1st Annual PKI Research Workshop---Proceedings
نویسنده
چکیده
Certificates carry signed statements within a PublicKey Infrastructure (PKI). As we begin to build more complex and more open PKIs, the limited expressiveness of current certificate languages becomes a concern. While certificates are traditionally treated as simple data structures conforming to a given schema, we show an alternative derivation of the concept of a certificate in which certificates can contain control information in the form of program code. One example is program code written in declarative statements in a variant of the relational algebra, which can work together in rich ways.
منابع مشابه
1st Annual PKI Research Workshop---Proceedings
In [1], a scalable and small-bandwidth certificate validation scheme was presented. We call this system NOVOMODO, to emphasize the new way in which it approaches the field. In this paper, we recall the NOVOMODO technology and • Compare the efficiency and security of NOVOMODO and OCSP; and • Discuss how NOVOMODO may simplify PKI management in several applications (e.g., attribute certs). 1. Trad...
متن کامل1st Annual PKI Research Workshop---Proceedings
The fundamental goal of PKIs is to provide a means for participating entities to establish and manage trust in other entities, either within or across domain boundaries. As PKIs have evolved, so has the set of alternate methods supporting validation of entities, their certificates, and their keys. Validation processing determines whether or not the acceptance of a certificate or key represents ...
متن کامل1st Annual PKI Research Workshop---Proceedings
Recently there has been considerable interest among PKI vendors and researchers in the concept of password-enabled PKI. Several viable proposals and products have emerged. Fundamentally there are two distinct methods for using passwords with private keys. One method is to use the password to retrieve a private key, while the other uses the password as one component of the private key. We motiva...
متن کامل1st Annual PKI Research Workshop---Proceedings
This paper contrasts the use of an ID PKI (Public Key Infrastructure) with the use of delegatable, direct authorization. It first addresses some commonly held beliefs about an ID PKI – that you need a good ID certificate to use digital signatures, that the ID certificate should come from a CA that has especially good private key security, that use of the ID certificate allows you to know with w...
متن کامل1st Annual PKI Research Workshop---Proceedings
Tuple reduction is the basic mechanism used in SPKI to make authorisation decisions. A basic problem with the SPKI authorisation syntax is that straightforward implementations of tuple reduction are quadratic in both time and space. In the paper we introduce a restricted version of the SPKI authorisation syntax, which appears to conform well with practice, and for which authorisation decisions ...
متن کامل