Performance analysis of a cross-layer SSO mechanism for a roaming infrastructure

Journal of Network and Computer Applications

Volumn 32, Issue 4, 2009, Pages 808-823

  Sánchez, Manuel ^a   López, Gabriel ^a   Cánovas, Óscar ^a   Gómez Skarmeta, Antonio F ^a  

^a UNIVERSITY OF MURCIA   (Spain)

Author keywords

eduroam; Identity management; Performance analysis; SSO

Indexed keywords

APPLICATION SCENARIOS; AUTHENTICATION AND AUTHORIZATIONS; COMPUTING RESOURCES; CROSS LAYERS; EDUCATIONAL ENVIRONMENTS; EDUROAM; GRID COMPUTING ENVIRONMENTS; IDENTITY MANAGEMENT; NETWORK ACCESS; PERFORMANCE ANALYSIS; PRODUCTION ENVIRONMENTS; RESOURCE-SHARING; SINGLE-SIGN-ON; SSO; WEB RESOURCES;

AUTHENTICATION; GRID COMPUTING; SANITARY SEWERS; WORLD WIDE WEB;

NETWORK LAYERS;

EID: 67349120995     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2009.02.004     Document Type: Article

References (38)

1. 3GPP TS 33.220. Generic authentication architecture (GAA). Generic bootstrapping architecture. Release 8, March 2008.
2. Aboba B, Blunk L, Vollbrecht J, Carlson J, Levkowetz H. Extensible authentication protocol (EAP), June 2004. Request for comments (RFC) 3748.
3. Agarwal AK, Wang W. Measuring performance impact of security protocols in wireless local area networks. In: Proceedings of the second international conference on broadband networks, 2005.
4. Beatty JD. Liberty protocols and schema specification version 1.1. Liberty alliance project, January 2003.
5. Castro-Rojo R, López DR. The PAPI System. Point of access to providers of information, TERENA networking conference, 2001.
6. Cordasco J, Meyer U, Wetzel S. Implementation and performance evaluation of EAP-TLS-KS. In: Proceedings of 2nd international conference on security and privacy in communication networks (SecureComm), 2006. p. 45-56.
7. DAIDALOS project web site. 〈http://www.ist-daidalos.org〉, 2008.
8. DAMe project web site. 〈http://dame.inf.um.es〉, 2008.
9. de Laat C, Gross G, Gommans L, Vollbrecht J, Spence D. Generic AAA architecture, August 2000. Request for comments (RFC) 2903.
10. ENABLE project web site. 〈http://www.ist-enable.org〉, 2009.
11. Godik S, Moses T. eXtensible access control markup language (XACML), version 2.0, OASIS Standard, 2005.
12. Haka Federation web site. 〈http://www.csc.fi/suomi/funet/middleware/english/index.phtml〉, 2008.
13. InCommon Federation web site. 〈http://www.incommonfederation.org〉, 2008.
14. International Telecommunication Union - Telecommunication standardization sector, focus group on identity management (FG IdM). Report on identity management use cases and gap analysis, 2007.
15. Johnson D, Perkins C, Arkko J. Mobility support in IPv6. RFC 3775, 2004.
16. Kang M, Seon Hong C, Jung Koo H, Haeng Lee G. An SAML based SSO architecture for secure data exchange between user and OSS. The Asia-Pacific network operators and management symposium (APNOMS), 2005.
17. Kohlmayer F, Tschofenig H, Marín López R, Zapata Hernandez S, García Segura P, Gómez-Skarmeta AF. GSABA: a generic service authorization architecture. In: Proceedings of first ACM/IEEE international workshop on mobility in the evolving internet architecture (MobiArch), 2006.
18. Koodli R. Fast handovers for mobile IPv6. RFC 4068, 2005.
19. Kormann D.P., and Rubin A.D. Risks of the passport single sign-on protocol vol. 33 (2000), Computer Networks, Elsevier Science Press p. 51-3
20. LAN MAN Standards committee of the IEEE computer society. Standard for port based network access control. IEEE draft P802.1X/D11, March 2001.
21. López DR, Macias J, Molina M, Rauschenbach J, Solberg A, Stanica M. Deliverable DJ5.2.3,2: Best practice guide - AAI cookbook, second edition. GN2 JRA5. GÉANT 2, 2007.
22. López G, Cánovas O, Gómez-Skarmeta AF. Use of XACML policies for a network access control service. In: 4th International workshop for applied PKI, IWAP 05, 2005.
23. López G., Cánovas O., Gómez-Skarmeta A.F., Jiménez J.D., and Marín R. A network access control approach based on the AAA architecture and authorization attributes. Journal of Network and Computer Applications 30 3 (2007) 900-919
24. López G, Cánovas O, Gómez-Skarmeta AF, Sánchez M. A proposal for extending the eduroam infrastructure with authorization mechanisms. Standards & Interfaces, 2008.
25. Maler E, Misha P, Philpott R. Assertions and protocol for the OASIS security assertion markup language (SAML) V1.1, OASIS standard, 2003.
26. Matsunaga Y, Sanz Merino A, Suzuki T, Katz RH. Secure authentication system for public WLAN roaming. In: Proceedings of the first ACM international workshop on wireless mobile applications and services on WLAN hotspots (WMASH), 2003.
27. Microsoft Corporation. A technical reference for InfoCard v1.0 in windows. August 2005.
28. Palekar A, Simon D, Salowey J, Zhou H, Zorn G, Josefsson S. Protected EAP protocol (PEAP), IETF Draft, 2004.
29. Recordon D, Fitzpatrick B. OpenID Authentication 1.1. May 2006.
30. Rigney C, Rubens A, Simpson W, Willens S. Remote authentication dial in user service (RADIUS). Internet research task force, June 2000. Request for comments (RFC) 2865.
31. Samar V. Single sign-on using cookies for web applications. In: Proceedings of the 8th workshop enabling technologies on infrastructure for collaborative enterprises (WETICE), IEEE CS Press; 1999. p. 158-68.
32. Sánchez M, López G, Cánovas O, Gómez-Skarmeta AF. Bootrsrapping a global SSO from network access control mechanisms. In: Proceedings of the fourth European PKI workshop (EuroPKI'07), 2007.
33. Scavo T, Cantor S. Shibboleth architecture. Technical overview. Working draft 02, June 2005.
34. Shin M, Ma J, Arbaugh WA. The design of efficient internetwork authentication for ubiquitous wireless communications. University of Maryland, Technical Report, 2006.
35. Soliman H, Castelluccia C, El Malki K, Bellier L. Hierarchical mobile IPv6 mobility management (HMIPv6). RFC 4140, 2005.
36. SWITCH Federation web site. 〈http://www.switch.ch/aai〉, 2008.
37. The Bologna process. Towards the European Higher Education Area. March 2008. 〈http://ec.europa.eu/education/policies/educ/bologna/bologna\_en.html〉.
38. Wierenga K, Winter S (main editors). Deliverable DJ5.1.4. Inter-NREN roaming architecture. Description and Development Items, September 2006. GN2 JRA5. GÉANT 2.