An innovative policy-based cross certification methodology for public key infrastructures

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3545 LNCS, Issue , 2005, Pages 100-117

  Casola, Valentina ^a   Mazzeo, Antonino ^b   Mazzocca, Nicola ^b   Rak, Massimiliano ^a  

^a SECOND UNIVERSITY OF NAPLES   (Italy)

^b UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

MATHEMATICAL MODELS; PUBLIC POLICY; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

CROSS CERTIFICATION; PUBLIC KEY INFRASTRUCTURES; REFERENCE EVALUATION MODEL; SECURITY POLICIES;

PUBLIC KEY CRYPTOGRAPHY;

EID: 33646025538     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11533733_7     Document Type: Conference Paper

References (24)

1. Brewer D., Nash M., The Chinese Wall Security Policy, Proceedings of the 1989 IEEE Symposium on Security and Privacy, pp.206-214 (May 1989).
2. Canfora G., Troiano L., "An Extensive Comparison between OWA and OFNWA Aggregation," VIII Sigef Congress, Naples - Italy.2001.
3. Canfora G. and Troiano L., The Importance of Dealing with Uncertainty in the Evaluation of Software Engineering Methods and Tools. SEKE 2002. ACM Press, Ischia, Italy. 691-698 (2002)
4. Canfora G., Cerulo L., Preziosi R., Troiano L., A tool for Decision Support implementing OFNWA approach: a case study. SEKE 2003.
5. Casola V., Mazzeo A., Mazzocca N., Vittorini V., Policy Formalization to combine separate systems into larger connected networks of trust - Proceedings of NetCon'2002 Conference, Paris, France. 2002.
6. Casola V., Mazzeo A., Mazzocca N., Vittorini V., Policy based interoperability in distributed security infrastructures -Proceedings of 10th ISPE International conference on concurrent engineering: research and applications. Madeira, Spain. 2003.
7. Casola V., Preziosi R., Rak M., Troiano L. 2004. Security Level Evaluation: Policy and Fuzzy Technique. In IEEE Proceedings of International Conference on Information Technology: Coding and Computing (ITCC 2004), vol. 2, pp, 752-756, Las Vegas, ISBN 0-7695-2108-8.
8. Casola V., Preziosi R., Rak M., Troiano L., A Reference Model for Security Level Evaluation: Policy and Fuzzy Techniques, in JUCS - Journal of Universal Computer Science - edited by Ajith Abraham, Oklahoma State University, USA and L.C. Jain, University of South Australia, January 2005
9. Curry I., Trusted Public-Key Infrastructures, Version 1.2,Entrust Technologies www.entrust.com. 2000.
10. EuroPKI, 2000. Certificate Policy VERSION 1.1 (DRAFT 4), OID: 1.3.6.1.4.1. 5255.1.1.1.
11. M.S. Baum, W. Ford. Secure Electronic Commerce. Ed. Prentice Hall, 1997.
12. Grill S. An Approach to Formally Compare and Query Certification Practice Statements, Published on Informatik GI Workshop, Berlin 2000
13. Huitema C., Mendes S., A new approach to the X.509 framework: allowing a global authentication infrastructure without a global trust model, Proceedings of the 1995 Symposium on Network and Distributed System Security (SNDSS'95) 1995.
14. Klobucar T., Jerman-Blazic B., A Formalization and evaluation of certificate policies, Computer Communication 22(1999), 1104-1110
15. Kokolakis S.A., Kiountouzis E.A., Achieving Interoperability in a multiple-security-policies environment, Computer & Security. Vol 19, no. 3 pp 267-281, Elsevier Science 2000.
16. Jajodia S., Samarati P., and Subrahmanian V. S., "A Logical Language for Expressing Authorizations," Published in the proceedings of IEEE Symposium on Security and Privacy, Oakland, USA, 1997.
17. Kagal L., Finin T., Joshi A.,2003. A Policy Language for a Pervasive Computing Environment, IEEE 4th International Workshop on Policies for Distributed Systems and Networks (Policy 2003)
18. NIST 2001, Report of Federal Bridge Certification Authority Initiative and Demonstration.
19. Polk W., Hastings N. 2000. Bridge Certification Authorities: Connecting B2B Public Key Infrastructures.
20. RFC2459 - Internet X.509 Public Key Infrastructure Certificate and CRL Profile. 1999.
21. RFC 3647: Chokhani, S. & Ford, W., 1999. Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework.
22. Turnbull J. "Cross-Certification and PKI Policy Networking" Version 1.1, Entrust Technologies www.entrust.com. 2000.
23. Digital Signature and Confidentiality, Certificate Policies for the Government of Canada Public Key Infrastructure, version 3.02, 1999.
24. Centro Tecnico per la. Rete Unitaria, Sezione Sicurezza, 2001. Manuale operativo per il servizio di certificazione di chiavi pubbliche per la rete unitaria della pubblica amministrazione, Versione: 1.1