Flexible Access Control Framework Considering IdP-Side's Authorization Policy in Roaming Environment

Many institutions have recently deployed the international wireless LAN roaming infrastructure called eduroam. Utilizing eduroam, users can obtain network connectivity across campus. However, the current eduroam infrastructure does not provide enough functions for flexible access control such as controlling the access to visited institution's local resources or restricting the access to some Internet sites. In this paper, we propose a framework for realizing flexible access control considering IdP's authorization policy.