Use of Domain/IP Resolver in Lieu of Traditional Username/Password Authentication

DOE currently operates an International Databases for sixteen countries. Currently, access is controlled by checking the IP address and/or username/password of registered users. Some countries would like to permit any citizen in their country to access the data, while other countries would like to restrict access to a set of specific registered citizens. This project will develop technology for the secure automation of access to this data. This technology would offer an authentication process that is customizable to an organization¿s needs and provide protection commensurate with the data being protected. Phase I will identify technologies that can provide policy-based access control, as well as sufficient security, to detect, prevent, and respond to IP spoofing, domain spoofing, anonymizers, web robots, and worms. Phase II will focus on generalizing the algorithms selected, so that they will be useful to a broad range of government and commercial customers. Commercial Applications and other Benefits as described by the awardee: Three market areas with large potential for Domain/IP authentication have been identified: government and on-line databases, commercial enterprises, and IT services and software vendors. All three have information that is somewhat proprietary or sensitive, but needs to be made available to a broad range of customers/business partners.