The New Jersey Institute of Technology's
Electronic Theses & Dissertations Project

Title:	Two factor authentication and authorization in ubiquitous mobile computing
Author:	Zhu, Qing
View Online:	njit-etd2008-055 (xi, 69 pages ~ 3.3 MB pdf)
Department:	Department of Electrical and Computer Engineering
Degree:	Master of Science
Program:	Computer Engineering
Document Type:	Thesis
Advisory Committee:	Ziavras, Sotirios (Committee chair) Rojas-Cessa, Roberto (Committee member) Hu, Jie (Committee member)
Date:	2008-01
Keywords:	Network authentication Network authorization Mobile computing
Availability:	Unrestricted
Abstract:	Handheld devices, such as mobile phones, PDAs and others, have become an integrated part of our lives. They are perfectly suitable to become the first real-life platforms for mobile computing applications. A lightweight holistic authentication and authorization scheme is presented for this typical wireless scenario. It is shown that either SIM or Kerberos authentication has its limitations. A two-factor authentication method SIM-based Kerberos authentication is developed to implement the Secure Single Sign-on function with LDAP protocol realization for authorization and mobile directory services. Performance analysis and power consumption analyses for this protocol are presented as well. Our results show that our SIM-Based Kerberos authentication is significantly optimized to be suitable for mobile platforms.