ePrints.FRI - University of Ljubljana, Faculty of Computer and Information Science

Authenticating Identity Addressing

Blaž Primc (2010) Authenticating Identity Addressing. EngD thesis.

[img] PDF
Download (1218Kb)


    This thesis tackles with security aspects of future home networks, where all devices will be connected to a home network and controlled by a control and management platform. Due to inclusion of critical devices e.g., alarm system, front door opener, etc., access to devices will have to be strictly controlled. An access control system will be needed by any such platform. Additionally, devices need to ensure that commands are executed at the intended device and nowhere else. Both problems are solvable with reliable identification and authentication of active network users and devices. The aim of this work is to provide the Autonomous Control and Management Platform (ACMP), which is being developed at the TU München, Chair for Network Architectures and Services with identification and authentication solution for the purposes of access control and reliable device communication. The problem of access control, identification and authentication is analysed, followed by an overview of related work and home environment needs. Based on gathered knowledge a list of system requirements is composed, after which the solution is designed and a prototype displaying key features implemented. The main contribution of this work are the design and implementation of architecture for authenticating identity addressing. The solution is founded on a home network Certificate Authority (CA) which controls home network membership by issuing certificates to devices. Device certificates are used for authentication and home network membership attestation. The combination of DNS and DHT overlay network is used for hierarchical addressing of device identities. With a mechanism for home network trust establishment, secure and reliable collaboration between devices of different home networks is feasible.

    Item Type: Thesis (EngD thesis)
    Keywords: computer networks, authentication, identity, addressing, access control
    Number of Pages: 55
    Language of Content: English
    Mentor / Comentors:
    Name and SurnameIDFunction
    prof. dr. Dušan Kodek236Mentor
    Link to COBISS: http://www.cobiss.si/scripts/cobiss?command=search&base=50070&select=(ID=00007809364)
    Institution: University of Ljubljana
    Department: Faculty of Computer and Information Science
    Item ID: 1122
    Date Deposited: 30 Jun 2010 08:59
    Last Modified: 13 Aug 2011 00:37
    URI: http://eprints.fri.uni-lj.si/id/eprint/1122

    Actions (login required)

    View Item