Authorization and authentication services are the major components protecting integrity and authenticity. Authorization control service provides a mechanism to verify user permission to access services. In wireless networks, not only users may change roles but also services can be added, removed or modified more frequently. Although Role-Based Access Control or RBAC can simplify the management of dynamic users, it does not consider dynamic permissions between roles and services. To allow dynamic permission assignment between roles and services, in this paper, we present an authorization control model extended from RBAC using packages. The authorization control is specially designed to achieve optimal cost for large scale and dynamic networks of users and services.

No abstract

Group authentication provides authentication for members of communication group between services and users in insecure environments such as wireless networks. Most of the group authentication models do not consider the risk of compromised share secrets in the group under various security threats such as cryptanalysis. Although authentication key exchange in groups can benefit from group key management to minimise this risk, the group key management schemes are inefficient for authentication services. In this paper, a group authentication model for wireless networks services using a group key management is presented. The group key management is specially designed with forward secrecy and session keys for efficient and secure key exchange. Based on this secure session keys, a dynamic group authentication scheme provides a secure and efficient group authentication for wireless network users and services.

No abstract

No abstract