ETRI-Knowledge Sharing Plaform

KOREAN
논문 검색
Type SCI
Year ~ Keyword

Detail

Conference Paper Efficient and User Friendly Inter-domain Device Authentication/Access Control for Home Networks
Cited 13 time in scopus Share share facebook twitter linkedin kakaostory
Authors
Jin Bum Hwang, Hyung Kyu Lee, Jong Wook Han
Issue Date
2006-08
Citation
International Conference on Embedded and Ubiquitous Computing (EUC) 2006 (LNCS 4096), v.4096, pp.131-140
Language
English
Type
Conference Paper
DOI
https://dx.doi.org/10.1007/11802167_15
Abstract
Device authentication can reinforce the security of the home network services by ensuring that only specific authorized devices by specific authorized users can access the services. And it is also a mandatory technology for context-aware services in which users do not participate in the service flow. In this paper, we propose a device authentication and access control scheme based on two-layered PKI approach for efficient communication and user convenience. The two layers of our model are Global PKI layer and Localized PKI layer. Global PKI layer uses conventional PKI model. There is only one global root CA, and certificate verification is performed by validating the certificate-chain linked to the root CA. Otherwise, in Localized PKI layer, each home gateway takes a role of root CA which is responsible for issuing device certificates to the devices belong to its domain. We use Global PKI layer for device registration and authentication of inter-home-network, but use Localized PKI layer to authenticate each end-device. Based on this separating, our model provides secure, efficient and user friendly multi-domain device authentication protocols. We also provide a convenient access control scheme using Attribute Mapping Certificate. © IFIP International Federation for Information Processing 2006.
KSP Keywords
Access control scheme, Authentication and Access Control, Authorized users, Belong to, Context-aware service, Home Network, Home gateway, Inter-domain, International federation, Multi-Domain, Network service