AAAARCH%20

1
AAAARCH irtf Research group

• Spin out from AAA wg in fall of 99
• Address architecture issues for
• Multi domain authorization and accounting
• Services that incorporate other services
• Auditing cross organization service
• Cross domain authentication and security
  associations
• http//www.phys.uu.nl/wwwfi/aaaarch

2
AAAARCH - goals

• Deal with AAA issues beyond Network Access
  requirements addressed by AAA-wg
• Provide architectural insight into AAA for
  multidomain issues
• Bring requirements for protocols and services to
  ietf for implementation either in existing wgs
  or by chartering new wgs

3
Active AAARCH work areas

• Multidomain policy working on model for
  multidomain policy
• Attempting a policy taxonomy
• Accounting policy allowing policy for
  accounting to be defined across domains
• Session and transaction identifiers and their
  relationship
• Relationship between authentication and
  authorization
• Binding authorizations to a chain of security
  associations
• Lots of examples

4
AAA protocol Data representation Issues

• Support multiple services
• Example -Authorize and provision QoS and Mobile
  Access if both are needed for a particular setup
• Support parallel proxy authorizations
• Example get approval from Bank for credit and
  from theater for prior reservation

5
AAAARCH and AAA-wg

• AAARCH would like to be a focus for architectural
  issues
• Forum to discuss and document architectural
  issues raised by the AAA-wg and others
• Feedback to AAA-wg on architectural implications
  of Protocol decisions
• AAAARCH is an open research group and
  encourages participation
• http//www.phys.uu.nl/wwwfi/aaaarch