The Experts below are selected from a list of 33486 Experts worldwide ranked by ideXlab platform
Abdullah Almuhaideb - One of the best experts on this subject based on the ideXlab platform.
-
TrustCom/BigDataSE/ISPA (1) - A Hybrid Mobile Authentication Model for Ubiquitous Networking
2015 IEEE Trustcom BigDataSE ISPA, 2015Co-Authors: Abdullah Almuhaideb, Mohammed Alhabeeb, Bala Srinivasan, Waleed AlfehaidAbstract:The development in mobile devices and wireless technologies (e.g Cellular, Wi-Fi) has facilitated a growth in mobile services. As mobile users are usually moving, roaming services are deployed to allow users to access Foreign Network services without being limited to the geographical coverage of their home Networks. Several solutions have been proposed to allow ubiquitous mobile access authentication; however, limitations still exist in these approaches, such as performance issues and security vulnerabilities. In this paper a novel hybrid mobile authentication model is proposed, with its realisation through suitable protocols that combine the advantages of both distributed and centralised models. The proposed Passport and Visa tokens assist a Foreign Network in authenticating and authorising visiting mobile users. These tokens also offer a unique solution to achieving secure and efficient key management. Most importantly, the proposed solution provides an efficient technique, using recency evidence (a Passport Stamp), to tackle the problem of a user revocation status check. The security and performance analysis demonstrates that the proposed protocols efficiently ensure secure roaming, greatly enhance computation speed, and reduce communication costs.
-
Secure mobile authentication in ubiquitous Networking environments
2013Co-Authors: Abdullah AlmuhaidebAbstract:Mobile users desire to have connectivity anywhere and at anytime even in heterogeneous Networks where different wireless technologies provided by different Network providers. Several approaches have been proposed to allow ubiquitous Networking. However, limitations still exist in those approaches, especially authentication. This research project first investigates the existing mobile authentication approaches for ubiquitous Networking and then proposes a secure hybrid authentication solution with high flexibility and good performance to facilitate users’ mobility. The proposed model combines the advantages of both centralised and distributed authentication models in terms of security and performance while still achieving flexibility. The authentication process not only identifies the important and essential properties of mobile authentication, but also clarifies the relationships between the problems in mobile authentication and system properties. The proposed model can also serve as a guideline for system designers and implementers to design mobile authentication systems. The identified key solution requirements facilitate the analysis and evaluation of mobile authentication approaches. In order to realise the model, the project proposes a Passport and Visa authentication approach with protocols that possess the required properties, namely flexibility, security, and efficiency. In terms of the flexibility requirement, the Passport/Visa approach allows mobile users to access the best available wireless service with a single authentication credential to simplify the wireless Network access process. Also, a mobile user can directly negotiate with potential Foreign Network providers for more coverage and services. In terms of the security requirement, the Passport/Visa approach provides mutual authentication and resists common attacks. This helps a Foreign Network ensure that the service will get paid for and also helps the mobile user ensure that the Foreign Network is a legitimate and trusted provider. Moreover, the proposed approach can ensure a joint key control between a Foreign Network and the mobile user in order to protect against the communication interception by the home Network. The Passport and Visa tokens provide practical key management, user anonymity and un-traceability. In terms of the efficiency requirement, the Passport/Visa approach minimises computation, communication and storage costs. Since the proposed hybrid mobile authentication model combines the advantages of both distributed and centralised models it assists the distribution of the authentication load among engaging authentication servers. In addition, the proposed model provides a new efficient technique using recent evidence to tackle the problem of user revocation status check. The analysis and evaluation show that the proposed model, along with its realisation, offers flexible, efficient strong authentication for ubiquitous Networking compared to existing approaches.
-
SECURIT - Analysis of mobile authentication protocols by SVO logic
Proceedings of the First International Conference on Security of Internet of Things - SecurIT '12, 2012Co-Authors: Abdullah Almuhaideb, Phu Dung Le, Bala Srinivasan, Campbell Wilson, Vishv MalhotraAbstract:The next generation of mobile services makes it desirable for mobile users to be connected everywhere. Since these users usually in the move, roaming services are deployed to allow mobile users to access Foreign Network services without being limited to the geographical coverage of their home Networks. Several solutions have been proposed based on either two-party or three-party roaming structure to allow ubiquities mobile access authentication, however, limitations such as performance issues and security vulnerabilities still exist in these approaches. In this paper, we implemented a methodology for verifying authentication protocols based on SVO logic, which shows that our Passport/Visa protocols meet the desired authentication objectives and prove the protocols correctness. Moreover, we show that our proposal addresses existing limitations when compared to the other approaches.
-
NCA - Two-Party Mobile Authentication Protocols for Wireless Roaming Networks
2011 IEEE 10th International Symposium on Network Computing and Applications, 2011Co-Authors: Abdullah Almuhaideb, Bala SrinivasanAbstract:Mobile Internet access has significantly increased over the past few years. Roaming into Foreign Networks becomes necessary in order to access mobile-services. Traditionally, this done based on roaming agreement between the home Network and the Foreign Network to extend trust for mobile users. However, secured mobile authentication is a challenge especially in two-party authentication environment where only the visited user and the Foreign Network get involved. This paper proposes two-party secure roaming protocols based on direct negotiation with potential Foreign Networks regarding quality of service, pricing and other billing related features, in order to establish service agreement and get the authorization token. The paper provides better performance to check the revocation status of the mobile user using recency evidence compare to the previously used revocation list. Identity Based Signature is used to stop impersonation attack. The security and performance analysis indicates that our protocol is resistant to well-known attacks, and it ensures efficient roaming.
-
ICICS - Securing mobile access in ubiquitous Networking via non-roaming agreement protocol
Information and Communications Security, 2010Co-Authors: Talal Alharbi, Abdullah AlmuhaidebAbstract:Rapid developments in wireless technologies in terms of speed, quality and coverage are great motivations that lead to an increase in the use of mobile devices such as laptops and smart phones. These developments facilitate exchanging information anywhere any time. However, some concerns have been raised especially when the mobile users want to access services that provided by Foreign Networks. These issues can be classified as security and performance matters. This paper proposes a fast and secure authentication protocol. The new feature about this protocol is that the Foreign Network (FN) can authenticate the mobile user (MU) without checking with the home Network (HN). This feature can effectively enhance the Network performance as just two messages are required to authenticate the MU. Moreover, we will demonstrate the strengths of this protocol against the common security attacks and we will compare the protocol performance with the previous protocols to ensure efficiency.
Bala Srinivasan - One of the best experts on this subject based on the ideXlab platform.
-
TrustCom/BigDataSE/ISPA (1) - A Hybrid Mobile Authentication Model for Ubiquitous Networking
2015 IEEE Trustcom BigDataSE ISPA, 2015Co-Authors: Abdullah Almuhaideb, Mohammed Alhabeeb, Bala Srinivasan, Waleed AlfehaidAbstract:The development in mobile devices and wireless technologies (e.g Cellular, Wi-Fi) has facilitated a growth in mobile services. As mobile users are usually moving, roaming services are deployed to allow users to access Foreign Network services without being limited to the geographical coverage of their home Networks. Several solutions have been proposed to allow ubiquitous mobile access authentication; however, limitations still exist in these approaches, such as performance issues and security vulnerabilities. In this paper a novel hybrid mobile authentication model is proposed, with its realisation through suitable protocols that combine the advantages of both distributed and centralised models. The proposed Passport and Visa tokens assist a Foreign Network in authenticating and authorising visiting mobile users. These tokens also offer a unique solution to achieving secure and efficient key management. Most importantly, the proposed solution provides an efficient technique, using recency evidence (a Passport Stamp), to tackle the problem of a user revocation status check. The security and performance analysis demonstrates that the proposed protocols efficiently ensure secure roaming, greatly enhance computation speed, and reduce communication costs.
-
SECURIT - Analysis of mobile authentication protocols by SVO logic
Proceedings of the First International Conference on Security of Internet of Things - SecurIT '12, 2012Co-Authors: Abdullah Almuhaideb, Phu Dung Le, Bala Srinivasan, Campbell Wilson, Vishv MalhotraAbstract:The next generation of mobile services makes it desirable for mobile users to be connected everywhere. Since these users usually in the move, roaming services are deployed to allow mobile users to access Foreign Network services without being limited to the geographical coverage of their home Networks. Several solutions have been proposed based on either two-party or three-party roaming structure to allow ubiquities mobile access authentication, however, limitations such as performance issues and security vulnerabilities still exist in these approaches. In this paper, we implemented a methodology for verifying authentication protocols based on SVO logic, which shows that our Passport/Visa protocols meet the desired authentication objectives and prove the protocols correctness. Moreover, we show that our proposal addresses existing limitations when compared to the other approaches.
-
NCA - Two-Party Mobile Authentication Protocols for Wireless Roaming Networks
2011 IEEE 10th International Symposium on Network Computing and Applications, 2011Co-Authors: Abdullah Almuhaideb, Bala SrinivasanAbstract:Mobile Internet access has significantly increased over the past few years. Roaming into Foreign Networks becomes necessary in order to access mobile-services. Traditionally, this done based on roaming agreement between the home Network and the Foreign Network to extend trust for mobile users. However, secured mobile authentication is a challenge especially in two-party authentication environment where only the visited user and the Foreign Network get involved. This paper proposes two-party secure roaming protocols based on direct negotiation with potential Foreign Networks regarding quality of service, pricing and other billing related features, in order to establish service agreement and get the authorization token. The paper provides better performance to check the revocation status of the mobile user using recency evidence compare to the previously used revocation list. Identity Based Signature is used to stop impersonation attack. The security and performance analysis indicates that our protocol is resistant to well-known attacks, and it ensures efficient roaming.
-
MobiQuitous - Passport/Visa: Authentication and Authorisation Tokens for Ubiquitous Wireless Communications
Lecture Notes of the Institute for Computer Sciences Social Informatics and Telecommunications Engineering, 2010Co-Authors: Abdullah Almuhaideb, Bala SrinivasanAbstract:Ubiquitous connectivity faces interoperation issues between wireless Network providers when authenticating visiting users. This challenge lies in the fact that a Foreign Network provider does not initially have the authentication credentials of the mobile users. The existing approaches are based on roaming agreement to exchange authentication information between the home Network and a Foreign Network. This paper proposes Passport/Visa approach that consists of two tokens: Passport (authentication token) and Visa (authorisation token), to provide a flexible authentication method for Foreign Networks to authenticate mobile users. Our approach can be used when there is no roaming agreement between Foreign Networks and the mobile user’s home Network. The security analysis indicates that our protocol is resistant to well-known attacks, ant it efficiently ensures the security for both mobile users and Network providers. The performance analysis also demonstrated that the proposed protocol will greatly enhance computation, and communication cost.
-
SNPD - Toward a Ubiquitous Mobile Access Model: A Roaming Agreement-Less Approach
2010 11th ACIS International Conference on Software Engineering Artificial Intelligence Networking and Parallel Distributed Computing, 2010Co-Authors: Abdullah Almuhaideb, Mohammed Alhabeeb, Talal Alharbi, Bala SrinivasanAbstract:The development in mobile devices and wireless technologies opens up unlimited choices of mobile services such as mobile commerce. These advances make access services available and convenient everywhere at any time. Since mobile users usually move, accessing services becomes unavailable especially in some locations that are not covered by their home Networks. Therefore, it becomes necessary to roam into Foreign Networks in order to access such services. However, authenticating visiting users by a Foreign Network results in some security concerns. This challenge lies in the fact that a Foreign Network provider does not initially have the authentication credentials of the mobile users. The existing approaches are either roaming agreement-based in exchanging authentication information between the home Network and a Foreign Network or vulnerable to some security attacks. This paper proposes a roaming agreement-less approach based on our ubiquitous mobile access model. This approach consists of two tokens: Passport (identification token) and Visa (authorisation token) to provide a flexible authentication method for Foreign Network to authenticate mobile users. The security analysis indicates that our proposal is more secure and suitable for ubiquitous mobile communications specially in roaming agreement-less enviroment.
S. Sfar - One of the best experts on this subject based on the ideXlab platform.
-
CCNC - VIP (VHE in mobile IP Networks) architecture
CCNC 2006. 2006 3rd IEEE Consumer Communications and Networking Conference 2006., 2006Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user's mobility across different IP domains. For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user's profile between the home and the Foreign Network. Index Terms—VHE, Roaming, IEEE 802.11, Security
-
VIP (VHE in Mobile IP Networks) Architecture
Journal of Communications, 2006Co-Authors: O.r. Rojas, J.b. Othman, S. Sfar, Lynda MokdadAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user’s mobility across different IP domains.For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user’s profile between the home and the Foreign Network.
-
IPv6 micro-mobility management and VHE based on MSP
IEEE 60th Vehicular Technology Conference 2004. VTC2004-Fall. 2004, 2004Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:Mobility management is an important topic in wireless Networks. Mobile hosts are subject to changing their point of attachment from his home Network to another Foreign Network. In terms of personalized services, the Network manager must know the user location by implementing a roaming mechanism. VHE (virtual home environment) provides to the users an identical computing Network environment in a Foreign Network to the one in their home Network. In this paper we propose an architecture that ensures authorized user access and user mobility management. This architecture also guarantees the management of personalized services of the user according to the VHE specifications. We introduce a new concept named "mobility service provider" (MSP) which manages user mobility. The mechanisms for user authentication, management and update of the user profile, are based on LDAP (lightweight directory access protocol) services. For authorized user access, RADIUS (remote access dial in user service) security services are used. Additionally to user authentication, the main goal is service adaptability regardless of the equipment utilized. The VHE services are able to convey the user's profile between the home and Foreign Network. We present in this paper an architecture that supports user mobility.
O.r. Rojas - One of the best experts on this subject based on the ideXlab platform.
-
CCNC - VIP (VHE in mobile IP Networks) architecture
CCNC 2006. 2006 3rd IEEE Consumer Communications and Networking Conference 2006., 2006Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user's mobility across different IP domains. For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user's profile between the home and the Foreign Network. Index Terms—VHE, Roaming, IEEE 802.11, Security
-
VIP (VHE in Mobile IP Networks) Architecture
Journal of Communications, 2006Co-Authors: O.r. Rojas, J.b. Othman, S. Sfar, Lynda MokdadAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user’s mobility across different IP domains.For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user’s profile between the home and the Foreign Network.
-
IPv6 micro-mobility management and VHE based on MSP
IEEE 60th Vehicular Technology Conference 2004. VTC2004-Fall. 2004, 2004Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:Mobility management is an important topic in wireless Networks. Mobile hosts are subject to changing their point of attachment from his home Network to another Foreign Network. In terms of personalized services, the Network manager must know the user location by implementing a roaming mechanism. VHE (virtual home environment) provides to the users an identical computing Network environment in a Foreign Network to the one in their home Network. In this paper we propose an architecture that ensures authorized user access and user mobility management. This architecture also guarantees the management of personalized services of the user according to the VHE specifications. We introduce a new concept named "mobility service provider" (MSP) which manages user mobility. The mechanisms for user authentication, management and update of the user profile, are based on LDAP (lightweight directory access protocol) services. For authorized user access, RADIUS (remote access dial in user service) security services are used. Additionally to user authentication, the main goal is service adaptability regardless of the equipment utilized. The VHE services are able to convey the user's profile between the home and Foreign Network. We present in this paper an architecture that supports user mobility.
J.b. Othman - One of the best experts on this subject based on the ideXlab platform.
-
CCNC - VIP (VHE in mobile IP Networks) architecture
CCNC 2006. 2006 3rd IEEE Consumer Communications and Networking Conference 2006., 2006Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user's mobility across different IP domains. For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user's profile between the home and the Foreign Network. Index Terms—VHE, Roaming, IEEE 802.11, Security
-
VIP (VHE in Mobile IP Networks) Architecture
Journal of Communications, 2006Co-Authors: O.r. Rojas, J.b. Othman, S. Sfar, Lynda MokdadAbstract:In this study we propose a new architecture named VIP (VHE in mobile IP Networks) which guarantees authorized user access and user mobility management. The main goal is to bring the VIP architecture closer to the current GSM Networks. To achieve this goal our architecture is based on LDAP and RADIUS services. VIP is able to ensure user’s mobility across different IP domains.For the transportation of personalized services across different Networks VHE (Virtual Home Environment) is employed. VHE gives a set of recommendations for providing users their home environment in Foreign Networks. The VHE services are activated to transport the user’s profile between the home and the Foreign Network.
-
IPv6 micro-mobility management and VHE based on MSP
IEEE 60th Vehicular Technology Conference 2004. VTC2004-Fall. 2004, 2004Co-Authors: O.r. Rojas, J.b. Othman, S. SfarAbstract:Mobility management is an important topic in wireless Networks. Mobile hosts are subject to changing their point of attachment from his home Network to another Foreign Network. In terms of personalized services, the Network manager must know the user location by implementing a roaming mechanism. VHE (virtual home environment) provides to the users an identical computing Network environment in a Foreign Network to the one in their home Network. In this paper we propose an architecture that ensures authorized user access and user mobility management. This architecture also guarantees the management of personalized services of the user according to the VHE specifications. We introduce a new concept named "mobility service provider" (MSP) which manages user mobility. The mechanisms for user authentication, management and update of the user profile, are based on LDAP (lightweight directory access protocol) services. For authorized user access, RADIUS (remote access dial in user service) security services are used. Additionally to user authentication, the main goal is service adaptability regardless of the equipment utilized. The VHE services are able to convey the user's profile between the home and Foreign Network. We present in this paper an architecture that supports user mobility.