1st Annual PKI Research Workshop---Proceedings
نویسنده
چکیده
In a distributed system, using authorisation certificate based access control tends to facilitate the granting of rights. On the other hand, the problems of limiting usage or revoking the rights become more difficult, as the issuer of the right is no longer in control of the issued certificate. In this paper we take a look at the role of certificates in access control, evaluate the technical merits of different validity management mechanisms an SPKI authorisation certificate supports, discuss the problems related to managing the validity and finally introduce a protocol for validity management.
منابع مشابه
1st Annual PKI Research Workshop---Proceedings
In [1], a scalable and small-bandwidth certificate validation scheme was presented. We call this system NOVOMODO, to emphasize the new way in which it approaches the field. In this paper, we recall the NOVOMODO technology and • Compare the efficiency and security of NOVOMODO and OCSP; and • Discuss how NOVOMODO may simplify PKI management in several applications (e.g., attribute certs). 1. Trad...
متن کامل1st Annual PKI Research Workshop---Proceedings
The fundamental goal of PKIs is to provide a means for participating entities to establish and manage trust in other entities, either within or across domain boundaries. As PKIs have evolved, so has the set of alternate methods supporting validation of entities, their certificates, and their keys. Validation processing determines whether or not the acceptance of a certificate or key represents ...
متن کامل1st Annual PKI Research Workshop---Proceedings
Recently there has been considerable interest among PKI vendors and researchers in the concept of password-enabled PKI. Several viable proposals and products have emerged. Fundamentally there are two distinct methods for using passwords with private keys. One method is to use the password to retrieve a private key, while the other uses the password as one component of the private key. We motiva...
متن کامل1st Annual PKI Research Workshop---Proceedings
This paper contrasts the use of an ID PKI (Public Key Infrastructure) with the use of delegatable, direct authorization. It first addresses some commonly held beliefs about an ID PKI – that you need a good ID certificate to use digital signatures, that the ID certificate should come from a CA that has especially good private key security, that use of the ID certificate allows you to know with w...
متن کامل1st Annual PKI Research Workshop---Proceedings
Tuple reduction is the basic mechanism used in SPKI to make authorisation decisions. A basic problem with the SPKI authorisation syntax is that straightforward implementations of tuple reduction are quadratic in both time and space. In the paper we introduce a restricted version of the SPKI authorisation syntax, which appears to conform well with practice, and for which authorisation decisions ...
متن کامل1st Annual PKI Research Workshop---Proceedings
Certificates carry signed statements within a PublicKey Infrastructure (PKI). As we begin to build more complex and more open PKIs, the limited expressiveness of current certificate languages becomes a concern. While certificates are traditionally treated as simple data structures conforming to a given schema, we show an alternative derivation of the concept of a certificate in which certificat...
متن کامل