A Light-Size AKA Mechanism for Optimal Distributed AAA authorization Architecture

According to the different identities of end users and attributes and roles that they have been granted, this paper presents an optimal distributed AAA authorization architecture to assign them different network resources or services. To improve the performance, this paper thus gives a detailed analysis about its security issues and proposes a light-size key agreement mechanism, including three kinds of keys in different domains and anonymous identity verification to ensure communication security between Pac and NAS in wireless network. Final tests prove the feasibility of optimal authorization mechanism and good performance of this light-size key agreement mechanism.