Managing certificates in a corporate environment

Annales des Telecommunications/Annals of Telecommunications

Volumn 55, Issue 7, 2000, Pages 341-351

  Oppliger, Rolf ^a  

^a eSecurity Technologies Rolf Oppliger   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

PUBLIC KEY INFRASTRUCTURE; ATTRIBUTE CERTIFICATE; CERTIFICATION; CORPORATE ENVIRONMENT; CORPORATES; CRYPTOGRAPHIC SECURITY; E-COMMERCE APPLICATIONS; ELECTRONIC TRADE; PUBLIC KEY CERTIFICATES; PUBLIC KEYS; SECURITY PROTOCOLS;

CRYPTOGRAPHY; NETWORK PROTOCOLS; TELECOMMUNICATION SERVICES; AUTHENTICATION; AUTHORIZATION; ELECTRONIC COMMERCE; NETWORK SECURITY; PUBLIC KEY CRYPTOGRAPHY;

SECURITY OF DATA; STANDARDIZATION;

EID: 0034224509     PISSN: 00034347     EISSN: 19589395     Source Type: Journal    
DOI: None     Document Type: Article

References (35)

1. OPPLIGER (R.), Security technologies for the World Wide Web, Artech House, Norwood, MA, 1999
2. FORD (V.), BAUM (M.S.), Secure electronic commerce: building the infrastructure for digital signatures & encryption, Prentice Hall PTR, Upper Saddle River, NJ, 1997.
3. KOHNFELDER (L.M.), Towards a Practical public-key cryptosystem, Bachelor's thesis, Massachusetts Institute of Technology (MIT), Cambridge, MA, May 1978.
4. FEGHHI (J.), FEGHHI (J.), WILLIAMS (P.), Digital certificates: applied Internet security, Addison-Wesley Longman, Reading, MA, 1999.
5. The directory - authentication framework, ITU-T, Recommendation X.509, 1988.
6. KENT (S.T.), Internet privacy enhanced mail communications of the ACM, vol. 36, No. 8, August 1993, pp.48-60.
7. HOUSLEY (R.), FORD (W.), POLK (W.), SOLO (D.), Internet X.509 public infrastructure, certificate and CRL profile, Request for Comments 2459, January 1999.
8. ADAMS (C.), Internet X.509 public key infrastructure certificate management protocols, Request for Comments 2510, March 1999.
9. MYERS (M.), ADAMS (C.), SOLO (D.), and KEMP (D.), Internet X.509 Certificate request message format, Request for Comments 2511, March 1999.
10. CHOKHANI (S.), FORD (W.), Internet X.509 public key infrastructure certificate policy and certification practices framework, Request for Comments 2527, March 1999.
11. HOUSLEY (R.), POLK (W.), Internet X509 public key infrastructure representation of key exchange algorithm (KEA) keys in Internet X.509 public key infrastructure certificate, Request for Comments 2528, March 1999.
12. BOEYEN (S.), HOWES (T.), RICHARD (P.), Internet X.509 public key infrastructure operational protocols - LDAPV2, Request for Comments 2559, April 1999.
13. YEONG (Y.), HOWES (T.), KILLE (S.), Lightweight directory access protocol, Request for Comments, 1777 March 1995.
14. BOEYEN (S.), HOWES (T.), RICHARD (P.), Internet X.509 public key infrastructure LDAPV2 schema, Request for Comments 2587, June 1999.
15. HOUSLEY (R.), HOFFMAN (P.), Internet X.509 public key infrastructure operational protocols: FTP and HTTP, Request for Comments 2585, May 1999.
16. MYERS (M.), ANKNEY (R.), MALPANI (A.), GALPERIN (S.), ADAMS (C.), X.509 Internet public key infrastructure online, certificate status protocol - OSCP, Request for Comments 2560, June 1999.
17. ELLISON (C.), establishing identity without certification authorities, Proceedings of USENIX Security Symposium, July 1996.
18. FEIGENBAUM (J.), Towards an infrastructure for auhorization, position paper, Proceedings of USENIX Workshop on Electronic Commerce, 1998.
19. RIVEST (R.L.), LAMPSON (B.), SDSI - A simple distributed security infrastructure, April 1996.
20. RIVEST (R.L.), S-Expressions. http://theory.lcs.mit.edu/~rivestsexp.txt, May 1997.
21. th IEEE Computer Security Foundations Workshop, June 1997, pp. 98-108.
22. FREDETTE (M.H.), An implementation of SDSI - the simple distributed security infrastructure, Master's thesis, Massachusetts Institute of Technology (MIT), Cambridge MA, May 1997.
23. MORCOS (A.), A Java implementation of simple distributed security infrastructure, Master's thesis, Massachusetts Institute of Technology (MIT), Cambridge, MA, May 1998.
24. ELIEN (J.E.), Certificate Discovery Using SPKI/SDSI 2.0 certificates, Master's thesis, Massachusetts Institute of Technology (MIT), Cambridge, MA, May 1998.
25. OPPLIGER (R.), PERNUL (G.), STRAUSS (C.), Using attribute certificates to implement role-based authorization and access control models, work in progress.
26. OPPLIGER (R.), Authentication systems for secure networks, Artech House Publishers, Norwood, MA, 1996.
27. th Annual Computer Security Applications Conference (ACSAC '99), December 1999.
28. MICALI (S.), Efficient certificate revocation, Massachusetts Institute of Technology (MIT), Technical Memo MIT/LCS/TM-542b 1996.
29. MERKLE (R.C.), A certified digital signature, Proceedings of CRYPTO '89,1989, pp. 234-246.
30. KOCHER (P.), A quick introduction to certificate revocation trees (CRTs)
31. th USENIX Security Symposium, January 1998.
32. th IEEE Symposium on Reliable Distributed Systems, October 1999.
33. BLAZE (M.), FEIGENBAUM (J.), LACY (J.), Decentralized Trust Management, Proceedings of IEEE Conference on Security and Privacy, 1996, pp.164-173.
34. BLAZE (M.), FEIGENBAUM (J.), STRAUSS (M.), Compliance-checking in the policy maker trust-management system, Proceedings of Financial Cryptography, 1998, pp.251-265.
35. RUBIN (A.D.), GEER (D.), RANUM (M.J.), Web security source-book, John Wiley & Sons, Inc. New York NY, 1997.