EAP 인증/키설정 프로토콜 비교분석 = A Comparative Analysis of EAP Authentication/Key-Establishment Protocols

국문 초록 (Abstract)

EAP (Extensible authentication protocol) 프로토콜은 사실, IP 기반 위에서 다양한 유무선 접속 환경에 맞는 여러 가지 인증/키설정 (authentication and key establishment) 프로토콜을 수용할 수 있게 해주는 일종의 큰 틀이라고 할 수 있다. EAP와 함께 쓰일 수 있는 다양한 인증/키설정 프로토콜이 IETF에서 표준화되고 있고, 실제 환경에서 쓰이고 있다. 본 논문은, 이들 프로토콜 중에서 대표적인 것들 여섯 개를 골라서 비교 분석하고, 일부 유력한 패스워드 방식 인증/키설정 프로토콜을 둘러싼 지적재산권 분쟁의 여지에 대하여 기술적 해석을 시도하였으며, 이용환경 관점에서 어떤 취사 선택을 해야 할 것인가를 결론부분에서 제안하였다.

다국어 초록 (Multilingual Abstract)

EAP (Extensible authentication protocol) is a sort of general framework for authentication rather than a specific authentication protocol. An important consequence of this is that EAP can accommodate a variety of authentication/key-establishment protocols for different internet access networks possibly integrated to a common IP core network This paper tries a comparative analysis of several specific authentication/key establishment protocols for EAP, and suggest a strategic viewpoint toward the question: which one to un. In addition, we tried to make things clear about an intellectual property right issue with regard to some password-based protocols.

참고문헌 (Reference)

1 "the new security standard for the Internet" Prentice Hall 2003.

2 "http://www.ietf.org/ietf/IPR/PHOENIX-SRP-RFC2945.txt"

3 "http://www.ietf.org/ietf/IPR/LUCENT-SRP"

4 "[20] http://www.ietf.org/ietf/IPR/WU-SRP"

5 "The Secure Remote Password Protocol" ca : 97-1998 111,

6 "Standards for Local and Metropolitan Area Networks" 2001.

7 "Password-based Protocols Secure Against Dictionary Attacks Proceedings of the 1992 IEEE Computer Society Confer-ence on Research in Security and Privacy" 72-84, 1992

8 "PPP EAP TLS Authentication Protocol" 1999.10

9 "PPP Authentication Protocols" ietfrfc19921992.10

10 "LAN MAN standards of the IEEE Computer Society" 802 : 1997.11

11 "Inductive Analysis of the Internet Protocol TLS" 1999 332-351,

12 "Forward secrecy and its application to future mobile communications security Lecture Note in Computer Science" Springer-Verlag pkc20002000.

13 "Extended password methods immune to dictionary attack" ma : 1997.06

14 "EAP SRP-SHA1 Authentication Protocol" 2001.07

15 "EAP SKE authentication and key exchange protocol" (v 1) : 2003.

16 "Deriving Keys for use with Microsoft Point-to-Point" octo-ber2000

17 "Cryptographic methods for remote authentication" (383) : 1-,

18 "Cryptographic Protocols for Secure Communications" (599) : 31-,