Generic AAA Why generic AAA: scope and context. What functions are needed and which of them important to Generic AAA How can we do it: Architecture. Actions Betty de Bruijn, Leon Gommans AAA ARCH interim IRFT meeting Dublin 26-27 / 6 / 2000

CONTEXT User Provider Service B. de Bruijn / L.Gommans 27/6/2000

CONTEXT User Provider Service B. de Bruijn / L.Gommans 27/6/2000

AAA CONTEXT User Provider Service Provider Topology User Organization Trust B. de Bruijn / L.Gommans 27/6/2000

Generic AAA Scope Allow: trusted access to trusted selection of a composition of services, offered by a number of autonomous providers. The service is perceived as a homogeneous service to a user or a member of a user organization. B. de Bruijn / L.Gommans 27/6/2000

Scope: Services Content / Application Service Transport Service. Electronic or Physical. Transport Service. Choice in quality of delivery (QoS, Security) Derived Services Monitoring & Verification Accounting Services Billing and Payment Service B. de Bruijn / L.Gommans 27/6/2000

Scope: Trust Authentication: Proof of Identity within user and provider community. Authorization: Proof of some Right. Confidentiality of requests and decisions Integrity of requests and decisions Traceability of requests and decisions Trust of components (hardware/software) involved in handling requests and decisions Trust in organizations involved in handling requests and decisions. B. de Bruijn / L.Gommans 27/6/2000

What: Functions important for Generic AAA. Authentication: Registration of identity Store identity Issue proof of identity Verify proof of identity <- Authorization: Registration of right Storage of right Issue proof of right Verify proof of right. <- Etc. B. de Bruijn / L.Gommans 27/6/2000

How Authentication: Authorization, confidentiality, etc …. Use generic AAA infrastructure to transport authentication requests and proofs of identity to appropriate parties involved. Transport authentication result to requesting party Investigate classes of authentication methods that are to be supported. Identify best methods/practices suitable for certain situations depending on volume, required strength, topology etc. Describe architecture of example applications. Authorization, confidentiality, etc …. B. de Bruijn / L.Gommans 27/6/2000

Actions: what next Identify functions to be supported by generic AAA. Identify functions to be performed by generic AAA. Place functions in a examples …. B. de Bruijn / L.Gommans 27/6/2000