Identity Certification for User-Based Accounting System

王会,安常青,李学农,黄辉

DOI: https://doi.org/10.3969/j.issn.1000-7024.2002.04.005

2002-01-01

Abstract:In campus accounting system based on identity certification, it is very important to confirm the identity of users and prevent IP address embezzlement. Taking identity certification system of campus network for example, this article describes the theory and implement in detail.

What problem does this paper attempt to address?

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Lin Yao,Lei Wang,Xiangwei Kong,Guowei Wu,Feng Xia

DOI: https://doi.org/10.1016/j.camwa.2010.01.010

IF: 3.218

2010-01-01

Computers & Mathematics with Applications

Abstract:In a pervasive computing environment, mobile users often roam into foreign domains. Consequently, mutual authentication between the user and the service provider in different domains becomes a critical issue. In this paper, a fast and secure inter-domain authentication and key establishment scheme, namely IDAS, is proposed. IDAS adopts Biometrics to guarantee the uniqueness and privacy of users and adopts signcryption to generate a secure session key. IDAS can not only reduce the burden of certificates management, but also protect the users and authentication servers against fraud. Compared with some other authentication methods, our approach is superior with faster key exchange and authentication, as well as more privacy. The correctness is verified with the Syverson and Van Oorschot (SVO) logic. Crown Copyright (C) 2010 Published by Elsevier Ltd. All rights reserved.
Fingerprint-based Authentication in Networking Environment

朱建新,杨小虎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.12.004

2001-01-01

Abstract:Network security is an important research area in the application of information system now,How to implement effective access control based on user's identity is very important. This paper briefly introduces the concept and technology of authentication first,and analyze the technology of biometric identification,then points out that fingerprint-based biometric identification in networking environment combining data transfer encrypt is a reliable method for control user's access and protect information system,and describes the design and implementation of fingerprint-based authentication system in networking environment.
Solution to VPN and Authentication System

LI Jian-jun,XU Duan-qing,GUO Wei-qing

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.09.068

2005-01-01

Abstract:Combining with living examples and based on IPSEC,the realization of the VPN system was approached in many internet circumstances of remote access(such as gateway,broadband,xDSL etc.),and in view of the deficiency and the hidden troubles of the traditional static password,introduces a working mechanism was introduced which took into consideration both the tokencard two factor authentication and Windows AD,and proveds to be flexible and liable for the single-sign on clients.
A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

丁宇波,陈根才

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.03.052

2003-01-01

Abstract:The rule in CERNET that user's feedepends on data flow, which brings difficulty to campus network management. The technology used to avoid network e mbezzlement and user account in campus network has defects and its effect is n ot ideal. This paper puts forward new design, which has good balance in perform anc e, security and cost facts.
Design and Implementation of Unified Access Control System Based on LDAP

ZHENG Lan,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.07.058

2005-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale, the use of directories as accessible repositories providesa flexible and various solution for gathering, storage and accessing information. The design and implementation of an unified accesscontrol system supporting single-sign-on areintrodueed, whichis based on LDAPdirectory and combines access controls ofall applicationsystems to realize security access system of unified users management. The system used middleware technology to efficiently resolvethe bottleneck problem when a lot of users accesed LDAP database.
Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

Yao Liu,Yueting Chai,Yi Liu

DOI: https://doi.org/10.1109/icebe.2015.76

2015-01-01

Abstract:In the current Internet environment, security incidents occur frequently and the potential safety problems are highlighted. In this case, we propose "Internet trusted identity authentication system". The system changes the previous conventional mode of identity authentication, changes the mode of username/password to the relationship bound between net ID and password rule and replaces the traditional dead-password mode with the mode of dynamic password and password rule. At the same time, we should establish the repository of trusted identity to store and manage the net ID and password rule. With the tools of USBKEY, SMS and digital certificates, the system can achieve the function of implementing the real-name network in the Internet, making remembering passwords more convenience, simplifying users' operations online and strengthening the security of personal identification information online, which can improve the safety, reliability and efficiency of the Internet, on the premise that it won't change the Internet functions or the operation habits.
Study of Network Authentication Based on RADIUS Protocol

YANG Jian-jun,JIA Chen-jun,RAN Li-xin

DOI: https://doi.org/10.3785/j.issn.1008-973x.2005.02.014

2005-01-01

Abstract:By analyzing the principle of remote authentication dial in user service (RADIUS) protocol and the applied security algorithm, an improved RADIUS protocol was proposed to enhance the security performance of networks.Based on the improved protocol,AAA (authentication,authority and account) architecture was set up for the Internet service providers.The AAA architecture for wireless gateway does not increase the complexity of the communication systems, and is simple and easy to implement.
Campus Network User Tracing System Design and Implementation

ZHOU Chang-ling,CUI Jian,SHANG Qun,ZHANG Bei

DOI: https://doi.org/10.3969/j.issn.1672-9781.2007.02.008

2007-01-01

Abstract:In order to improve the campus network management efficiency, whenever a security event occurs, network operators can easily trace those users who abused the network or did illegal things, auto-logging campus network user information and relate things are required. This paper presents a way combining the IP, MAC, user profile, switch port data to trace user location. A system using this method is designed and implemented in our campus network that shows our solution is valuable.
Extending Authentication Mechanism to Cooperate with Accountable Address Assignment

Boyang Wu,Hewu Li,Qian Wu

DOI: https://doi.org/10.1109/WCNC.2019.8885688

2019-01-01

Abstract:Lack of effective accountability mechanisms brings a series of security problems for Internet today. In Next Generation Internet based on IPv6, the system of identity authentication and IP verification is the key to accounting ability. Source Address Validation Improvement (SAVI) can protect IP source addresses from being faked. But without identity authentication mechanism and certain relationship between IP and accountable identity, the accountability is still unreliable. To solve this problem, most research focus on embedding accountable identity into IP address which need either changing DHCP client or twice DHCP request process due to the separate process of user authentication and address assignment. Different from previous research, this paper first analyzes the problems and requirements of combining Web Portal or 802.1X, two main identity authentication mechanism (AAA), with the accountable address assignment in SAVI frame-work. Then a novel Cooperative mechanism for Accountable IP address assignment (CAIP) is proposed based on 802.1X and SAVI, which takes into account the validation of IP address, the authenticity and accountability of identity at the same time. Finally, we build up prototype system for both Fat AP and Thin AP wireless scenarios and simulate the performance of CAIP through large-scale campus networks' data logs. The experiment result shows that the IP addresses and identities in CAIP are protective and accountable. Compared with other previous research, CAIP is not only transparent to the terminals and networks, but also low impact on network equipment, which makes CAIP easy deployment with high compatibility and low cost.
Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

He,Wei,Li,Xiu,Liu,Wenhuang

DOI: https://doi.org/10.3969/j.issn.1008-0570.2005.33.001

2005-01-01

Abstract:This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user's id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.
Research for the Application of Authentication and Authorizaton System in Campus Network

常晓磊,陈怀楚,王映雪

DOI: https://doi.org/10.3321/j.issn:0529-6579.2001.z1.031

2001-01-01

Abstract:This article describes the position and function of authentication and authorization system in campus network, and discusses a practical authentication systems architecture.
Design and Implementation of Network Accounting System of Zhejiang University

MOU Xing-liang,ZHENG Qiang,ZHU Sheng

DOI: https://doi.org/10.3969/j.issn.1006-2475.2013.06.039

2013-01-01

Abstract:This paper introduces the design and implementation of network accounting system,and this system is putting into application in the campus network of Zhejiang university.It describes a new method of network accounting,and also discusses some distinguishing features of the system,such as flexible accounting management,improved statistical reporting and efficient online self-service payment.
TrueID: A Practical Solution to Enhance Internet Accountability by Assigning Packets with Creditable User Identity Code.

Guangwu Hu,Wenlong Chen,Qi Li,Yong Jiang,Ke Xu

DOI: https://doi.org/10.1016/j.future.2016.09.005

IF: 7.307

2016-01-01

Future Generation Computer Systems

Abstract:Despite the Internet has been rapidly developed in the past three decades, its intrinsic security mechanism, e.g., IP source address validation and user identification authentication, is still not well addressed. This results in numerous cyber security threats. In order to enhance the Internet accountability and deter potential cyber-attacks, in this paper, we propose TrueID, an IPv6 header extension scheme which can embed hash-based, creditable and undeniable user identity code inside IPv6 packets. We present the system architecture, header’s format and viable implementation approaches with different credibility granularities. Meanwhile, to verify packet credibility and integrity, we design an Autonomous System (AS) level public-key distribution system which can disseminate user’s public keys between allied ASes safely. Also, the prototype experiment has proved that our scheme possesses these features with desirable performance.
A scheme of identity authentic in Tax-declare online system

XU WEI,ZHANG LI

DOI: https://doi.org/10.3969/j.issn.1008-0570.2006.33.016

2006-01-01

Abstract:Tax- declare online systems have some hidden trouble of security using the mode' user and password' at present.First the current technology of identity authentic is analyzed.Then a scheme of identity authentic in Tax- declare online system is designed. The scheme use the mode ' USBKey and PKI' .At last feasibility of the scheme is analyzed.
Network Safeguard System Based on IDXP

WANG Xiaodong,ZHU Miaoliang

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.07.055

2005-01-01

Abstract:This paper puts forward an intellective network safe guard system based on a multi-agent system structure. The purpose of the system is to defend the intrusion of campus-wide network. It is based on IDXP and the focus is blackboard. This system can deal with multi-levels and many ways of anti-intrusions, which has self-determination. It is proved to have a good performance by spot tests.
Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

WU Xu,XU Jin,LI Chun-wen,LIU Chuan-yi

DOI: https://doi.org/10.13190/j.jbupt.2014.05.018

2014-01-01

Abstract:In cloud computing, the data and computation migration gives rise to trust problems between the user and the cloud. Including the hardware platform, the multiple dimensions method was studied, as well as the user identity and behavior. The electronic identity ( eID)-based virtual machine trusted attes-tation system in infrastructure-as-a-service ( IaaS) cloud was designed. The hardware platform was used for trust third party architecture. The citizen's network eID was used as users' unique authoritative identi-ty. The credit records were also applied to evaluate the user' s behaviors. Four steps were adopted to solve the trust problem between two sides, including trusted attestation of the user identification and trus-ted attestation of the virtual machine. Experiment analysis shows that this system can defend common at-tacks, it is more safety, and the time complexity is within acceptable limitations.
A Security System Using Multiple Certifications in Grid Environments

蒋文保,戴一奇,杨大鉴

DOI: https://doi.org/10.3321/j.issn:1000-0054.2004.04.033

2004-01-01

Abstract:Grid environments have a broad range of security requirements that differ from conventional network environment needs. This paper proposes a new grid security system, CertGSI, which uses multiple certifications including identity certification, attribute certification, and proxy certification to address various grid security requirements. Moreover, CertGSI incorporates a flexible authentication and access control mechanism that provides scalability to a large number of resources and users. Its security policy, framework, multiple certifications, authentication, and access control mechanism are discussed in detail.
A Defence Scheme Against Identity Theft Attack Based on Multiple Social Networks

Bing-Zhe He,Chien-Ming Chen,Yi-Ping Su,Hung-Min Sun

DOI: https://doi.org/10.1016/j.eswa.2013.09.032

IF: 8.5

2013-01-01

Expert Systems with Applications

Abstract:Recently, on-line social networking sites become more and more popular. People like to share their personal information such as their name, birthday and photos on these public sites. However, personal information could be misused by attackers. One kind of attacks called Identity Theft Attack is addressed in on-line social networking sites. After collecting the personal information of a victim, the attacker can create a fake identity to impersonate this victim and cheat the victim's friends in order to destroy the trust relationships on the on-line social networking sites. In this paper, we propose a scheme to protect users from Identity Theft Attacks. In our work, users' personal information can be still kept public. It means that this scheme does not violate the nature of the social networks. Compared with previous works, the proposed scheme incurs less overhead for users. Experimental results also demonstrate the practicality of the proposed scheme.
Implementation Scheme of Role-Based Access Control with Identity Code

裘炅,谭建荣,马晨华

DOI: https://doi.org/10.3321/j.issn:1003-9775.2003.12.012

2003-01-01

Abstract:Identity code is introduced to represent roles and rights, while the synthesis of identity code represents the inheritance of roles as role derivation information. It provides security management on role authorization, role inheritance and data access authorization and it can adapt to a dynamically changing environment. Several special security requirements such as role private attribute and multi-role access control can also be satisfied. The scheme provides a more efficient authorization to simplify the management of access control and it can be applied better in large-scale network.
Case Study: Network System ID Conversion for a Connected Campus

Cecilia Iwala

Abstract:Experience database users’ access authentication procedure and learn the pros and cons of academic patrons’ IDs conversion and the implementation process. This is a successful narrative and/or story of campus ID conversion and alternative ID creation in an academic institution. From this article, the reader can learn what to do and what not to do when converting campus user IDs, creating alternative users’ IDs, or integrating new user IDs with existing IDs as security standards create the institutional need for alternative IDs for information accessibility and authentication. This article describes the process, the analysis, and the implementation of a campus network ID and management system. The 9-digit alphanumeric campus identification number (ID) is used in many places such as the student’s ID card, registration information, admission and financial aid records, access to the university’s banner web, and access to the library materials. The library authentication system uses a 9-digit numeric Personal Identification Number (PIN) for patron authentication purpose.

Computer Science

Identity Certification for User-Based Accounting System

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Fingerprint-based Authentication in Networking Environment

Solution to VPN and Authentication System

A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

Design and Implementation of Unified Access Control System Based on LDAP

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

Study of Network Authentication Based on RADIUS Protocol

Campus Network User Tracing System Design and Implementation

Extending Authentication Mechanism to Cooperate with Accountable Address Assignment

Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

Research for the Application of Authentication and Authorizaton System in Campus Network

Design and Implementation of Network Accounting System of Zhejiang University

TrueID: A Practical Solution to Enhance Internet Accountability by Assigning Packets with Creditable User Identity Code.

A scheme of identity authentic in Tax-declare online system

Network Safeguard System Based on IDXP

Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

A Security System Using Multiple Certifications in Grid Environments

A Defence Scheme Against Identity Theft Attack Based on Multiple Social Networks

Implementation Scheme of Role-Based Access Control with Identity Code

Case Study: Network System ID Conversion for a Connected Campus