A Policy-Based, Secure Access Control Mechanism for Network Roaming Infrastructures

In the Internet society, IP address is treated as information of organization. This is a problem that visitor uses IP address of visited organization because IP address user of visited organization is treated as a member of the organization. For that, the user´s access to home resources may be blocked by firewalls because the user´s IP address is not home´s one. Therefore an application of authentication and access control is needed. The requirements for authentication and access control method are summarized to six items; (1) getting accessibility to the Internet by using a user credential of the home. (2) Keeping accessibility to home resources. (3) Keeping a local accessibility to visited resources for the visitor. (4) Getting enough security along the wireless/wired channel. (5) Authenticating a user, and trusting by the result, and assigning an IP address of visited organization. (6) By the authentication information, keeping accessibility to the Internet by using a home IP address. The authors investigate the existing methods and point out the merit and demerit for these requirements. Finally, the authors propose a method named ´campus ubiquitous network´ that fulfill these all requirements