Journal of the Brazilian Computer Society

, Volume 16, Issue 4, pp 261–277

A UPnP extension for enabling user authentication and authorization in pervasive systems


    • Federal University of Campina Grande
  • Leandro Sales
    • Federal University of Alagoas
  • Hyggo Almeida
    • Federal University of Campina Grande
  • Angelo Perkusich
    • Federal University of Campina Grande
Open AccessOriginal Paper

DOI: 10.1007/s13173-010-0022-2

Cite this article as:
Sales, T., Sales, L., Almeida, H. et al. J Braz Comput Soc (2010) 16: 261. doi:10.1007/s13173-010-0022-2


The Universal Plug and Play (UPnP) specification defines a set of protocols for promoting pervasive network connectivity of computers and intelligent devices or appliances. Nowadays, the UPnP technology is becoming popular due to its robustness to connect devices and the large number of developed applications. One of the major drawbacks of UPnP is the lack of user authentication and authorization mechanisms. Thus, control points, those devices acting as clients on behalf of a user, and UPnP devices cannot communicate based on user information. This paper introduces an extension of the UPnP specification called UPnP-UP, which allows user authentication and authorization mechanisms for UPnP devices and applications. These mechanisms provide the basis to develop customized and secure UPnP pervasive services, maintaining backward compatibility with previous versions of UPnP.


Pervasive computingUniversal Plug and PlayAuthentication and authorization
Download to read the full article text

Copyright information

© The Brazilian Computer Society 2010