Journals Proceedings

Abstract

Distributed systems could be more secured with a distributed trust model based on Kerberos. The limitation of existing kerberos protocol is that it can only be used as an authentication service. However for many distributed services the authenticated subscribers must be verified for access authorization and for cost recovery, billing and resource planning purpose. Traditional Kerberos authentication schemes do not meet distributed system requirements of authorization, failsafe operation, accounting of service usage and resilience to loss of connectivity. This paper presents a new AAA Kerberos model for heterogeneous systems which can meet the requirements of authentication, authorization and accounting.