Authorization policy in a PKI environment

Conference · Wed Apr 10 04:00:00 EDT 2002

OSTI ID:795352

Thompson, Mary R ^[1]; Mudumbai, Srilekha S; Essiari, Abdelilah; Chin, Willie

---

1. LBNL Library

The major emphasis of Public Key Infrastructure has been to provide a cryptographically secure means of authenticating identities. While there are a number of proposed standards for authorization structures and protocols based on X.509 or other key-based identities, none have been widely adopted. As part of an effort to use X.509 identities to provide authorization in highly distributed environments, we have developed and deployed an authorization service based on X.509 identified users and access policy contained in certificates signed by X.509 identified stakeholders. The major goal of this system, called Akenti, is to produce a usable authorization system for an environment consisting of distributed resources used by geographically and administratively distributed users.

• Research Organization: Ernest Orlando Lawrence Berkeley National Laboratory, Berkeley, CA (US)
• Sponsoring Organization: USDOE Director, Office of Science. Office of Advanced Scientific Computing Research. Mathematical, Information, and Computational Sciences Division (US)
• DOE Contract Number: AC03-76SF00098
• OSTI ID: 795352
• Report Number(s): LBNL--49512
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS
COMPUTER NETWORKS
ENTRY CONTROL SYSTEMS
IDENTIFICATION SYSTEMS
PKI AUTHORIZATION DISTRIBUTED SECURITY
SECRECY PROTECTION
SECURITY