【持续性肾脏替代治疗crrt英文精品课件】evaluation of digital certificates acquisition in large-scale 802.11-3gpp hybrid environments

Evaluation of digital certificates acquisition in large-scale 802.11-3GPP hybrid environments,Nikolaos Doukas, Eleni Klaoudatou, Georgios Kambourakis, Angelos Rouskas and Stefanos Gritzalis,LAN MAN 2005 14th IEEE Workshop on Local and Metropolitan Area Networks Chania, September 2005,2,Presentation Outline,Introduction The proposed hybrid WLAN 3GPP network architecture for delivering subscribers certificates Performance Evaluation of the proposed architecture Conclusions Future work,3,Presentation Outline,Introduction Research Framework Attribute Certificates Role-Based Access Control The proposed hybrid WLAN 3GPP network architecture for delivering subscribers certificates Performance Evaluation of the proposed architecture Conclusions Future Work,4,Research Framework,All-IP Vision Integration of heterogeneous networks (3GPP- WLAN interworking) Provision of new services (m-commerce, m-banking) introduces new security issues Effective certification and authorization of the mobile users,5,Attribute Certificates (ACs) & RBAC,Attribute Certificates More suitable for authorization and time-limited transactions Included in: X.509v4 (ITU-T) recommendation, ANSI X.957 and RFC 3281 ACs bind an attribute with an AC holder (role, group membership, security clearance or any other authorization related information) Short life No Certificate Revocation Lists Access control, data origin authentication, non-repudiation services Role-Based Access Control RBAC associates permissions to roles Supported by the X.509v4 recommendation: Role-specification ACs Role-assignment ACs Simplifies authorization management,6,Presentation Outline,Introduction The proposed hybrid WLAN 3GPP network architecture for delivering subscribers certificates Performance Evaluation of the proposed architecture Conclusions Future Work,7,The proposed architecture,8,Presentation Outline,Introduction The proposed hybrid WLAN 3GPP network architecture for delivering subscribers certificates Performance Evaluation of the proposed architecture Simulation Parameters and set-up Scenario I: The user connects through a WLAN Scenario II: The user connects through a UMTS Conclusions Future Work,9,Simulation Parameters and set-up,2 Scenarios based on the access network (WLAN or UMTS) Server Processing Times CRCT (Client Request Creation Time) GWVT (CGW request Verify Time) AACT (Attribute Authority certificate Creation Time) Metrics measured (in terms of service times) CRTT (Client Request Transmission Time) CRRT (Client Request Return Time) CROT (Client Request Overall Time) GWFT (CGW request Forward Time) GWOT (CGW Overall Time) AART (Attribute Authority certificate Return Time) ART (Application Response Time),10,Scenario I: The user connects through a WLAN,11,Message flows between all entities for scenario I,12,Simulation set-up for scenario I,Number of Serving Networks Network Utilization Percentage UnderUtilized (40%) Utilized (70%) OverUtilized (90%) Data Rate of the UE (wireless station) 1 Mbps 2 Mbps 5,5 Mbps 11 Mbps,13,Results: Scenario I (1/3) PDF diagrams for Application Response Time - UnderUtilized,14,Results: Scenario I (2/3) PDF diagrams for Application Response Time - Utilized,15,Results: Scenario I (3/3) PDF diagrams for Application Response Time - OverUtilized,16,Scenario II: The user connects through a UMTS,17,Message flows between all entities for scenario II,18,Simulation set-up for Scenario II,Number of Serving Networks Network Utilization Percentage Utilized (40%) OverUtilized (80%) Data Rate of the UE 64 kbps 144 kbps 384 kbps,19,Results: Scenario II PDF diagram for Application Response Time,20,Presentation Outline,Introduction The proposed hybrid WLAN 3GPP network architecture for delivering subscribers certificates Performance Evaluation of the proposed architecture Conclusions Future Work,21,Conclusions - Future Work,Conclusions PKI in the 3G-and-beyond mobile environments Performance Evaluation of digital certificates acquisition in large scale environments 2 scenarios based on the access network: WLAN and UMTS The