JINI

1
JINI

• An Authentication and Authorization Architecture
  for Jini Services

2
An ICSI Story

• Clients needs services ? ICSI newcomers need a
  flat
• Services needs clients ? Landlords want to lease
  their flats
• Marketplace needed ? Home Finders Bulletin (or
  ask Diane)
• How to find marketplace ? Yellow Pages

3
An ICSI Story, Part 2

• Communication marketplace -gt Specify preferences
  -gt List of offerings, Tel-No.
• Client-Server communication -gt ICSI newcomer
  calls a landlord
• Problems -gt List out of date
• Solution -gt Landlord must lease entry in list,
  renewal, otherwise remove from list

4
Housing Broker ???
Proxy
Proxy
Proxy
Template
Service
Client
Proxy
5
Jini Concepts

• Discovery (Yellow Pages)
• Lookup (Home Finders Bulletin)
• Leasing (Leasing of list entry)
• Remote Events
• ICSI newcomers receives new offers
• Transaction
• Key exchange at HFB Key ? Money

6
Home Environment

• TV service Storage service VCR service
• lawn sprinkler weather service
• defect -gt maintenance service -gt appointment
  service
• general leasing appropriate for spontaneous
  networking
• PDA -gt conference room -gt printer access

7
Why Security?

• Only subscribers should get offers
• authentication needed
• Different packages are offered standard 30,
  premium 50 restricted access
• authorization required
• Internet communication insecure data can be
  read, altered or replayed
• Integrity, Confidentiality required

8
Secure Communication

• Proxies are signed (Integrity Identity)
• All communication is encrypted using a secret
  session key (Confidentiality)
• Message Authentication Code (Integrity)
• Transaction Numbers (Replay attacks)

9
The Architecture
Client Proxy
Service
RemoteCb Handler
Login Service
Challenge Resp. Srv.
BlueDot Service
Policy Service
UserDB Service
10
Highlights

• Uses standard Java technology
• Transparency for the client
• Minimal Overhead at server side
• Powerful login policies
• First Prototype up and running
• Internal Java Authorizations mechanisms
• Well adapted for home services TV, fridge