A Kerberos-based authentication architecture for WLANs: Test beds and experiments

Mohamed Ali Kaafar; Lamia Ben Azzouz; Farouk Kamoun

doi:10.1007/0-387-23198-6_4

A Kerberos-based authentication architecture for WLANs: Test beds and experiments

Mohamed Ali Kaafar, Lamia Ben Azzouz, Farouk Kamoun

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

Abstract

This work addresses the issues related to authentication in wireless LAN environments, with emphasis on the IEEE 802.11 standard. It proposes an authentication architecture for Wireless networks. This architecture called Wireless Kerberos (W-Kerberos), is based on the Kerberos authentication server and the IEEE 802.1X-EAP model, in order to satisfy both security and mobility needs. It then, provides a mean of protecting the network, assuring mutual authentication, thwarts cryptographic attack risks via a key refreshment mechanism and manages fast and secure Handovers between access points. In addition to authentication, Kerberos has also the advantage of secure communications via encryption.

Original language	English
Title of host publication	Network Control and Engineering for QoS, Security and Mobility, III
Editors	Dominique Gaiti, Sebastia Galmes, Ramon Puigjaner
Publisher	Springer, Springer Nature
Pages	43-55
Number of pages	13
ISBN (Print)	0387231978, 9780387231976
DOIs	https://doi.org/10.1007/0-387-23198-6_4
Publication status	Published - 2005
Externally published	Yes
Event	IFIP TC6/WG6.2, 6.6, 6.7 and 6.8 3rd International Conference on Network Control and Engineering for QoS, Security and Mobility, NetCon 2004 - Palma de Mallorca, Spain Duration: 2 Nov 2004 → 5 Nov 2004

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	165
ISSN (Print)	1868-4238

Conference

Conference	IFIP TC6/WG6.2, 6.6, 6.7 and 6.8 3rd International Conference on Network Control and Engineering for QoS, Security and Mobility, NetCon 2004
Country/Territory	Spain
City	Palma de Mallorca
Period	2/11/04 → 5/11/04

Keywords

EAP
IEEE 802.1X
Kerberos
test beds
wireless authentication

Access to Document

10.1007/0-387-23198-6_4

Cite this

Kaafar, M. A., Azzouz, L. B., & Kamoun, F. (2005). A Kerberos-based authentication architecture for WLANs: Test beds and experiments. In D. Gaiti, S. Galmes, & R. Puigjaner (Eds.), Network Control and Engineering for QoS, Security and Mobility, III (pp. 43-55). (IFIP Advances in Information and Communication Technology; Vol. 165). Springer, Springer Nature. https://doi.org/10.1007/0-387-23198-6_4

Kaafar, Mohamed Ali ; Azzouz, Lamia Ben ; Kamoun, Farouk. / A Kerberos-based authentication architecture for WLANs : Test beds and experiments. Network Control and Engineering for QoS, Security and Mobility, III. editor / Dominique Gaiti ; Sebastia Galmes ; Ramon Puigjaner. Springer, Springer Nature, 2005. pp. 43-55 (IFIP Advances in Information and Communication Technology).

@inproceedings{c53e0f7654b04bfb8db3f340ed818070,

title = "A Kerberos-based authentication architecture for WLANs: Test beds and experiments",

abstract = "This work addresses the issues related to authentication in wireless LAN environments, with emphasis on the IEEE 802.11 standard. It proposes an authentication architecture for Wireless networks. This architecture called Wireless Kerberos (W-Kerberos), is based on the Kerberos authentication server and the IEEE 802.1X-EAP model, in order to satisfy both security and mobility needs. It then, provides a mean of protecting the network, assuring mutual authentication, thwarts cryptographic attack risks via a key refreshment mechanism and manages fast and secure Handovers between access points. In addition to authentication, Kerberos has also the advantage of secure communications via encryption.",

keywords = "EAP, IEEE 802.1X, Kerberos, test beds, wireless authentication",

author = "Kaafar, {Mohamed Ali} and Azzouz, {Lamia Ben} and Farouk Kamoun",

year = "2005",

doi = "10.1007/0-387-23198-6_4",

language = "English",

isbn = "0387231978",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer, Springer Nature",

pages = "43--55",

editor = "Dominique Gaiti and Sebastia Galmes and Ramon Puigjaner",

booktitle = "Network Control and Engineering for QoS, Security and Mobility, III",

address = "United States",

note = "IFIP TC6/WG6.2, 6.6, 6.7 and 6.8 3rd International Conference on Network Control and Engineering for QoS, Security and Mobility, NetCon 2004 ; Conference date: 02-11-2004 Through 05-11-2004",

}

Kaafar, MA, Azzouz, LB & Kamoun, F 2005, A Kerberos-based authentication architecture for WLANs: Test beds and experiments. in D Gaiti, S Galmes & R Puigjaner (eds), Network Control and Engineering for QoS, Security and Mobility, III. IFIP Advances in Information and Communication Technology, vol. 165, Springer, Springer Nature, pp. 43-55, IFIP TC6/WG6.2, 6.6, 6.7 and 6.8 3rd International Conference on Network Control and Engineering for QoS, Security and Mobility, NetCon 2004, Palma de Mallorca, Spain, 2/11/04. https://doi.org/10.1007/0-387-23198-6_4

A Kerberos-based authentication architecture for WLANs: Test beds and experiments. / Kaafar, Mohamed Ali; Azzouz, Lamia Ben; Kamoun, Farouk.
Network Control and Engineering for QoS, Security and Mobility, III. ed. / Dominique Gaiti; Sebastia Galmes; Ramon Puigjaner. Springer, Springer Nature, 2005. p. 43-55 (IFIP Advances in Information and Communication Technology; Vol. 165).

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - A Kerberos-based authentication architecture for WLANs

T2 - IFIP TC6/WG6.2, 6.6, 6.7 and 6.8 3rd International Conference on Network Control and Engineering for QoS, Security and Mobility, NetCon 2004

AU - Kaafar, Mohamed Ali

AU - Azzouz, Lamia Ben

AU - Kamoun, Farouk

PY - 2005

Y1 - 2005

N2 - This work addresses the issues related to authentication in wireless LAN environments, with emphasis on the IEEE 802.11 standard. It proposes an authentication architecture for Wireless networks. This architecture called Wireless Kerberos (W-Kerberos), is based on the Kerberos authentication server and the IEEE 802.1X-EAP model, in order to satisfy both security and mobility needs. It then, provides a mean of protecting the network, assuring mutual authentication, thwarts cryptographic attack risks via a key refreshment mechanism and manages fast and secure Handovers between access points. In addition to authentication, Kerberos has also the advantage of secure communications via encryption.

AB - This work addresses the issues related to authentication in wireless LAN environments, with emphasis on the IEEE 802.11 standard. It proposes an authentication architecture for Wireless networks. This architecture called Wireless Kerberos (W-Kerberos), is based on the Kerberos authentication server and the IEEE 802.1X-EAP model, in order to satisfy both security and mobility needs. It then, provides a mean of protecting the network, assuring mutual authentication, thwarts cryptographic attack risks via a key refreshment mechanism and manages fast and secure Handovers between access points. In addition to authentication, Kerberos has also the advantage of secure communications via encryption.

KW - EAP

KW - IEEE 802.1X

KW - Kerberos

KW - test beds

KW - wireless authentication

UR - http://www.scopus.com/inward/record.url?scp=84902449154&partnerID=8YFLogxK

U2 - 10.1007/0-387-23198-6_4

DO - 10.1007/0-387-23198-6_4

M3 - Conference proceeding contribution

AN - SCOPUS:84902449154

SN - 0387231978

SN - 9780387231976

T3 - IFIP Advances in Information and Communication Technology

SP - 43

EP - 55

BT - Network Control and Engineering for QoS, Security and Mobility, III

A2 - Gaiti, Dominique

A2 - Galmes, Sebastia

A2 - Puigjaner, Ramon

PB - Springer, Springer Nature

Y2 - 2 November 2004 through 5 November 2004

ER -

A Kerberos-based authentication architecture for WLANs: Test beds and experiments

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this