A network access control approach based on the AAA architecture and authorization attributes Export

@article{citeulike:1275800, abstract = {Network access control mechanisms constitute an increasingly needed service, when communications are becoming more and more ubiquitous thanks to some technologies such as wireless networks or Mobile IP. This paper presents a particular scenario where access rules are based not only on the identity of the different users but also on authorization data related to those users. In order to accomplish this general goal, it will be necessary to add to the traditional system-specific services for authentication and authorization, and also some entities able to manage the information related to identity, roles and permissions. Network access will be based on the 802.1X framework and the Authentication, Authorization, and Accounting (AAA) architecture, as they constitute the basis for most of the existing proposals for limiting the access to a restricted network. These proposals will be extended making use of an authorization infrastructure based on SAML statements, the RBAC model, and XACML as the main language for expressing authorization policies. The solution that we present in this paper is a consequence of an exhaustive and non-trivial analysis of the different mechanisms that could be used to provide this kind of service. As we will see, the correct integration of these different mechanisms leads to the definition of a scalable and versatile network access control system which conforms to the guidelines outlined by the AAA initiative.}, author = {Lopez, Gabriel and Canovas, Oscar and Gomez, Antonio F. and Jimenez, Jesus D. and Marin, Rafael}, citeulike-article-id = {1275800}, citeulike-linkout-0 = {http://www.sciencedirect.com/science/article/B6WKB-4H3Y8R1-2/2/88b43ba7f229ab0fb00316f6032a1e4a}, journal = {Journal of Network and Computer Applications}, keywords = {a, access, also, authorized, based, data, decition, is, model, on, that, the}, month = {August}, number = {3}, pages = {900--919}, posted-at = {2008-04-17 05:07:01}, priority = {3}, title = {A network access control approach based on the AAA architecture and authorization attributes}, url = {http://www.sciencedirect.com/science/article/B6WKB-4H3Y8R1-2/2/88b43ba7f229ab0fb00316f6032a1e4a}, volume = {30}, year = {2007} }

TY - JOUR ID - citeulike:1275800 L3 - citeulike-article-id:1275800 N2 - Network access control mechanisms constitute an increasingly needed service, when communications are becoming more and more ubiquitous thanks to some technologies such as wireless networks or Mobile IP. This paper presents a particular scenario where access rules are based not only on the identity of the different users but also on authorization data related to those users. In order to accomplish this general goal, it will be necessary to add to the traditional system-specific services for authentication and authorization, and also some entities able to manage the information related to identity, roles and permissions. Network access will be based on the 802.1X framework and the Authentication, Authorization, and Accounting (AAA) architecture, as they constitute the basis for most of the existing proposals for limiting the access to a restricted network. These proposals will be extended making use of an authorization infrastructure based on SAML statements, the RBAC model, and XACML as the main language for expressing authorization policies. The solution that we present in this paper is a consequence of an exhaustive and non-trivial analysis of the different mechanisms that could be used to provide this kind of service. As we will see, the correct integration of these different mechanisms leads to the definition of a scalable and versatile network access control system which conforms to the guidelines outlined by the AAA initiative. IS - 3 JF - Journal of Network and Computer Applications EP - 919 TI - A network access control approach based on the AAA architecture and authorization attributes VL - 30 SP - 900 KW - a KW - access KW - also KW - authorized KW - based KW - data KW - decition KW - is KW - model KW - on KW - that KW - the AU - Lopez, Gabriel AU - Canovas, Oscar AU - Gomez, Antonio AU - Jimenez, Jesus AU - Marin, Rafael PY - 2007/08// UR - http://www.sciencedirect.com/science/article/B6WKB-4H3Y8R1-2/2/88b43ba7f229ab0fb00316f6032a1e4a ER -