Centralized Online Sign-Up and Client Certificate Issuing System for Eduroam

Eduroam is the world-wide de-facto standard Wireless LAN (WLAN) roaming system for research and educational institutions. In the current eduroam system, many institutions authenticate users by ID and password. However, the demands for authentication by client certificates are increasing for higher security and usability reasons. High complexity in the certificate issuing and distribution process at each institution can be a great problem. In this paper, we propose a centralized client certificate issuing system using Delegate Authentication System (DEAS). In addition, we develop online sign-up system for DEAS since manual ID distribution is imposing heavy burden to the institutional administrators in the current DEAS. The proposed systems are effective also for the disruption-tolerant authentication architecture, which realizes more stable and efficient eduroam system.