AAA-Arch Authentication Schemes

1
AAA-ArchAuthentication Schemes

• Stephen Farrell
• stephen.farrell_at_baltimore.ie
• John Vollbrecht
• jrv_at_interlinknetworks.com
• Joe Salowey
• joes_at_wrq.com
• Standish Stewart
• sstewart_at_interlinknetworks.com

2
What were doing

• Starting work...
• Similar to what we did with authorization
• Analyse authentication schemes
• no invention though!
• Figure out some models
• Match those with the authorization models

3
Factors

• Communications paths (topology)
• Establishes shared secrets or not
• Requires time synchronisation or not
• Mutual authentication or not
• Type of pre-established data (root info,
  biometrics, shared-secrets)
• Allows impersonation or not

4
User -gt Auth. Server
AS
User
Application
5
App. -gt Auth. Server
AS
User
Application
6
Triangle?
AS
User
Application