基于主机标识的访问控制模型研究

身份认证和访问控制是Internet应用的重要方面，传统的实施方案通常针对于特定的应用，也不能用于普适计算环境下的移动终端。文中提出了一个新的访问控制模型，利用了由IETF定义的主机标识协议（HIP），并扩展了HIP基本交换过程来实现对用户的认证，并通过客户端主机标识和用户标识的绑定认证来建立主机和用户的绑定关系，从而实现对用户访问请求的判断。

Host Identity based Access Control Model

Identity authentication and access control are the most important aspects for Internet applications The traditional implementation schemes are generally application-specific, and not suitable for roaming terminals inapervasivecomputingenvironment. This paper presentsanewaccess control model. It utilizes the Host Identity Protocol （HIP） defined by IETF, and extends the HIP Basic exchange, thus to achieve authentication of user identity. With the extended exchange, the binding-authentication of the Host Identity and User Identity of the client is realized, and a relationship between the host and the user is establised.