Authentication of UPnP and Security Management of Information Appliances

• Main Authors: Ju-Ming Chang, 張儒銘
• Other Authors: Wen-Gong Shieh
• Format: Others
• Language: zh-TW
• Published: 2005
• Online Access: http://ndltd.ncl.edu.tw/handle/29669968252343984762

碩士 === 中國文化大學 === 資訊管理研究所 === 93 === This research focuses on the information appliances which support UPnP in a home network. It is designed as a flexible, easy to use standard to provide connectivity to un-managed networks at house, public spaces, or business places. Although UPnP can support self-configuration and automatic device discovery, it has inherent security problems. When information appliances connect to a network, they can be detected, and controlled by any users in the same network using UPnP protocol. UPnP does not identify users. In addition, it has no access control mechanism. Therefore, this research provides authentication and access control mechanism for UPnP using smart card and an access control server. This research develops an UPnP comparable security control model for information appliances. By using smart card we allow user to freely choose password including “weak password” (that means the pass-word is easy to guess). The authentication algorithms in the model use hash function and exclusive-or operation, which can lower the cost of processing. With access control server, a manager can easily manage users’ data and control access to information ap-pliances. Finally, the Microsoft Visual Basic .NET is used to practice this model. This model can provide authentication and access control which the original UPnP protocol can not provide.