A universal access control method based on host identifiers for Future Internet

Authors:
Hongchao Wang;Hongke Zhang;Chi-Yuan Chang;Han-Chieh Chao
Affiliations:
National Engineering Laboratory for Next Generation Internet Interconnection Devices, Beijing Jiaotong University, 100044, Beijing, China;National Engineering Laboratory for Next Generation Internet Interconnection Devices, Beijing Jiaotong University, 100044, Beijing, China;Department of Electrical Engineering, National Dong Hwa University, Hualien, Taiwan;Department of Electrical Engineering, National Dong Hwa University, Hualien, Taiwan and Institute of Computer Science & Information Engineering and Department of Electronic Engineering, National I ...
Venue:
Computers & Mathematics with Applications
Year:
2010

Citing 6
Cited 0

Role-Based Access Control Models

Computer
Authentication, access control, and audit

ACM Computing Surveys (CSUR)
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
On context in authorization policy

Proceedings of the eighth ACM symposium on Access control models and technologies
An integrated approach to engineer and enforce context constraints in RBAC environments

ACM Transactions on Information and System Security (TISSEC)
Context-aware role-based access control in pervasive computing systems

Proceedings of the 13th ACM symposium on Access control models and technologies

Quantified Score

Hi-index	0.09

Visualization

Abstract

There have been many security events in the Internet. Many of them are due to arbitrary access permissions to the network resources of the malicious users, especially their free sending packets to anywhere in the network. However, current existing solutions such as ingress filtering and network firewalls cannot solve the problem of malicious access to the network flexibly and effectively. In this paper, we present an efficient access control method based on host identifiers, in which a safe and bidirectional authentication process is introduced whenever the host begins to access the network. Meanwhile, all the succeeding information exchanges between the host and the network can be controlled through the encrypt scheme negotiated during the access authentication process. Through analysis and experiments, we find that the proposed method has the following merits. First, our method has the capability to support various end-nodes to access the Internet in a uniform way. Second, with our method, end-nodes and the core network can establish a mutual trustworthy relationship to avoid any spoof from the other side. Third, our method can support host mobility very well.