政大機構典藏-National Chengchi University Institutional Repository(NCCUR):Item 140.119/35227
English  |  正體中文  |  简体中文  |  Post-Print筆數 : 11 |  Items with full text/Total items : 88613/118155 (75%)
Visitors : 23483049      Online Users : 262
RC Version 6.0 © Powered By DSPACE, MIT. Enhanced by NTU Library IR team.
Scope Tips:
  • please add "double quotation mark" for query phrases to get precise results
  • please goto advance search for comprehansive author search
  • Adv. Search
    HomeLoginUploadHelpAboutAdminister Goto mobile version
    政大典藏 > College of Commerce > Department of MIS > Theses >  Item 140.119/35227
    Please use this identifier to cite or link to this item: http://nccur.lib.nccu.edu.tw/handle/140.119/35227

    Title: AAA架構下情境感知存取控制政策之設計與應用
    Context-aware access control for the AAA architecture
    Authors: 劉安妮
    Liu, Annie
    Contributors: 劉文卿
    Liu, Annie
    Keywords: 情境知覺
    AAA Architecture
    Access control policy
    Wireless security
    Date: 2005
    Issue Date: 2009-09-18 14:29:45 (UTC+8)
    Abstract: 隨著無線網路環境的普及,越來越多行動工作者可以透過隨身的手持設備進行網路漫遊,即時地存取不同的服務。另外亦可以經由公司的虛擬專有網路來存取企業內部資料、電子郵件及其它應用程式。不論是針對企業或是網路服務業者而言,為了要能夠確保網路環境上的安全性,眾多的行動工作者在進行漫遊時,身分必須被驗證,進而才能被授予各項服務的存取權。此外,還必需根據使用者服務使用的情況進行計費,來提升服務提供者的收益。
    因此在無線區域網路中,結合一套認證、授權、計費的架構(Authentication, Authorization, Accounting Architecture, AAA

    本研究提出一個以情境知覺運算(context-aware computing)為基礎的AAA架構。以情境來設計資源存取政策,因此系統偵測到行動工作者情境上的改變,根據已定義好的存取政策,動態地進行身分驗證及調整授權服務,最後再依不同的服務使用等級、連線時間與網路使用量等來計費。本論文以漫遊服務與企業虛擬專有網路為例,說明在此架構下如何針對不同的情境進行身分認證、與服務授權。
    With the popularity of the Wireless LAN, mobile workers are able to access various services or resources with seamless roaming, as well as mobile VPN, just via their handheld devices. Not only for the corporations but the Internet Service Providers(ISP), a secure and trusted remote access is required. User identity should be authenticated in advance, and the service providers grant or deny mobile users the access to resources according to their statuses.
    Besides, a usage-based accounting and billing is crucial to provide commercialized services within WLAN, and to benefit those service providers. As a result, a AAA architecture designed for coordinating the authentication, authorization and accounting between different administrative networks is required with urgent need.

    The objective of this research is to provide a context-aware based AAA architecture which adopts context as the design principle to define access control policies. So the system can detect the changing contexts of mobile workers, re-authenticate user identity, adjust dynamically service permissions in the light of context-based access control policies, and bill the user taking into account the contexts efficiently. In this research, we take examples of roaming services and VPN to describe how the architecture works.
    Reference: Abowd, G. D., Dey, A. K., Brown, P. J., Davies, N., Smith, M. and Steggles, P.
    1999. Towards a better understanding of context and context-awareness. In HUC
    '99: Proceedings of the 1st international symposium on handheld and ubiquitous
    computing (pp. 304{307). London, UK: Springer-Verlag.
    Chen, H., Finin, T., Joshi, A., Kagal, L., Perich, F. and Chakraborty, D. Intelligent
    agents meet the semantic web in smart spaces. IEEE Internet Computing, 8(6),
    69{79, 2004.
    Chong, S. K., Krishnaswamy, S. and Loke, S. W. 2005. A context-aware approach to
    conserving energy in wireless sensor networks. In PERCOMW '05: Proceedings
    of the third ieee international conference on pervasive computing and communica-
    tions workshops (PERCOMW'05) (pp. 401{405). Washington, DC, USA: IEEE
    Computer Society.
    Dey, A. K. 2000. Providing architectural support for building context-aware applications.
    Unpublished doctoral dissertation, Georgia Institute of Technology.
    Ferraiolo, D. and Kuhn, R. 1992. Role based access control. In 15th national computer
    security conference.
    Gwizdka, J. 2000. What's in the context? In Position paper for CHI 2000 workshop
    on the what, who, where, when, why and how of context-awareness.
    JÄahnert, J. Problem statement: Metering and accounting in the full-IP 4G environ-
    ment. Lecture Notes in Computer Science, 2816, 298-307, 2003.
    Laat, C. de, Gross, G., Gommans, L., Vollbrecht, J. and Spence, D. Generic AAA
    architecture. Request for Comments: 2903, 2000.
    Metz, C. AAA protocols: Authentication, authorization, and accounting for the Inter-
    net. IEEE Internet Computing, 3(6), 75{79, 1999.
    Most¶efaoui, G. K. and Br¶ezillon, P. A generic framework for context-based distributed
    authorizations. Lecture Notes in Computer Science, 2680, 204-217, 2003.
    Most¶efaoui, G. K. and Br¶ezillon, P. 2004. Modeling context-based security policies
    with contextual graphs. In 2nd IEEE conference on pervasive computing and
    communications workshops (PERCOMW'04).
    Mostefaoui, G. K., Pasquier-Rocha, J. and Brezillon, P. 2004. Context-aware comput-
    ing: A guide for the pervasive computing community. In ICPS '04: Proceedings
    of the the IEEE/ACS international conference on pervasive services (ICPS'04)
    (pp. 39{48). Washington, DC, USA: IEEE Computer Society.
    Prasad, N. R., Alam, M. and Ruggieri, M. Light-weight AAA infrastructure for mobility
    support across heterogeneous networks. Wireless Personal Communications: An
    International Journal, 29(3-4), 205{219, 2004.
    Sandhu, R. and Samarati, P. Access control: Principle and practice. IEEE Communi-
    cations Magazine, 32(9), 40{48, 1994.
    Sandhu, R. and Samarati, P. Authentication, access control, and audit. ACM Com-
    puting Surveys (CSUR), 28(1), 241{243, 1996.
    Schilit, B., Adams, N. and Want, R. 1994. Context-aware computing applications. In
    IEEE workshop on mobile computing systems and applications. Santa Cruz, CA,
    Schilit, W. N. 1995. A system architecture for context-aware mobile computing. Un-
    published doctoral dissertation, COLUMBIA UNIVERSITY.
    Zseby, T., Zander, S. and Carle, G. Policy-based accounting. Request for Comments:
    3334, 2002.
    Description: 碩士
    Source URI: http://thesis.lib.nccu.edu.tw/record/#G0093356026
    Data Type: thesis
    Appears in Collections:[Department of MIS] Theses

    Files in This Item:

    File Description SizeFormat
    35602601.pdf49KbAdobe PDF1477View/Open
    35602602.pdf380KbAdobe PDF1452View/Open
    35602603.pdf223KbAdobe PDF1485View/Open
    35602604.pdf26KbAdobe PDF1432View/Open
    35602605.pdf457KbAdobe PDF1493View/Open
    35602606.pdf402KbAdobe PDF1598View/Open
    35602607.pdf812KbAdobe PDF2046View/Open
    35602608.pdf999KbAdobe PDF1843View/Open
    35602609.pdf795KbAdobe PDF1643View/Open
    35602610.pdf599KbAdobe PDF1567View/Open
    35602611.pdf93KbAdobe PDF1558View/Open
    35602612.pdf585KbAdobe PDF1939View/Open

    All items in 政大典藏 are protected by copyright, with all rights reserved.

    社群 sharing

    DSpace Software Copyright © 2002-2004  MIT &  Hewlett-Packard  /   Enhanced by   NTU Library IR team Copyright ©   - Feedback