在TISPAN NGN環境下傳輸層的預先身份驗證機制

在現今的網路中，電子商務服務的應用大多受限於網路技術的發展，近幾年為了讓服務能夠應用在各種異質的網路上，各方研究單位紛紛投入次世代網路（next generation network, NGN）的發展，例如ETSI所提出的TISPAN標準規範。因此本研究針對TISPAN網路環境中傳輸層的身份驗證部份，透過加入預先執行的概念以及使用網路的情境分析，歸納出一套符合此網路標準的身份驗證運作流程，進而提出一套兼具安全及效率考量的身份驗證機制。我們透過量化比較的評估方式，證實本研究所提出的預先身份驗證機制能有效來改善現有網路切換時，過長延遲時間的問題，以貼近無縫式網路服務的遠景。

關鍵字

異質網路； NGN ； TISPAN ；身份驗證；無縫式服務

並列摘要

Drawing on the developing of Next-Generation-Network (e.g. TISPAN proposed by ETSI), many E-commerce services will be unlimited by the environment of heterogeneous networks. For accomplishing the vision of seamless services, we propose a new authentication mechanism in the transport layer within the TISPAN architecture. By combining the concept of pre-authentication and the consideration of the network-using situations and security issues, finally we propose a secure and efficient authentication mechanism. In addition, we quantitatively analyze the feasibility, safety and the consumption of resources to convince that our mechanism really can reduce the entire authentication actions when changing networks.