search query: @keyword agentti / total: 10
reference: 6 / 10
« previous | next »
Author:He, Guoyou
Title:Interoperation between RADIUS and Diameter Protocols
RADIUS ja Diameter protokollien yhteiskäyttö
Publication type:Licentiate thesis
Publication year:2005
Pages:147      Language:   eng
Department/School:Sähkö- ja tietoliikennetekniikan osasto
Main subject:Tietoverkkotekniikka   (S-38)
Supervisor:Kantola, Raimo
Instructor:Ott, Jörg
OEVS:
Electronic archive copy is available via Aalto Thesis Database.
Instructions

Reading digital theses in the closed network of the Aalto University Harald Herlin Learning Centre

In the closed network of Learning Centre you can read digital and digitized theses not available in the open network.

The Learning Centre contact details and opening hours: https://learningcentre.aalto.fi/en/harald-herlin-learning-centre/

You can read theses on the Learning Centre customer computers, which are available on all floors.

Logging on to the customer computers

  • Aalto University staff members log on to the customer computer using the Aalto username and password.
  • Other customers log on using a shared username and password.

Opening a thesis

  • On the desktop of the customer computers, you will find an icon titled:

    Aalto Thesis Database

  • Click on the icon to search for and open the thesis you are looking for from Aaltodoc database. You can find the thesis file by clicking the link on the OEV or OEVS field.

Reading the thesis

  • You can either print the thesis or read it on the customer computer screen.
  • You cannot save the thesis file on a flash drive or email it.
  • You cannot copy text or images from the file.
  • You cannot edit the file.

Printing the thesis

  • You can print the thesis for your personal study or research use.
  • Aalto University students and staff members may print black-and-white prints on the PrintingPoint devices when using the computer with personal Aalto username and password. Color printing is possible using the printer u90203-psc3, which is located near the customer service. Color printing is subject to a charge to Aalto University students and staff members.
  • Other customers can use the printer u90203-psc3. All printing is subject to a charge to non-University members.
Location:P1 Ark S80     | Archive
Keywords:AAA
RADIUS
Diameter
interoperation
agent
AAA
RADIUS
Diameter
yhteiskäyttö
agentti
Abstract (eng): Authentication, Authorization and Accounting (AAA) protocols such as Terminal Access Control System (TACACS) and Remote Authentication Dial-In User Service (RADIUS) were initially deployed to provide dial-up Point-to-Point Protocol (PPP) and terminal server access.
With the growth of IP based communications and the introduction of new access technologies, all kinds of devices such as end users terminals, routers and various servers have increased dramatically in complexity and quantity.
It puts a lot of new requirements on AAA protocols.
To amend the deficiencies in security and functionalities of TACACS and RADIUS, Diameter as the next generation AAA protocol has been developed by IETF.
However, TACACS and RADIUS, especially RADIUS, are widely used.
It is required that any newly deployed AAA protocol has to interoperate with the widespread RADIUS protocol.

This thesis reviews the main AAA protocols, the widely used RADIUS protocol and the newly proposed Diameter protocol, and examines the current situation of defining the interoperation between these two protocols.
The problems on the definition and specifications of RADIUS and Diameter interoperation up to date are investigated and described.
We noticed that the current specifications on addressing the interoperation of RADIUS and Diameter are only some general guidelines that are incomplete and scattered in different documents.
However, the protocol interoperation has to be based on the translation of these two protocols.
The fundament of protocol translation is the mapping of messages and attributes of different protocols.
This thesis therefore identifies the internal differences between RADIUS and Diameter, establishes the mapping between RADIUS and Diameter at both the message level and the attribute level, describes the issues in protocol conversion, and proposes solutions for handling the revealed problems.

Security deficiencies are critical problems in RADIUS deployment.
This thesis also studies the security flaws of RADIUS and investigates the workarounds for these problems.
Diameter is the next generation AAA protocol, but it lacks the end-to-end security mechanism.
This thesis invented a solution of the end-to-end security for Diameter.
Based on the investigation of RADIUS and Diameter security, the thesis proposes a security scheme for RADIUS and Diameter interoperation.
Abstract (fin): Authentication Authorization ja Accounting (AAA) protokollat kuten Terminal Access Controller Access Control Cystem (TACACS) ja Remote Authentication Dial-in User Service (RADIUS) oli alun perin kehitetty valinnaista Point-to-Point Protokollaa (PPP) ja päätepalvelua varten.
Yhä suurempi osa tietoliikenteestä on IP-pohjaista.
Acces-verkot uudistuvat niin että tulee paljon uusia verkkoelementtejä ja naiden kanssa yhteensopivia päätelaitteita.
Nämä verkkoelementit ja päätelaitteet ovat huomattavasti aikaisempaa monimutkaisempia.
AAA-protokollille tulee paljon uusia vaatimuksia.
IETF:n toimesta on kehitetty uuden sukupolven AAA-protokolla Diameter, joka korjaa TACACS- ja RADIUS-protokollien tietoturvan ja toiminnallisuuden puutteet.
Koska TACAS ja varsinkin RADIUS ovat laajalti käytössä, Diameterin pitää toimia RADIUS-protokollan kanssa.

Tässä tutkielmassa esitetään tavallisimmat AAA-protokollat.
RADIUS- ja Diameter-protokollien yhteensovittamisen nykytilanne selvitetään.
Yhteensovittamisen ongelmakohdat esitellään ja analysoidaan.
Nyt yhteensovittamisesta löytyy eri lähteistä vain yleistä ohjeistusta.
Yhteensovittamisessa protokollat täytyy kääntää ristiin.
Käännettäessä lähdeprotokollan sanomat ja attribuutit korvataan kohdeprotokollan sanomilla ja attribuuteilla.
Tutkielmassa kuvataan RADIUS ja Diameter protokollien sisäiset erot, määritellään muunnoksen protokollasta toiseen sekä sanoma että attribuuttitasolla.
Muunnokset kuvataan ja esiin tuleville ongelmille haetaan ratkaisuehdotukset.

RADIUS-protokollan tietoturvan puutteet esitellään ja keinot puutteiden kiertämiseksi kuvataan.
Diameter on uuden polven AAA-protokolla mutta siinä ei ole päästä päähän tieturvamekanismia.
Tutkielmassa esitetään Diameter-protokollan päästä päähän tietoturvaratkaisu.
RADIUS- ja Diameter-protokollien yhteensovittamisen tieturvalle ehdotetaan myös ratkaisua.
ED:2005-06-15
INSSI record number: 28877
+ add basket
« previous | next »
INSSI