Interdomain Access Control with Policy Routing

  • Authors:
  • Jyh-haw Yeh;Randy Chow;Richard Newman-Wolfe

  • Affiliations:
  • -;-;-

  • Venue:
  • FTDCS '97 Proceedings of the 6th IEEE Workshop on Future Trends of Distributed Computing Systems
  • Year:
  • 1997

Quantified Score

Hi-index 0.00

Visualization

Abstract

An internetwork consists of heterogeneous domains managed under different administrative authorities. For secure interdomain resource sharing, it is necessary to implement an Interdomain Access Control (IAC) protocol to regulate traffic flow between end-to-end domains and among transit domains. Control of traffic flow in transit domains is closely related to network packet routing protocols. Therefore, when designing an interdomain access control protocol it is logical to integrate the protocol with the underlying network routing facilities. This paper proposes two interdomain access control protocols: KIAC (Key-based IAC) and TIAC (Ticket-based IAC). Both protocols are built on top of the IDPR (InterDomain Policy Routing) suggested by RFC 1479. The implementation of KIAC requires each domain to maintain a session key database for forwarding data packets. The TIAC protocol is an enhancement of KIAC to reduce storage requirements. The overhead complexities of the two protocols are analyzed.