Title :
A Certificate Management System: structure, functions and protocols
Author :
Kapidzic, Nada ; Davidson, Alan
Author_Institution :
Dept. of Comput. & Syst. Sci., Stockholm Univ., Sweden
Abstract :
The Certificate Management System (CMS) is a networked system for generation, distribution, storage and verification of certificates for use in a variety of security enhanced applications. The structure of a certificate is defined in the X.509 standard. The Internet PEM specification describes the structure and functionality of a global certification hierarchy, as well as the structure of its internal messages. The approach described in this paper specifies new roles and responsibilities for certification authorities. By extending the existing specifications with functions for the storage and retrieval of certificates, the CMS becomes functionally complete and immediately operable. Furthermore, it can operate either as an autonomous hierarchy, or integrated into a global system
Keywords :
Internet; certification; computer networks; security of data; telecommunication standards; Certificate Management System; Internet PEM specification; X.509 standard; autonomous hierarchy; certificate retrieval; certificate storage; certificate verification; certification authorities; global certification hierarchy; global system; internal messages; networked system; security enhanced applications; Application software; Collision mitigation; Computer security; Content addressable storage; Distributed computing; Internet; Principal component analysis; Protocols; Secure storage; Technology management;
Conference_Titel :
Network and Distributed System Security, 1995., Proceedings of the Symposium on
Conference_Location :
San Diego, CA
Print_ISBN :
0-8186-7027-4
DOI :
10.1109/NDSS.1995.390637