Secure Sharing of User Information via RADIUS in Inter-Regional Public WLAN Roaming

• Item type: SIG Technical Reports(1)
• 公開日: 2025-05-22
• タイトル / 言語: ja
• タイトル: Secure Sharing of User Information via RADIUS in Inter-Regional Public WLAN Roaming
• タイトル / 言語: en
• タイトル: Secure Sharing of User Information via RADIUS in Inter-Regional Public WLAN Roaming
• 言語: eng
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_18gh
• 資源タイプ: technical report
• 著者所属: Kyoto University
• 著者所属: Local 24
• 著者所属: Local 24
• 著者所属: National Institute of Informatics
• 著者所属: Tohoku University
• 著者所属(英): en
• 著者所属(英): Kyoto University
• 著者所属(英): en
• 著者所属(英): Local 24
• 著者所属(英): en
• 著者所属(英): Local 24
• 著者所属(英): en
• 著者所属(英): National Institute of Informatics
• 著者所属(英): en
• 著者所属(英): Tohoku University
• 著者名: Yasuo,Okabe; Takenori,Hirose; Ayaka,Kurosawa; Eisaku,Sakane; Hideaki,Goto
• 著者名(英): Yasuo Okabe; Takenori Hirose; Ayaka Kurosawa; Eisaku Sakane; Hideaki Goto
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: In RADIUS-based public Wi-Fi roaming services such as eduroam and OpenRoaming, users are identified using a temporary pseudonym called CUI (Chargeable User Identity) issued by the IdP. Neither the IdP nor the ANP (Access Network Provider) can independently determine “who is where”, which structurally ensures location privacy. However, due to this structure, even when users consent, providing location-aware services while identifying the user remains challenging. In this study, we propose a new architecture that separates the IdP, ANP, and LB (Location Broker) into three distinct entities. The IdP generates a CUI by combining the real ID and a pseudo ID but does not know the location. The ANP holds the location and CUI but does not know the real ID nor the pseudo ID. Only the neutral LB combines the pseudo ID and location information for sessions with explicit user consent and securely supplies it to LSPs (Location-aware Service Providers). By strictly limiting the entity responsible for binding real IDs and location information, this architecture demonstrates the ability to maintain location privacy while providing location-aware services resistant to location spoofing. We will also discuss business use cases for inter-regional collaboration utilizing this architecture, such as its application to tourism promotion and its use in evacuation shelters during disasters.
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: In RADIUS-based public Wi-Fi roaming services such as eduroam and OpenRoaming, users are identified using a temporary pseudonym called CUI (Chargeable User Identity) issued by the IdP. Neither the IdP nor the ANP (Access Network Provider) can independently determine “who is where”, which structurally ensures location privacy. However, due to this structure, even when users consent, providing location-aware services while identifying the user remains challenging. In this study, we propose a new architecture that separates the IdP, ANP, and LB (Location Broker) into three distinct entities. The IdP generates a CUI by combining the real ID and a pseudo ID but does not know the location. The ANP holds the location and CUI but does not know the real ID nor the pseudo ID. Only the neutral LB combines the pseudo ID and location information for sessions with explicit user consent and securely supplies it to LSPs (Location-aware Service Providers). By strictly limiting the entity responsible for binding real IDs and location information, this architecture demonstrates the ability to maintain location privacy while providing location-aware services resistant to location spoofing. We will also discuss business use cases for inter-regional collaboration utilizing this architecture, such as its application to tourism promotion and its use in evacuation shelters during disasters.
• 書誌レコードID / 収録物識別子タイプ: NCID
• 書誌レコードID / 収録物識別子: AA12628327
• 書誌情報: 研究報告コンシューマ・デバイス＆システム（CDS）; 巻 2025-CDS-43, 号 2, p. 1-6, 発行日 2025-05-22
• ISSN / 収録物識別子タイプ: ISSN
• ISSN / 収録物識別子: 2188-8604
• Notice: SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc.
• 出版者 / 言語: ja
• 出版者: 情報処理学会