16th Annual Computer Security Applications Conference (ACSAC'00)
Binding identities and attributes using digitally signed certificates
New Orleans, Louisiana
December 11-December 15
ISBN: 0-7695-0859-6
J.S. Park, Lab. for Inf. Security Technol., George Mason Univ., Fairfax, VA, USA
R. Sandhu, Lab. for Inf. Security Technol., George Mason Univ., Fairfax, VA, USA
A certificate is digitally signed by a certificate authority (CA) to confirm that the information in the certificate is valid and belongs to the subject. Certificate users can verify the integrity and validity of a certificate by checking the issuing CA's digital signature in the certificate and, if necessary, chasing certificate chain and revocation lists. Usually, we use certificates to provide the integrity of identity or attribute information of the subject. Attributes must be coupled with the corresponding identities. We introduce comprehensive approaches to bind identity and attribute certificates, identifying three different techniques: monolithic, autonomic, and chained signatures. We describe each technique and analyze the relative advantages and disadvantages of each.
Index Terms:
message authentication; certification; binding identities; digitally signed certificates; certificate authority; binding attributes; digital signature; attribute certificates; chained signatures; monolithic signatures; autonomic signatures
Citation:
J.S. Park, R. Sandhu, "Binding identities and attributes using digitally signed certificates," acsac, pp.120, 16th Annual Computer Security Applications Conference (ACSAC'00), 2000