• 한국전자통신학회논문지
• /
• 제12권2호
• /
• pp.295-300
• /
• 2017

AAA는 사용자에 대한 안전하고 신뢰성 있는 인증(Authentication)을 통해 사용자에게 주어진 권한과 서비스 수준을 결정하여 인가(Authorization)하고, 사용자 자원의 사용정보를 과금, 감사, 리포팅 등을 위한 계정관리(accounting) 기능을 체계적으로 통합 관리하는 정보보호 프로토콜이다. 본 논문에서는 RADIUS와 TACACS+가 적용된 라우터와 서버 기반의 네트워크를 설계하기 위해 토폴로지를 설계한 후 패킷 트레이서를 이용하여 공통 가상 망을 구현한 다음, 시뮬레이션을 통해서 인증에 대한 검증구현 사례를 제시하였다.

• 대한전자공학회:학술대회논문집
• /
• 대한전자공학회 2004년도 학술대회지
• /
• pp.581-584
• /
• 2004

Currently, there are many subscriber access networks: PSTN, ADSL, Cellular Network, IMT200 and so on. To these service providers that provide above network service, it is important that they authenticate and authorize legal subscribers and account for their usage. At present, There exist the several protocols that Support AAA(Authentication, Authorization and Accounting) service : RADIUS, Diameter, TACACS+. Nowadays, RADIUS has used for AAA service widely. It has been extended to support other access network environment. So, we extend RADIUS to support environment of Mobile IPv6. Mobile IPv6 uses IPsec as a security mechanism, basically. But, IPsec is a heavy security technology for small, portable, mobile device. Especially, it is serious at IKE, the subset of IPsec. IKE is a key distribution protocol that distributes the key to the endpoints of IPsec. In t:lis paper, we extend RADIUS to support environment of Mobile IPv6 and simplify the IKE phase of IPsec by AAA system distributing the keys by using its security communication channel. Namely, we propose the key distribution method for IPsec SA establishment between mobile node and home agent. The suggested method was anticipated to be effective at low-power, low computing deyice. Finally, end users feel the faster authentication.