ZHANG Hong. Research on smart authentication authorization and accounting in next generation network[J]. 2006, (2): 95-99.DOI:
下一代网络智能认证、授权和计费问题研究
摘要
用户在接入网络和使用网络服务时
过多的账号对身份认证、授权和计费(AAA)带来不便
并且许多网络服务提供商因没有合适的AAA手段而发展受限。针对上述问题
提出智能AAA的方案
设计了智能AAA的结构
并采用了基于SOAP的安全断言(SAML)来解决智能AAA与其它服务提供商信息交互的问题
最后给出了完整的身份认证流程。分析表明
智能AAA可以对用户的认证、授权和计费做到统一智能管理
为用户和网络服务商带来很大的便利。
Abstract
With the fast development of Internet
there were more and more network access methods and network services.But too many accounts were inconvenient for users to perform the AAA(authentication
authorization and accounting)
and many service providers hadn’t appropriate AAA mechanisms.In order to solve these problems
the smart AAA was introduced.The architecture of the smart AAA was designed
and SOAP based SAML was used to exchange security information between smart AAA and other service providers.Analysis indicates the smart AAA will provide the universal and intelligent AAA services for both users and operators.