In this paper, we propose an access control mechanism for home networks. First, we examine existing access control mechanisms and summarize their shortcomings, such as bottleneck, single point of failure, and inconvenience of configuration. Then, we introduce new access control mechanism dealing with the defects. In the proposed mechanism, we classify the services into three groups based on their security sensitivity level, and provide different access control schemes to each security level service to make a difference among the protection levels of each service (i.e. to provide more secure access control mechanism to more important services.) Finally, we describe how the security and convenience are enforced by using our mechanism. Proposed access control mechanism is based on the authority delegation scheme of SPKI/SDSI (Simple Public Key Infrastructure /Simple Distributed Security Infrastructure.)
展开▼
