Privilege management in large distributed telecommunication networks

Telecommunication networks consist of a large number of geographically distributed nodes. Administration of the equipment required for such networks is very complex, and errors in the administration can induce high costs to the network operator.

One of the measures that can help to reduce this risk is to reduce the number of people who have access to management functionality to a minimum. To further reduce the risk it is also desirable to be able to designate portions of the network and subsets of management functionality a technician has access to.

In this project we study the requirements for a secure and efficient access privilege management for telecommunication networks.