A kerberized architecture for fast re-authentication in heterogeneous wireless networks

Authors:
Rafa Marin-Lopez;Fernando Perefñiguez-Garcia;Yoshihiro Ohba;Fernando Bernal-Hidalgo;Antonio F. Gomez
Affiliations:
Department of Information and Communications Engineering, Facultad de Informatica, University of Murcia, Murcia, Spain;Department of Information and Communications Engineering, Facultad de Informatica, University of Murcia, Murcia, Spain;Toshiba Corporate Research and Development Center, Kawasaki, Japan;Department of Information and Communications Engineering, Facultad de Informatica, University of Murcia, Murcia, Spain;Department of Information and Communications Engineering, Facultad de Informatica, University of Murcia, Murcia, Spain
Venue:
Mobile Networks and Applications
Year:
2010

Citing 14
Cited 1

The KryptoKnight family of light-weight protocols for authentication and key distribution

IEEE/ACM Transactions on Networking (TON)
AAA in vehicular communication on highways with ad hoc networking support: a proposed architecture

Proceedings of the 2nd ACM international workshop on Vehicular ad hoc networks
Improving Cross-domain Authentication overWireless Local Area Networks

SECURECOMM '05 Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks
Reducing Reauthentication Delay in Wireless Networks

SECURECOMM '05 Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks
Improved EAP keying framework for a secure mobility access service

Proceedings of the 2006 international conference on Wireless communications and mobile computing
EAP methods for wireless networks

Computer Standards & Interfaces
Kerberized handover keying: a media-independent handover key management architecture

Proceedings of 2nd ACM/IEEE international workshop on Mobility in the evolving internet architecture
Network-Layer Assisted Mechanism to Optimize Authentication Delay during Handoff in 802.11 Networks

MOBIQUITOUS '07 Proceedings of the 2007 Fourth Annual International Conference on Mobile and Ubiquitous Systems: Networking&Services (MobiQuitous)
A transport-based architecture for fast re-authentication in wireless networks

SARNOFF'09 Proceedings of the 32nd international conference on Sarnoff symposium
3-party approach for fast handover in EAP-based wireless networks

OTM'07 Proceedings of the 2007 OTM confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part II
Authentication in fast handover of mobile IPv6 applying AAA by using hash value

MSN'05 Proceedings of the First international conference on Mobile Ad-hoc and Sensor Networks
Proactive key distribution using neighbor graphs

IEEE Wireless Communications
Hybrid multilayer mobility management with AAA context transfer capabilities for all-IP networks

IEEE Wireless Communications
Media-independent pre-authentication supporting secure interdomain handover optimization

IEEE Wireless Communications

A fast handover authentication mechanism based on ticket for IEEE 802.16m

IEEE Communications Letters

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we present an architecture for fast re-authentication, based on the use of the Kerberos protocol, which allows the reduction in the latency introduced for an authentication process based on the Extensible Authentication Protocol (EAP) when providing network access in mobile networks. The architecture supports two modes of operation, proactive and reactive, to reduce the latency added for the authentication processes which is required when a mobile user changes network points of attachment. Moreover, we provide implementation details on a representative wireless testbed and obtain experimental results from the testbed. Those results are used for simulations to evaluate the performance of the proposed architecture for different deployment scenarios and parameters. We also provide a mathematical analysis to compute authentication delay and validate the simulation results. Performance comparison based on the experiment, simulation and analysis show that the proposed architecture can reduce the authentication delay, compared to other alternatives in typical deployment scenarios.