A study on ticket-based AAA mechanism including time synchronization OTP in ubiquitous environment

Abstract

Ubiquitous computing environment must provide users with seamless anytime and anywhere access to services. However, the ubiquitous computing environment contains many weaknesses in security, and creates many problems for user's anonymity and privacy. Therefore, we proposed a novel ticket-based AAA(Authentication, Authorization, Accounting) mechanism for ubiquitous environment. The AAA mechanism is information security technology that systematically provides authentication, authorization and accounting functions, not only in the existing wire network but also in the rapidly developing ubiquitous network, with various ubiquitous services and protocol. Currently, IETF(Internet Engineering Task Force) AAA Working Group deals with about secure AAA protocol in ubiquitous network and studies methods that offer secure authentication through mobility of Mobile Nodes. Therefore, in this paper, the AAAH(Home Authentication Server) authenticates the Mobile device. After that, it uses a ticket issued from AAAH, even if the device moves to a foreign network, and can provide service in foreign network without accessing by AAAH. We also present a mechanism that can offer user privacy and anonymity. This proposed mechanism can reduce the signal and reduce the delay of message exchanged using tickets, can offer persistent service and heightened security and efficiency. © Springer-Verlag Berlin Heidelberg 2007.