Reducing communication overhead for nested NEMO networks: Roaming authentication and access control structure

IEEE Transactions on Vehicular Technology

Volumn 60, Issue 7, 2011, Pages 3408-3423

  Lim, Hyung Jin ^a   Kim, Moonseong ^b   Lee, Jong Hyouk ^c   Seo, Dae Hee ^d   Chung, Tai M ^e  

^a Korea Financial Security Agency   (South Korea)

^b Korea Intellectual Property Office   (South Korea)

^c INRIA   (France)

^d Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

^e Sungkyunkwan University   (South Korea)

Author keywords

Accounting (AAA); authentication; authorization; IP mobility; NEtwork MObility (NEMO); roaming service

Indexed keywords

AUTHENTICATION PROTOCOLS; AUTHENTICATION TIME; AUTHORIZATION; COMMUNICATION OVERHEADS; COMMUNICATION PERFORMANCE; CONTROL STRUCTURE; DESIGN RATIONALE; IP MOBILITY; MUTUAL AUTHENTICATION; NETWORK MOBILITY; NETWORK MOBILITY (NEMO); PUBLIC KEY CERTIFICATES; REVENUE STREAMS; ROAMING SERVICES; WIRELESS INTERNET SERVICE PROVIDERS;

COMMUNICATION; COST REDUCTION; INTERNET PROTOCOLS; INTERNET SERVICE PROVIDERS; MOBILE DEVICES; WIRELESS NETWORKS;

AUTHENTICATION;

EID: 80052825573     PISSN: 00189545     EISSN: None     Source Type: Journal    
DOI: 10.1109/TVT.2011.2158864     Document Type: Article

References (51)

1. D. Johnson and J. Arkko, "Mobility support in IPv6," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3775, Jun. 2004.
2. V. Devarapalli, R. Wakikawa, A. Petrescu, and P. Thubert, "Network mobility basic support protocol," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3963, Jan. 2005.
3. T. Ernst and H. Lach, "Network mobility support terminology," Internet Eng. Task Force, Montreal, QC, Canada, RFC 4885, Jul. 2007.
4. S. Glass, T. Hiller, S. Jacobs, and C. Perkins, "Mobile IP authentication, authorization, and accounting requirements," Internet Eng. Task Force, Montreal, QC, Canada, RFC 2977, Oct. 2000.
5. C. Perkins, "Mobile IP joins forces with AAA," IEEE Pers. Commun., vol. 7, no. 4, pp. 59-61, Aug. 2000.
6. P. Engelstad, T. Halselstad, and F. Paint, "Authentication access for IPv6 supported mobility," in Proc. ISCC, 2003, pp. 569-575.
7. B. Lee, D. Choi, H. Kim, S. Sohn, and K. Park, "Mobile IP and WLAN with AAA authentication protocol using identity-based cryptography," in Proc. ICT, 2003, pp. 597-603.
8. S. Zrelli and Y. Shinoda, "Single sign-on framework for AAA operations within commercial mobile network," in Proc. 1st ARES, Apr. 2006, pp. 1-8.
9. D. Binet, A. Martin, and B. Gaabab, "A proactive authentication integration for the network mobility," in Proc. 3rd ICWMC, 2007, p. 53.
10. C. Rigney, A. Rubens, W. Simpson, and S. Willens, "Remote authentication dial in user service," Internet Eng. Task Force, Montreal, QC, Canada, Tech. Rep. RFC 2865, Jun. 2000.
11. B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, and H. Levkowetz, "Extensible authentication protocol," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3748, Jun. 2004.
12. D. Simon, B. Aboba, and R. Hurst, "The EAP-TLS authentication protocol," Internet Eng. Task Force, Montreal, QC, Canada, RFC 5216, Mar. 2008.
13. D. Forsberg, Y. Ohba, B. Patil, and H. Tschofenig, "Protocol for carrying authentication for network access (PANA)," Internet Eng. Task Force, Montreal, QC, Canada, RFC 5191, May 2008.
14. P. Calhoun and J. Arkko, "Diameter base protocol," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3588, Sep. 2003.
15. C. Neuman, T. Yu, S. Hartman, and K. Raeburn, "The Kerberos network authentication service (V5)," Internet Eng. Task Force, Montreal, QC, Canada, RFC 4120, Jul. 2005.
16. B. Aboba and P. Calhoun, "RADIUS support for EAP," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3579, Jun. 2003.
17. P. Eronen, T. Hiller, and G. Zorn, "Diameter extensible authentication protocol (EAP) application," Internet Eng. Task Force, Montreal, QC, Canada, RFC 4072, Aug. 2005.
18. T. Ernst and K. Uehara, "Connecting automobiles to the Internet," in Proc. 3rd Int. Workshop ITST, Seoul, Korea, Nov. 2002, pp. 1-6.
19. 69th IETF Meeting MINUTES of AUTOCONF WG. [Online]. Available: http://www.ietf.org/proceedings/07jul/minutes/autoconf.txt
20. R. Wakikawa, P. Thubert, J. Bound, and B. McCarthy, "MANEMO Problem Statement," Internet Eng. Task Force draft (expired), Feb. 2007.
21. M. Dunmore, H. Kara, and B. McCarthy, Description of IPv6 Network Mobility Demonstrators, 6NET Project. [Online]. Available: http://www.6net.org/ publications/deliverables/D4.6.1.pdf
22. C. Ng and T. Tanaka, Usage Scenario and Requirements for AAA in Network Mobility Support, Dec. 2002. Internet Eng. Task Force Internet draft (expired). [Online]. Available: http://www.mobilenetworks.org/ nemo/drafts/draft-ng-nemo- aaa-use-00.txt
23. S. Zrelli, T. Ernst, and D. Binet, "Access control architecture for nested mobile environments in IPv6," in Proc. 4th CSNA, Jun. 2005, pp. 1-11.
24. J. Bournelle, G. Valadon, D. Binet, S. Zrelli, and J. Combes, "AAA considerations within several NEMO deployment scenarios," in Proc. Workshop Netw. Mobility, Jan. 2006, pp. 1-10.
25. M. Long, C. Wu, and J. D. Irwin, "Localized authentication for internetwork roaming across wireless LANs," Proc. Inst. Elect. Eng. Commun., vol. 151, no. 5, pp. 496-500, Oct. 2004.
26. M. Abadi and R. Needham, "Prudent engineering practice for cryptographic protocols," IEEE Trans. Softw. Eng., vol. 22, no. 1, pp. 6-15, Jan. 1996.
27. W. Stallings, Cryptography and Network Security. Upper Saddle River, NJ: Prentice-Hall, 2003.
28. ITU-T: "Recommendation X.509 (1997 E): information technology open systems interconnection-the directory: Authentication framework," Jun. 1997.
29. H. Kim and H. Afifi, "Improving mobile authentication with new AAA protocols," in Proc. Commun., May 2003, pp. 497-501.
30. S. Suzuki and K. Nakada, "An authentication technique based on distributed security management for the global mobility network," IEEE J. Sel. Areas Commun., vol. 15, no. 8, pp. 1608-1617, Oct. 1997.
31. K. Hwang and C. Chang, "A self-encryptionmechanism for authentication of roaming and teleconference services," IEEE Trans. Wireless Commun., vol. 2, no. 2, pp. 400-407, Mar. 2003.
32. Wikipedia, Replay Attack, Apr. 2009. [Online]. Available: http://en. wikipedia.org/wiki/Replay-attack
33. H. Krawczyk, M. Bellare, and R. Canetti, "HMAC: Keyed-hashing for message authentication," Internet Eng. Task Force, Montreal, QC, Canada, RFC 2104, Feb. 1997.
34. Advanced Encryption Standard, Federal Information Processing Standard Publication 197, Nov. 2001.
35. H. Fathi, S. Shin, K. Kobara, S. Chakraborty, H. Imai, and R. Prasad, "LR-AKE-based AAA for network mobility (NEMO) over wireless links," IEEE J. Sel. Areas Commun., vol. 24, no. 9, pp. 1725-1737, Sep. 2006.
36. C. de Laat, G. Gross, L. Gommans, J. Vollbrecht, and D. Spence, "Generic AAA architecture," Internet Eng. Task Force, Montreal, QC, Canada, RFC 2903, Aug. 2000.
37. M. Burrows, "A logic of authentication," Proc. R. Soc. Lond. A, vol. 426, no. 1871, pp. 233-271, Dec. 1989.
38. A. Hess and G. Schafer, "Performance Evaluation of AAA/mobile IP authentication," Tech. Rep. TKN-01-012, Tech. Univ. Berlin, Berlin, Germany, Aug. 2001. [Online]. Available: http://www-tkn.ee.tu-berlin.de/ publications/papers/tkn01-012.pdf
39. H. Fathi, S. Shin, K. Kobara, and H. Imai, "Secure AAA and mobility for nested mobile networks," in Proc. 7th ITST, 2007, pp. 1-6.
40. H.-J. Lim, M. Kim, J.-H. Lee, and T. Chung, "Route optimization in nested NEMO: Classification, evaluation and analysis from NEMO fringe stub perspective," IEEE Trans. Mobile Comput., vol. 8, no. 11, pp. 1554-1572, Nov. 2009.
41. E. Paik, "Performance enhancement for IPv6 network mobility," Ph.D. dissertation, Sch. Elect. Eng. Comput. Sci., Seoul Nat. Univ., Seoul, Korea, Aug. 2004.
42. B. OHara, P. Calhoun, and J. Kempf, "Configuration and provisioning for wireless access points problem statement," Internet Eng. Task Force, Montreal, QC, Canada, RFC 3990, Feb. 2005.
43. T. Clancy, M. Nakhjiri, V. Narayanan, and L. Dondeti, "Handover key management and re-authentication problem statement," Internet Eng. Task Force, Montreal, QC, Canada, RFC 5169, Mar. 2008.
44. A. Freier, P. Karlton, and P. Kocher, The SSL Protocol Version 3.0, Nov. 1996. [Online]. Available: http://wp.netscape.com/eng/ssl3/ draft302.txt
45. H. Rongyu, Z. Guolei, C. Chaowen, X. Hui, Q. Xi, and Q. Zheng, "A PK-SIM card based end-to-end security framework for SMS," Comput. Standards Interfaces, vol. 31, no. 4, pp. 629-641, Jun. 2009.
46. R. Hwang and S. Shiau, "Provably efficient authenticated key agreement protocol for multi-servers," Comput. J., vol. 50, no. 5, pp. 602-615, 2007.
47. B. C. Popescu and B. Crispo, "A DRM security architecture for home networks," in Proc. 4th ACM Workshop DRM, 2004, pp. 1-10.
48. C. Fan and Y. Lin, "Provably secure remote truly three-factor authentication scheme with privacy protection on biometrics," IEEE Trans. Inf. Forensics Security, vol. 4, no. 4, pp. 933-945, Dec. 2009.
49. D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, and W. Polk, "Internet X.509 public key infrastructure certificate and Certificate Revocation List (CRL) profile," Internet Eng. Task Force, Montreal, QC, Canada, RFC 5280, May 2008.
50. J.-H. Lee and T.-M. Chung, "Secure handover for proxy mobile IPv6 in next-generation communications: Scenarios and performance," Wireless Commun. Mobile Comput., vol. 11, no. 2, pp. 176-186, Feb. 2011.
51. E. Barker, W. Barker, W. Burr, W. Polk, and M. Smid, "Recommendation for key management," Nat. Inst. Standards Technol., Gaithersburg, MD, Spec. Pub. 800-57, Mar. 2007.