Publicação
Authentication in VPNs and 802.1X networks with identity providers
| Resumo: | Services provided by companies or public sector departments often require people to register themselves, i.e. to create an account. Such registration usually involves the provisioning of users’ authentication credentials, usually a username and password. Centralized Identity Providers (IdPs) appeared to reduce the users’ burden regarding account management. They permitted to evolve from a so-called silo approach (where services do not share accounts) to accounts that can be shared by a set of federated services. Nowadays, popular Internet services such as Google and Facebook, which authenticate millions of people, and keep some relevant user identity attributes in their accounts, are often used as IdPs. These IdPs were conceived for web authentication, using HTTP-based protocols and standards such as SAML, and more recently OAuth2.0 and OpenID Connect, which offer powerful authentication and authorization capabilities. This work explores those capabilities and describes solutions that allow their combination with VPN and WiFi authentication mechanisms. Having the identity and access management functionalities of IdP web authentication available in network access control mechanisms can provide stronger authentication and authorization policies, improve the user experience and simplify management, which consequently aims for enhancing security. |
|---|---|
| Autores principais: | Mortágua, Duarte Neves Tavares |
| Assunto: | Identity providers Authentication Security VPN WiFi networks OAuth2.0 Wire guard 802.1X. |
| Ano: | 2023 |
| País: | Portugal |
| Tipo de documento: | dissertação de mestrado |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Universidade de Aveiro |
| Idioma: | inglês |
| Origem: | RIA - Repositório Institucional da Universidade de Aveiro |
| Resumo: | Services provided by companies or public sector departments often require people to register themselves, i.e. to create an account. Such registration usually involves the provisioning of users’ authentication credentials, usually a username and password. Centralized Identity Providers (IdPs) appeared to reduce the users’ burden regarding account management. They permitted to evolve from a so-called silo approach (where services do not share accounts) to accounts that can be shared by a set of federated services. Nowadays, popular Internet services such as Google and Facebook, which authenticate millions of people, and keep some relevant user identity attributes in their accounts, are often used as IdPs. These IdPs were conceived for web authentication, using HTTP-based protocols and standards such as SAML, and more recently OAuth2.0 and OpenID Connect, which offer powerful authentication and authorization capabilities. This work explores those capabilities and describes solutions that allow their combination with VPN and WiFi authentication mechanisms. Having the identity and access management functionalities of IdP web authentication available in network access control mechanisms can provide stronger authentication and authorization policies, improve the user experience and simplify management, which consequently aims for enhancing security. |
|---|
Atividades financiadas
Não foram encontrados projetos financiados.