论文信息 - Using LDAP Directories for Management of PKI Processes

Using LDAP Directories for Management of PKI Processes

We present a framework for extending the functionality of LDAP servers from their typical use as a public directory in public key infrastructures. In this framework the LDAP servers are used for administrating infrastructure processes. One application of this framework is a method for providing proof-of-possession, especially in the case of encryption keys. Another one is the secure delivery of software personal security environments.

Alexander Wiesmaier | Marcus Lippert | Evangelos G. Karatsiolis

[1] Jeff Hodges,et al. Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security , 2000, RFC.

[2] Christopher Allen,et al. The TLS Protocol Version 1.0 , 1999, RFC.

[3] Jeff Hodges,et al. Lightweight Directory Access Protocol (v3): Technical Specification , 2002, RFC.

[4] Russ Housley,et al. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile , 2002, RFC.

[6] Carlisle M. Adams,et al. Internet X.509 Certificate Request Message Format , 1999, RFC.

[7] Valtteri Niemi,et al. On the usefulness of proof-of-possession , 2003 .

[8] Whitfield Diffie,et al. New Directions in Cryptography , 1976, IEEE Trans. Inf. Theory.

[9] John G. Myers. Simple Authentication and Security Layer (SASL) , 1997, RFC.

[10] Mark Smith. Definition of the inetOrgPerson LDAP Object Class , 2000, RFC.

[11] D. Chadwick. Secure Directories , 2000 .

[12] Jeff Hodges,et al. Authentication Methods for LDAP , 2000, RFC.

[13] X Itu,et al. Information technology-open systems interconnection-the directory: Public-key and attribute certific , 2000 .

[14] Alexey Melnikov,et al. Simple Authentication and Security Layer (SASL) , 2006, RFC.

[15] Jim Schaad,et al. Certificate Management Messages over CMS , 2000, RFC.

[16] Tim Howes,et al. Lightweight Directory Access Protocol (v3) , 1997, RFC.