Authorization policy in a PKI environment
The major emphasis of Public Key Infrastructure has been to provide a cryptographically secure means of authenticating identities. While there are a number of proposed standards for authorization structures and protocols based on X.509 or other key-based identities, none have been widely adopted. As part of an effort to use X.509 identities to provide authorization in highly distributed environments, we have developed and deployed an authorization service based on X.509 identified users and access policy contained in certificates signed by X.509 identified stakeholders. The major goal of this system, called Akenti, is to produce a usable authorization system for an environment consisting of distributed resources used by geographically and administratively distributed users.
- Research Organization:
- Lawrence Berkeley National Lab. (LBNL), Berkeley, CA (United States)
- Sponsoring Organization:
- USDOE Director, Office of Science. Office of Advanced Scientific Computing Research. Mathematical, Information, and Computational Sciences Division (US)
- DOE Contract Number:
- AC03-76SF00098
- OSTI ID:
- 795352
- Report Number(s):
- LBNL-49512; R&D Project: K52011; TRN: US200212%%77
- Resource Relation:
- Conference: 1st Annual NIST PKI Research Workshop,, Gaithersburg, MD (US), 04/24/2002--04/25/2002; Other Information: PBD: 10 Apr 2002
- Country of Publication:
- United States
- Language:
- English
Similar Records
Security Technologies for Open Networking Environments (STONE)
Interoperable PKI Data Distribution in Computational Grids