Diameter WebAuth: An AAA-Based Identity Management Framework for Web Applications

With an increasing number of personalized information and services offered on the Internet, especially the World Wide Web, effective identity management solutions are demanded by application providers. Instead of a Web-based stand-alone approach, we extend existing network-based AAA mechanisms to be useable for identity management by Web applications. Our proposal, Diameter WebAuth, allows to seamlessly integrate Web-based services into a Diameter infrastructure for authentication, authorization, credit-control and identity management purposes. Diameter WebAuth offers comparable features to Web-based identity management solutions, benefits from the maturity and wide deployment of the Diameter protocol, and takes advantage of existing AAA setups.