Authentication, authorization, and accounting (AAA) is a framework used to control and track access within a computer network. Authentication is concerned with proving identity, authorization with granting permissions, accounting with maintaining a continuous and robust audit trail via logging. Common network protocols providing this functionality include TACACS+, RADIUS, and Diameter.

Disambiguation

In some related but distinct contexts, the term AAA has been used to refer to protocol-specific information. For example, Diameter uses the URI scheme AAA, which also stands for "Authentication, Authorization and Accounting", as well as the Diameter-based Protocol AAAS, which stands for "Authentication, Authorization and Accounting with Secure Transport". These protocols were defined by the Internet Engineering Task Force in RFC 6733 and are intended to provide an AAA framework for applications, such as network access or IP mobility in both local and roaming situations. However, the AAA paradigm is used more widely in the computer security industry.

Usage of AAA servers in CDMA networks

AAA servers in CDMA data networks are entities that provide Internet Protocol (IP) functionality to support the functions of authentication, authorization and accounting. The AAA server in the CDMA wireless data network architecture is similar to the HLR in the CDMA wireless voice network architecture. Types of AAA servers include the following: Current AAA servers communicate using the RADIUS protocol. As such, TIA specifications refer to AAA servers as RADIUS servers. While at one point it was expected that Diameter was to replace RADIUS, that has not happened. Diameter is largely used only in the mobile (3G/4G/5G) space, and RADIUS is used everywhere else. The behavior of AAA servers (radius servers) in the CDMA2000 wireless IP network is specified in TIA-835.