1. 1 AAA Framework for Multicasting draft-ietf-mboned-multiaaa-framework-01.txt July 11, 2006 Hiroaki Satou (satou.hiroaki@lab.ntt.co.jp) Hiroshi Ohta (ohta.hiroshi@lab.ntt.co.jp) Tsunemasa Hayashi (hayashi.tsunemasa@lab.ntt.co.jp) Haixiang He (haixiang@nortelnetworks.com)

2. 2 Introduction Background –Purpose of I-D: provide a generalized framework for solution standards to meet requirements defined in draft-ietf-mboned-maccnt-req-04.txt (MACCNT-REQ) Agenda –Updates from satou01 -->mboned01

3. 3 Major Changes Addition to description of roles –Notification of reason for rejection of user access Addition to Accounting –NSP should manage and log multicast states on user basis for user based accounting Addition of roles and mechanisms for “Caching of AAA Results” –AAA results from CP may be cached in NSP Removed mention of “commercial” to reflect a comment

4. 4 Conclusion Define building blocks in a framework. Facilitate which WGs own which building blocks. Which building blocks need to be created/ modified. Goal is to achieve operational capabilities such as access control, admission control & user based accounting. Help solutions study with collaboration with appropriate WGs. Any Comments

5. 5 Extra Slides

6. 6 Network Models Content Server User Content Provider (CP) Network Provider (NP) User CP (TV Broadcaster) NP User (a) Single-Entity Model (b) Multiple-Entity Model AAA Server Content Server AAA Server NP provides content CPs and NPs are different entities (companies) Multicast Router

7. 7 Functional Roles of Multiple-Entity Networks CP is responsible for authentication of content request NP’s edge routers control multicast packets and collect J/L based accounting information NP is responsible for packet level QoS (if necessary) edge NP NNI CP (A) AAA Server CP (B) AAA Server NNI Authentication Multicast Control Accounting QoS management NP= Network Provider CP= Content Provider User

8. 8 Users CP assigned userID NP selection (e.g. fixed line or mobile) Access Request Content Providers UserID assignment Authentication A New Framework Network Providers CP selection Forward request to appropriate CP Bandwidth (QoS) Management Accounting Access Request Accounting Info. Response (Authentication Results) NP= Network Provider CP= Content Provider Response (Authentication Results) Multicast Packets

9. 9 Proposed Framework (overview) NP- AAA CP-AAA User Edge Router Auth. Info. on IGMP/MLD (may be encrypted between user and CP- AAA) Forwarding Auth. Info. Notifying user access port CP selection Access ID management User access port detection Forwarding Auth. Info. With access ID Authentication Result With access ID Knowing corresponding access port by access ID Virtual session control for user-based accounting Framework for multicast AAA and QoS Management

10. 10 Major changes (satou00->satou01) Added roles for each entity –The USER selects a CP and a NSP (This may be automatically; e.g. a fixed line NSP for STB or a mobile NSP for mobile terminal) –The CP is responsible for Authentication and Authorization of user's access –The NSP is responsible for managing its network resources –If TP (Transit Provider) is used, the TP transfers multicast stream from the CP to the NSP. TP is responsible for managing its network resources USER NSP (e.g. fixed line) NSP (e.g. mobile) TP (if existing) CP

11. 11 Major changes (satou00->satou01 Cont.) Added section 4, "Network Connection Model and Functional Components“ Added modularity: fully enabled versions and partially enabled versions USER NSP Manage network resources (optional) Request Content (and Network Resources ) CP Authentication AAA Proxy Request Content Access Authorization Accounting Authorization Accounting information Resource Allocation