Scribd
Upload
6 views1 page

Understanding the AAA Framework

The AAA framework consists of authentication, authorization, and accounting, which are essential for verifying user access and managing resources. It involves using identification methods like usernames, authentication through passwords, and accounting via log data, with an emphasis on certificate authentication for devices. Implementing an authorization model simplifies the management of user access to resources, reducing complexity and preventing unauthorized data access.

Uploaded by

sangkim0707
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
6 views1 page

Understanding the AAA Framework

The AAA framework consists of authentication, authorization, and accounting, which are essential for verifying user access and managing resources. It involves using identification methods like usernames, authentication through passwords, and accounting via log data, with an emphasis on certificate authentication for devices. Implementing an authorization model simplifies the management of user access to resources, reducing complexity and preventing unauthorized data access.

Uploaded by

sangkim0707
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

AAA framework

authentication authorization and accounting

- identification, authentication, authorization, accounting

EX
identification -username
authentication - password
authorization - access available
accounting - log data

AAA server verify authentication of user

many devices are not physically available


how to authenticate a device
- put digitally signed certificate on the device

certificate authentication
- certificate authority
- organization creates certificate for device
-put it in to end user device and systems

authorization models

- put an authorization model in the middle

if no authorization model
- user have access to unnecessary unauthorized data
-multiple user have multiple resources - hard to scale

-using an authorization model in the middle


- reduce complexity , easy to understand the authorizations
-easy user and resource relationship

You might also like