Comparison of Attribute and Public Key Certificates
AC is similar to PKC except that AC contains no public key because an AC verifier is under the control of the AC issuer, and therefore, trusts the issuer directly by having the public key of the issuer preinstalled. This means that once the AC issuer's private key is compromised, the issuer has to generate a new key pair and replaces the old public key in all verifiers under its control with the new one.
In addition to the absence of a public key, AC does not refer to the holder directly using identity information like in PKC but indirectly using the PKC. This means that the verification of an AC requires the presence of the PKC that is referred as the AC holder in the AC.
Similar to PKC, AC can be chained to delegate attributions. For example, an authorization certificate issued for Alice authorizes her to use a particular service. Alice can delegate this privilege to her assistant Bob by issuing an AC for Bob's PKC. When Bob wants to use the service, he presents his PKC and a chain of ACs starting from his own AC issued by Alice and then Alice's AC issued by the issuer that the service trusts. In this way, the service can verify that Alice has delegated her privilege to Bob and that Alice has been authorized to use the service by the issuer that controls the service. RFC 3281, however, does not recommend the use of AC chains because the complexity in administering and processing the chain is not worth the effort and there is little use of AC in the Internet.
Read more about this topic: Authorization Certificate
Famous quotes containing the words comparison, attribute, public and/or key:
“He was a superior man. He did not value his bodily life in comparison with ideal things. He did not recognize unjust human laws, but resisted them as he was bid. For once we are lifted out of the trivialness and dust of politics into the region of truth and manhood.”
—Henry David Thoreau (1817–1862)
“Girls tend to attribute their failures to factors such as lack of ability, while boys tend to attribute failure to specific factors, including teachers’ attitudes. Moreover, girls avoid situations in which failure is likely, whereas boys approach such situations as a challenge, indicating that failure differentially affects self-esteem.”
—Michael Lewis (late–20th-century)
“The moment when she crawled out onto the back of the open limousine in which her husband had been murdered was the first and last time the American people would see Jacqueline Bouvier Kennedy Onassis crawl.... She was the last great private public figure in this country. In a time of gilt and glitz and perpetual revelation, she was perpetually associated with that thing so difficult to describe yet so simple to recognize, the apotheosis of dignity.”
—Anna Quindlen (b. 1952)
“All meanings, we know, depend on the key of interpretation.”
—George Eliot [Mary Ann (or Marian)