Partner Product

AuthAgent Kerberos  (617)
AuthAgent Kerberos is a standards-based full-featured implementation of the Kerberos V network authentication mechanism for embedded network clients and services. It is fully interoperable with all standards-based Kerberos authentication servers (Key Distribution Centers or KDCs) including ones from Microsoft, MIT and Heimdal. It is a member of the AuthAgent family of authentication products offered by TeamF1.

AuthAgent Kerberos is a standards based full-featured implementation of the Kerberos V authentication mechanism designed exclusively for real-time and embedded operating systems. It includes the core functionality to enable Kerberos authentication in network clients and services. The Kerberos protocol (RFC1510) specifies an authentication and encryption scheme that allows a principal to become "known" by an authenticating server and then to use that authentication to access systems and services on the network. AuthAgent Kerberos allows an organization to leverage its enterprise network Kerberos servers to authenticate services and clients running on embedded devices such as networking and storage equipment, office devices such as printers, connected smart appliances, and remotely managed industrial control applications. With Kerberos becoming a preferred authentication mechanism for several network security protocols and a required part of several industry specifications such as PacketCable(tm), AuthAgent Kerberos provides a convenient way to add highly-secure authentication to embedded devices outside the enterprise as well.



AuthAgent Kerberos may be used in application-level protocols, such as telnet or FTP, to provide "user to embedded device" security or as the implicit authentication system of data streams or RPC mechanisms. It can also be used at a lower level for "embedded device to host security" or between embedded devices, in any standard or proprietary network protocols including IP, UDP, and TCP. It also finds application in larger credential based frameworks such as GSS-API. AuthAgent Kerberos is designed to be used as a standalone authentication mechanism in applications where only access control is important, or as a seamless add-on to other network security solutions offered by teamF1 such as SSHield, SecureShell, and V-IPSecure IPsec/IKE, where its authentication can be used along with network security protocols that protect data in transit.



AuthAgent Kerberos is a drop-in component for many real-time and embedded operating systems (OSes) including VxWorks 5.x, 6.x, and AE/653, as well as Linux 2.4 and 2.6 kernels. It has been extensively validated on a variety of CPU architectures, which minimizes development and integration efforts. AuthAgent Kerberos is uniquely optimized for each embedded OS supported, such as multi-tasking, memory partitions, and abstractions that are lean, yet fast and full-featured. The AuthAgent Kerberos distribution includes Project facility componentization and sample kerberized clients and services (native mode and GSS API based) to use as reference implementations.

617
<P>AuthAgent Kerberos provides a convenient way to add highly-secure authentication to embedded devices. Features include: </P> <UL> <LI>Support for the latest Kerberos V protocol authentication <LI>Kerberos-enables both network clients and services <LI>Allows single-logon convenience <LI>Provides for integrity and confidentiality of encrypted Kerberos messages <LI>Generates session key for authentication that may be used by application for session privacy <LI>Support for PKINIT for initial certificate-based authentication (when used with AuthAgent X.509 by TeamF1) <LI>Uses timestamps to protect against replays <LI>IPv6 Support <LI>Includes ticket caching functionality and memory based credentials cache <LI>Support for subkey messages for PacketCable&trade; compliance <LI>Interoperable with Kerberos KDCs, services and clients on other platforms <LI>Validated against Microsoft Windows&reg; Active Directory, Windows&reg; Server (including IAS) and Linux&reg; / UNIX&reg; MIT and Heimdal implementations <LI>Can be used as a stand-alone module or add-on to network security solutions such as SSH and IPSec <LI>Support for CPU types of either endian-ness on PowerPC, MIPS, X86, ARM/XScale </LI></UL> <P>RFC support:</P> <UL> <LI>RFC 1510 <LI>RFC 3962 <LI>ietf-cat-kerberos-pk-init-*.txt </LI></UL> <P>Also available:</P> <UL> <LI>AuthAgent RADIUS: A Remote Authentication Agent <LI>AuthAgent X.509: Digital Certificate Authentication <LI>SSHield SSH: Secure Shell &amp; SFTP/SCP <LI>V-IPSecure IPSec &amp; IKE: Network Layer Security </LI></UL>
AuthAgent Kerberos
AuthAgent Kerberos is a standards based full-featured implementation of the Kerberos V authentication mechanism designed exclusively for real-time and embedded operating systems. It includes the core functionality to enable Kerberos authentication in network clients and services. The Kerberos protocol (RFC1510) specifies an authentication and encryption scheme that allows a principal to become "known" by an authenticating server and then to use that authentication to access systems and services on the network. AuthAgent Kerberos allows an organization to leverage its enterprise network Kerberos servers to authenticate services and clients running on embedded devices such as networking and storage equipment, office devices such as printers, connected smart appliances, and remotely managed industrial control applications. With Kerberos becoming a preferred authentication mechanism for several network security protocols and a required part of several industry specifications such as PacketCable(tm), AuthAgent Kerberos provides a convenient way to add highly-secure authentication to embedded devices outside the enterprise as well. AuthAgent Kerberos may be used in application-level protocols, such as telnet or FTP, to provide "user to embedded device" security or as the implicit authentication system of data streams or RPC mechanisms. It can also be used at a lower level for "embedded device to host security" or between embedded devices, in any standard or proprietary network protocols including IP, UDP, and TCP. It also finds application in larger credential based frameworks such as GSS-API. AuthAgent Kerberos is designed to be used as a standalone authentication mechanism in applications where only access control is important, or as a seamless add-on to other network security solutions offered by teamF1 such as SSHield, SecureShell, and V-IPSecure IPsec/IKE, where its authentication can be used along with network security protocols that protect data in transit. AuthAgent Kerberos is a drop-in component for many real-time and embedded operating systems (OSes) including VxWorks 5.x, 6.x, and AE/653, as well as Linux 2.4 and 2.6 kernels. It has been extensively validated on a variety of CPU architectures, which minimizes development and integration efforts. AuthAgent Kerberos is uniquely optimized for each embedded OS supported, such as multi-tasking, memory partitions, and abstractions that are lean, yet fast and full-featured. The AuthAgent Kerberos distribution includes Project facility componentization and sample kerberized clients and services (native mode and GSS API based) to use as reference implementations.
NO
software
AuthAgent Kerberos is a standards-based full-featured implementation of the Kerberos V network authentication mechanism for embedded network clients and services. It is fully interoperable with all standards-based Kerberos authentication servers (Key Distribution Centers or KDCs) including ones from Microsoft, MIT and Heimdal. It is a member of the AuthAgent family of authentication products offered by TeamF1.