Examples, RFC Editor, 2000
• 5: S. Farrell , J. Vollbrecht , P. Calhoun , L. Gommans , G. Gross , B. de Bruijn , C. de Laat , M. Holdrege , D. Spence, AAA Authorization Requirements, RFC Editor, 2000
• 6: C. de Laat , G. Gross , L. Gommans , J. Vollbrecht , D. Spence, Generic AAA Architecture, RFC Editor, 2000
• 7: J. Vollbrecht , P. Calhoun , S. Farrell , L. Gommans , G. Gross , B. de Bruijn , C. de Laat , M. Holdrege , D. Spence, AAA Authorization Framework, RFC Editor, 2000
• 8: J. Vollbrecht , P. Calhoun , S. Farrell , L. Gommans , G. Gross , B. de Bruijn , C. de Laat , M. Holdrege , D. Spence, AAA Authorization Application Examples, RFC Editor, 2000
• 9: B. Aboba , J. Arkko , D. Harrington, Introduction to Accounting Management, RFC Editor, 2000
• 10: S. Hares , D. Katz, Administrative Domains and Routing Domains: A model for routing in the Internet, RFC Editor, 1989
• 11: P. Calhoun, et al., "RADIUS Accounting Interim Accounting Record Extension", draft, January 1998.
• 12: T. Zseby , S. Zander , C. Carle, Policy-Based Accounting, RFC Editor, 2002
• 13: M. Beadles , D. Mitton, Criteria for Evaluating Network Access Server Protocols, RFC Editor, 2001
• 14: B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, H. Levkowetz, "Extensible Authentication Protocol (EAP)", IETF, RFC 3748, June 2004.

INDEX TERMS

Keywords:
AAA, accounting, authentication, authorization, networks security