Criteria for Evaluating AAA Protocols for Network Access

Aboba, Bernard; Calhoun, Pat; Glass, Steven; Hiller, Tom; McCann, Peter J.; Shiino, H.; Zorn, Glen; Dommety, Gopal; Perkins, Charles E.; Patil, Basavaraj; Mitton, David; Manning, Serge; Beadles, M.; Walsh, P.; Chen, X.; Sivalingham, S.; Hameed, A.; Munson, M.; Jacobs, Stuart; Lim, Byeong Woo; Hirschman, B.; Hsu, Raymond K.; Yang, Xu; Campbell, E.; Baba, Shinichi; Jaques, E.

doi:10.17487/rfc2989

Cited by 24 publications

(15 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The examples users listed above reflect one degree of freedom. How the instructor "stages" the wiki is another, and finally the authentication, authorization and accounting (AAA) troika from information security is another degree of freedom [Aboba et al, 2000;Egan and Mather, 2005] The instructor can stage the wiki in a number of ways. This pedagogical choice should be based on the objectives of the assignment.…”

Section: Wiki Setupmentioning

confidence: 99%

Wikis for Teaching and Learning

Mindel

Verma²

2006

CAIS

View full text Add to dashboard Cite

An academic course presents an opportunity for all participants to collaborate for improving their knowledge. This collective improvement of knowledge is typically documented via material provided by the instructor and notes and assignments prepared by students. Over the course of a semester, these materials provide not only the collective knowledge in that course, but also provide a chronological history of how the knowledge base evolved. The focus of this study is wiki collaboration in teaching & learning contexts.A wiki is a medium in which a group of individuals can work together asynchronously on an idea and easily capture the essence in a reusable format. Technically, a wiki is a collection of hyperlinked Web pages that are assembled with wiki software. With wikis, the line between reader and contributor is intentionally blurred. Further, wiki use reflects the view of an instructor as one who facilitates information sharing among learners rather than simply transmitting knowledge from themselves to their students. Our initial motivation to explore the usefulness of wikis for teaching and learning was driven by the fact that wikis provide a medium in which several individuals could asynchronously work together on an idea and easily capture the essence in a reusable format. We found that: (1) Wikis can be can be used for a variety of tasks ranging from business analyses to analyzing policy positions to serving as a signup sheet for students to self organize; (2) Instructor support and facilitation is key; and (3) Ease-of-use issues are present but do not preclude success.

show abstract

Section: Wiki Setupmentioning

confidence: 99%

Wikis for Teaching and Learning

Mindel

Verma²

2006

CAIS

View full text Add to dashboard Cite

show abstract

“…Corporate security policies was therefore expressed in terms of access-control policies as applied to subjects in certain roles seeking access to objects residing within a given administrative domain. This problem was often referred to as Authentication, Authorization and Audit (AAA) in the 1990s [21]. Part of the AAA model developed during the 1990s was an abstraction of functions pertaining to deciding access rules, from functions pertaining to enforcing them.…”

Section: Policy-based Access Control and Authorizationmentioning

confidence: 99%

A Federated Authorization Framework for Distributed Personal Data and Digital Identity

Hardjono¹

2019

Preprint

View full text Add to dashboard Cite

The digital identity problem is a complex one in large part because it involves personal data, the algorithms which compute reputations on the data and the management of the identifiers that are linked to personal data. The reality of today is that personal data of an individual is distributed throughout the Internet, in both private and public institutions, and increasingly also on the user's devices. In order to empower individuals to have a say in who has access to their personal data and to enable individuals to make use of their data for their own purposes, a coherent and scalable access authorization architecture is required. Such an architecture must allow different data holders, data providers and user-content generators to respond to an individual's wishes with regards to consent in a federated fashion. This federation must allow an individual to easily manage access policies and provide consent as required by current and forthcoming data privacy regulations. This paper describes the User Managed Access (UMA) architecture and protocols that provide the foundation for scalable access authorization.

show abstract

“…Moreover its architecture should be redundant and failsafe. AAA protocol requirements have been defined in (Aboba et al, 2000). The basic requirements are: (1) Scalability, (2) Fail-over, (3) Mutual authentication between the client and the server, (4) Transmission level security, (5) Data object Confidentiality, (6) Data object Integrity, (7) Certificate transport, (8) Reliable AAA transport mechanism, (9) Run Over IPv4 and IPv6, (10) Auditability, (11) Ability to carry service-specific attributes.…”

Section: Aaa Architecturesmentioning

confidence: 99%