Analysis of Handover Key Management schemes under IETF perspective

Computer Standards and Interfaces

Volumn 32, Issue 5-6, 2010, Pages 266-273

  Marin Lopez, R ^a   Ohba, Y ^b   Pereniguez, F ^a   Gomez, A F ^a  

^a UNIVERSITY OF MURCIA   (Spain)

^b TOSHIBA CORPORATION   (Japan)

Author keywords

EAP; Handover keying; Key management; Network access control; Security

Indexed keywords

CRITICAL ANALYSIS; EXTENSIBLE AUTHENTICATION PROTOCOLS; FLEXIBLE MECHANISMS; HANDOVER; INTERNET ENGINEERING TASK FORCES; KEY MANAGEMENT; KEY-DISTRIBUTION PROTOCOLS; LOW-LATENCY; MOBILE SCENARIOS; NETWORK ACCESS CONTROL; SEAMLESS HANDOVER; WORKING GROUPS;

AUTHENTICATION; INTERNET PROTOCOLS; MOBILE TELECOMMUNICATION SYSTEMS; SECURITY SYSTEMS;

NETWORK SECURITY;

EID: 77955333303     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2009.10.001     Document Type: Article

References (48)

1. J. Vollbrecht AAA authorization framework IETF RFC 2904 Aug. 2000
2. B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, and H. Levkowetz Extensible Authentication Protocol (EAP) RFC3748 June 2004
3. B. Aboba, D. Simon, and P. Eronen Extensible Authentication Protocol key management framework RFC 5247 August 2008
4. IEEE 802.11 (2007) Std., Telecommunications and Information Exchange between Systems - Local and Metropolitan Area Network - Specific Requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications IEEE Standards 2007
5. IEEE 802.16e standard: air interface for fixed and mobile broadband wireless access system Feb. 2006
6. D. Forsberg, Y. Ohba, B. Patil, H. Tschofenig, and A. Yegin Protocol for Carrying Authentication for Network Access (PANA) IETF Internet Draft, draft-ietf-pana-pana-18 Sept. 2007
7. C. Kauffman Internet Key Exchange (IKEv2) Protocol IETF RFC 4306 Dec. 2005
8. C. Politis, K. Chew, N. Akhtar, M. Georgiades, R. Tafazolli, and T. Dagiuklas Hybrid multilayer mobility management with AAA context transfer capabilities for all-IP networks IEEE Wireless Communications 11 2004 76 88
9. R.M. Lopez, A. Dutta, Y. Ohba, H. Schulzrinne, and A.F. Gomez Skarmeta Network-layer assisted mechanism to optimize authentication delay during handoff in 802.11 networks Proc. of the 5th Annual International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, ACM Mobiquitous 2007, Philadelphia, USA Aug. 2007 ACM
10. B. Aboba, and P. Calhoun RADIUS support for EAP IETF RFC 3579 June 2003
11. P. Eronen, T. Hiller, and G. Zorn Diameter Extensible Authentication Protocol (EAP) application IETF RFC 4072 Aug. 2005
12. D. Stanley, B. Aboba, and J. Walker Extensible Authentication Protocol (EAP) method requirements for wireless LANs IETF RFC 4017 March 2005
13. B. Aboba, M. Beadles, J. Arkko, and P. Eronen The network access identifier IETF RFC 2486 Dec. 2005
14. R. Dantu, G. Clothier, and Anuj Atri EAP methods for wireless networks Elsevier Computer Standards & Interfaces 29 2007 289 301
15. B. Aboba, and D. Simon PPP EAP TLS authentication protocol IETF RFC 2716 Oct. 1999
16. T. Clancy, M. Nakhjiri, V. Narayanan, and L. Dondeti Handover Key Management and Re-authentication Problem Statement IETF RFC 5169 March 2008
17. J. Salowey, L. Dondeti, V. Narayanan, and M. Nakhjiri Specification for the derivation of root keys from an Extended Master Session Key (EMSK) RFC 5247 August 2008
18. V. Narayanan, and L. Dondeti EAP extensions for EAP Re-authentication Protocol (ERP) IETF RFC 5296 Aug. 2008
19. M. Nakhjiri, and Y. Ohba Derivation, delivery and management of EAP based keys for handover and re-authentication IETF Internet Draft, draft-ietf-hokey-key-mgm-01 May 2007
20. Y. Ohba, Q. Wu, and G. Zorn EAP early authentication problem statement IETF Internet Draft, draft-ietf-hokey-preauth-ps-07 May 2009
21. R. Housley, and B. Aboba Guidance for Authentication, Authorization, and Accounting (AAA) key management IETF RFC 4962 July 2007
22. J. Vollbrecht, P. Eronen, N. Petroni, and Y. Ohba State machines for Extensible Authentication Protocol (EAP) peer and authenticator IETF RFC 4137 Aug. 2005
23. K. Gaonkar, L. Dondeti, V. Narayanan, and G. Zorn RADIUS attributes for domain-specific key request and delivery IETF Internet Draft, draft-gaonkar-radext-erp-attrs-03 Feb. 2008
24. L. Dondeti, J. Bournelle, L. Morand, and S. Decugis Diameter support for EAP Re-authentication Protocol IETF Internet Draft, draft-ietf-dime-erp-00.txt Jan. 2009
25. D. Harskin, Y. Ohba, M. Nakhjiri, and R. Marin Problem statement and requirements on a 3-party key distribution protocol for handover keying IETF Internet Draft, draft-ohba-hokey-3party-keydist-ps-01 March 2007
26. K. Hoeper, and Y. Ohba Distribution of EAP based keys for handover and re-authentication IETF Internet Draft, draft-ietf-hokey-key-mgm-06 April 2009
27. Y. Ohba, S. Das, and R. Marin An EAP method for EAP Extension (EAP-EXT) IETF Internet Draft, draft-ohba-hokey-emu-eap-ext-02 July 2007
28. R. Marin, P. Garcia, and A. Gomez-Skarmeta Cryptographic identity based solution for fast handover on EAP wireless networks The 9th International Conference on Mobile and Wireless Communications Networks, MWCN 2007 Sept. 2007 IEEE publisher Cork, Ireland 46 51
29. K.R. Choo, and Y. Hitchock Security requirements for key establishment proof models: revisiting Bellare-Rogaway and Jeong-Katz-Lee protocols Proc. of 10th Australasian Conference, ACISP 2005 July 2005 Springer-Verlag 429 442 Brisbane, Australia
30. Institute of Electrical and Electronics Engineers, Draft IEEE Standard for Local and Metropolitan Area Networks: Media Independent Handover Services IEEE Standards for Information Technology 2008
31. A. Dutta, T. Zhang, Y. Ohba, K. Taniuchi, and H. Schulzrinne MPA assisted Optimized Proactive Handoff Scheme Proc. of the Third Annual International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, ACM Mobiquitous 2005 July 2005 ACM Publisher 155 165 San Diego, USA
32. T. Aura, and M. Roe Reducing reauthentication delay in wireless networks Proc. of 1st IEEE Security and Privacy for Emerging Areas in Communication Networks, SECURECOMM 2005 Sept. 2005 IEEE 139 148 Athens, Greece
33. H. Kim, K.G. Shin, and W. Dabbous Improving cross-domain authentication over wireless local area networks Proc. of 1st International Conference on Security and Privacy for Emerging Areas in Communications Networks, SECURECOMM'05 Sept. 2005 IEEE Computer Society 103 109 Athens, Greece
34. R. Wienzek, and R. Persaud Fast re-authentication for handovers in wireless communication networks Proc. of The 5th International IFIP-TC6 Networking Conference May 2006 Springer Coimbra, Portugal 556 567
35. A. Mishra, M. Shin, N. Petroni, C. Clancy, and W. Arbaugh Proactive key distribution using neighbor graphs IEEE Wireless Communications 11 2004 26 36
36. S. Pack, and Y. Choi Fast inter-AP handoff using predictive- authentication scheme in a public wireless LAN Proc. of IEEE Networks 2002 (Joint ICN 2002 and ICWLHN 2002) Aug. 2002
37. R. Marin, P.J. Fernandez, and A.F. Gomez 3-party approach for fast handover in EAP-based wireless networks On the Move (OTM) Conferences, IS 2007 volume LNCS 4804 Nov. 2007 Springer Vilamoura, Portugal 1734 1751
38. Y. Ohba, S. Das, and A. Dutta Kerberized handover keying: a media-independent handover key management architecture Proc. of The 2nd ACM International Workshop on Mobility in the Evolving Internet Architecture, ACM MobiArch 2007, Kyoto, Japan Aug. 2007
39. S. Zrelli, and Y. Shinoda EAP Fast Re-Authentication Protocol (EAP-FRAP) IETF Internet Draft, draft-zrelli-eap-frap-01 July 2007
40. M.A. Kaafar, L. Benazzouz, F. Kamoun, and D. Males Kerberos-based authentication architecture for wireless LANs Proc. of IFIP Networking'04 volume LNCS 3042 May 2004 Springer Athens, Greece 1344 1353
41. H. Moustafa, G. Bourdon, and Y. Gourhant AAA in vehicular communication on highways with ad hoc networking support: a proposed architecture Proc. of the 2nd ACM International Workshop on Vehicular ad hoc Networks Sept. 2005 79 80 Cologne, Germany
42. H. Almus, E. Brose, and K. Rebensburg A Kerberos-based EAP method for re-authentication with integrated support for fast handover and IP mobility in wireless LANs Proc. of The 2nd International Conference on Communications and Electronics, ICCE 2008 June 2008 IEEE publisher Las Vegas, USA 61 66
43. Project authorization request for an amendment of an existing IEEE Standard 802.21-2008 https://mentor.ieee.org/802.21/dcn/09/21-09-0010-00-0sec- p802-21a-par.pdf
44. Y. Ohba Pre-authentication support for PANA IETF Internet-Draft, draft-ietf-pana-preauth-05 April 2009
45. C. Boyd, A. Mathuria. Protocols for Authentication and Key Establishment. Ed. Springer, 1st edition, Sept. 2003.
46. J.A. Clark, and J.L. Jacob A survey of authentication protocol literature Technical Report v1.0 1997 The Mitre Corporation
47. IST AVISPA Project 2001-39252. Automated Validation of Internet Security Protocols and Applications (AVISPA) http://www.avispa-project.org/
48. C. Neuman, T. Yu, S. Hartman, and K. Raeburn The Kerberos Network Authentication Service (V5) IETF RFC 4120 July 2005