HANDPROV : um modelo de controle de acesso a provedores de conteúdo baseado em informações de contexto

Abstract

Nowadays, the great (r)evolution of the mobile devices is taking place, not solely among higher purchasing users, since the launch of the first cell phones, access to them was more evident in a classified group of users (businessmen, politicians and other stratum with economic opportunities compatibles to the acquisition of these devices - as they were expensive). The low cost of these devices has supported thousands of people the opportunity to purchase a device whose function is not only making and receiving calls. The first mobile devices used exclusively for voice communication, but today they have features that support various applications such as access to the Internet, multimedia content, social networks, blogs, sending SMS, etc. These applications most often require authentication on the server side. Authentication, usually conceived from private information (ID and password through the user interaction with the interface) can be replaced in some applications, for context information (obtained from the environment, application, device and/or the user's own) or by differentiated methods of identification/authentication, such as automatic generation of "password" (tokens) with no direct interaction from user, facilitating the AAA (Authentication, Authorization and Accounting). In this dissertation is described an authentication model based on context information, called HANDPROV, in which the user performs handover of content provider in a transparent manner, without interacting directly to the AAA system. To validate the model described, we developed an application, having individual functions of performing audio stream from service providers arranged in a wireless network.