Opportunistic authentication methods in new generation networks

doctoral thesis

• Title (croatian): Oportunističke metode autentifikacije u novoj generaciji mreža
• Author: Ana Kukec
• Mentor: Miljenko Mikuc (mentor)
• Committee member: Marin Golub (predsjednik povjerenstva)
• Committee member: Darko Huljenić (član povjerenstva)
• Committee member: Drago Žagar (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Telecommunications); Zagreb
• Defense date and country: 2011-06-03, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering; Telecommunications and Informatics
• Universal decimal classification (UDC): 621.3 - Electrical engineering

Abstract

The thesis addresses shortages of the IPv6 security shield, provides comprehensive analyzes of IPv6 protocols, particularly mobility and security protocols, and identifies pitfalls of known IPv6 authentication means. Afterwards, it conducts a comparative study of existing authentication mechanisms and defines a list of requirements as a postulate for the proposal of new authentication mechanisms and methods. In order to propose the solutions which solve the identified shortages following the imposed requirements as close as possible, the thesis defines three subclasses of IPv6 environments ; the link-local, mobile and distributed environments. Following this it proposes authentication and authorization mechanisms and methods based on a combined and transitive opportunistic approach for each environment. With slight modifications, they can operate as a generic authentication mechanism or method in any IPv6 environment. For the purpose of the comparative study of authentication mechanisms and the formal specification and verification of the proposed solutions, the thesis proposes a formal modal logic as an extension of the Coffey-Saidha logic for verifying public key protocols. Finally, the thesis proposes an implementation framework, the extensible opportunistic IPv6 authentication framework which enables the straightforward implementation of the proposed authentication mechanisms and methods.

Abstract (croatian)

Doktorski rad obradjuje manjkavosti IPv6 sigurnosnih protokola, daje sveobuhvatnu analizu IPv6 protokola, posebice pokretnih i sigurnosnih protokola, te identificira nedostatke postojecih autentifikacijskih tehnika. Uz to, sadrzi komparativnu studiju postojecih autentifikacijskih mehanizama i definira zahtjeve kao postulate za prijedlog novih autentifikacijskih mehanizama i metoda. Kako bi predlozila takva rjesenja slijedeci identificirane manjkavosti i definirane zahtjeve sto je blize moguce, doktorski rad definira tri tipa IPv6 okolina; lokalne, pokretne i raspodijeljene okoline. U okviru takvih definicija, predlazu se autentifikacijski i autorizacijski mehanizmi i metode temeljeni na kombiniranom i tranzitivnom oportunistickom pristupu za svaku pojedinu okolinu. Uz manje izmjene, zatrazene metode mogu se koristiti kao genericke autentifikacijske metode za genericke IPv6 okoline. Za potrebe komparativne studije autentifikacijskih mehanizama te njihove formalne specifikacije i verifikacije, doktorski rad predlaze formalnu modalnu logiku kao prosirenje Coffey-Saidha logike za verifikaciju protokola temeljenih na javnom kljucu. Konacno, doktorski rad predlaze implementacijski okvir koji omogucava jednostavnu implementaciju zatrazenih autentifikacijskih mehanizama i metoda.

• Keywords: Internet protocol version 6; network security; authentication; opportunistic authentication; weak authentication; decentralized authentication; distributed authentication; link; mobile network; distributed system; formal modal logic
• Keywords (croatian): Internet Protocol verzije 6; mrežna sigurnost; autentifikacija; oportunistička autentifikacija; slaba autentifikacija; decentralizirana autentifikacija; raspodijeljena autentifikacija; poveznica; pokretna mreža; raspodijeljeni sustav; formalna modalna logika
• Language: english
• URN:NBN: urn:nbn:hr:168:484071
• Project: Number: 036-0362027-1640; Title: UPRAVLJANJE MREŽOM I USLUGAMA TEMELJENO NA ZNANJU; Leader: Dragan Jevtić; Jurisdiction: Croatia; Funder: MZOS; Funding stream: ZP
• Study programme: Title: Doctoral study programme "Electrical Engineering and Computing"; Study programme type: university; Study level: postgraduate; Academic / professional title: doktor/doktorica znanosti, po-dručje tehničkih znanosti (doktor/doktorica znanosti, po-dručje tehničkih znanosti)
• Catalog URL: http://lib.fer.hr/cgi-bin/koha/opac-detail.pl?biblionumber=35435
• Type of resource: Text
• Extent: 163 str ; 30 cm
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-06-26 09:15:08