Out-of-band federated authentication for Kerberos based on PANA

Pérez-Méndez, Alejandro; Pereñíguez-García, Fernando; Marin-Lopez, Rafael; López-Millán, Gabriel

doi:10.1016/j.comcom.2013.07.004

Cited by 8 publications

(1 citation statement)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Thus, the usage of Kerberos has been limited to controlling the access of local users registered in the service's domain. Recently, some alternatives, such as FedKERB, PanaKERB, and EduKERB, have been proposed to obtain the benefits of Kerberos without deploying an alternative cross‐realm infrastructure, by using a more common and widely used federation substrate: the AAA‐based federation. However, these solutions add or inflict changes in several entities and require new amendments to standards and related implementations.…”

Section: Related Workmentioning

confidence: 99%

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

Méndez

Millán

López

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

Identity federations enable users, service providers and identity providers from different organizations to exchange authentication and authorization information in a secure way. In this paper we present a novel identity federation architecture for cloud services based on the integration of a cloud identity management service with an Authentication, Authorization and Accounting (AAA) infrastructure. Specifically we analyse how this type of AAA-based federation can be smoothly integrated into OpenStack, the leading open source cloud software solution, using the IETF Application Bridging for Federated Access Beyond web (ABFAB) specification for authentication and authorization. We provide details of the implementation undertaken in GÉANT s CLASSe project, and show its validation in a real testbed.

show abstract

Section: Related Workmentioning

confidence: 99%

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

Méndez

Millán

López

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

A virtual bridge certificate authority‐based cross‐domain authentication mechanism for distributed collaborative manufacturing systems

Zhang

Wang

Khan

2014

Security Comm Networks

View full text Add to dashboard Cite

The virtual enterprise (VE) is a new collaborative intelligent manufacturing paradigm that pools the core competencies of its member enterprises through computer networks to exploit transient market opportunities. The successful operation of such an organization is strongly dependent on its information securities, in which cross‐domain authentication among entities of different member enterprises is a crucial issue. This problem is particularly difficult in VEs because of their collaborative nature in terms of agility, market dynamics, low cost, and diversity of collaboration modes. In this paper, we put forward a novel virtual bridge certificate authority (BCA) trust model, based on which an efficient cross‐domain authentication scheme is further presented. The proposed scheme is implemented by the distributed verifiable secret sharing protocol and the threshold elliptic curve cryptosystem signature algorithm. It has the same advantages of simple construction and short length of inter‐enterprise certification paths as the BCA model but does not need to create and maintain a dedicated physical BCA. In addition, the proposed scheme has the merits of high bit security, high efficiency, low cost, conspiracy attack resistance, and adaptability to diverse collaboration modes of VE. Therefore, the scheme is suitable for cross‐domain authentications in VEs, especially for resource‐limited applications. Copyright © 2014 John Wiley & Sons, Ltd.

show abstract

Secure Key Distribution Prototype Based on Kerberos

Barrios

Fuentes

2020

Data Analysis and Optimization for Engineering and Computing Problems

View full text Add to dashboard Cite

Out-of-band federated authentication for Kerberos based on PANA

Cited by 8 publications

References 36 publications

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

Integrating an AAA‐based federation mechanism for OpenStack—The CLASSe view

A virtual bridge certificate authority‐based cross‐domain authentication mechanism for distributed collaborative manufacturing systems

Secure Key Distribution Prototype Based on Kerberos

Contact Info

Product

Resources

About