A Policy-Based, Secure Access Control Mechanism for Network Roaming Infrastructures

In the Internet society, IP address is treated as information of organization. This is a problem that visitor uses IP address of visited organization because IP address user of visited organization is treated as a member of the organization. For that, the user's access to home resources may be blocked by firewalls because the user's IP address is not home's one. Therefore an application of authentication and access control is needed. The requirements for authentication and access control method are summarized to six items; (1) getting accessibility to the Internet by using a user credential of the home. (2) Keeping accessibility to home resources. (3) Keeping a local accessibility to visited resources for the visitor. (4) Getting enough security along the wireless/wired channel. (5) Authenticating a user, and trusting by the result, and assigning an IP address of visited organization. (6) By the authentication information, keeping accessibility to the Internet by using a home IP address. The authors investigate the existing methods and point out the merit and demerit for these requirements. Finally, the authors propose a method named 'campus ubiquitous network' that fulfill these all requirements