17 th International Conference on Advanced Information Networking and Applications (AINA'03) Privacy-Enhanced SPKI Access Control on PKIX and Its Application to Web Server Xi?an, China March 27-March 29 ISBN: 0-7695-1906-7
Access control using PKIX (Public Key Infrastructure with X.509) may cause the privacy problem. It is caused mainly by the fact that a server can know client?s ID. To solve this problem, we proposed restricted anonymous access control scheme using SPKI (Simple Public Key Infrastructure). It can make a server provide service to an authorized client. It still has another problem: SPKI is not so popular as PKIX. PKIX has many efficient technologies such like SSL (Secure Socket Layer), but SPKI can?t directly use these technologies. In this paper, our implementation utilizes the slightest extension of PKIX, namely,we use an X.509 Certificate as an Authorization Certificate and PKIX?s technologies, i.e.SSL. Therefore, our approach can make some proposed SPKI schemes practical and useful. In this paper, the proposed scheme is applied to access control web server. The system demonstrates that it succeeds in adding privacy-enhanced access control to the SSL mutual authentication. We also describe and discuss the details of implementations.
Citation:
Takamichi Saito, Kentaro Umesawa, Toshiyuki Kito, Hiroshi G. Okuno, "Privacy-Enhanced SPKI Access Control on PKIX and Its Application to Web Server," aina, pp.696, 17 th International Conference on Advanced Information Networking and Applications (AINA'03), 2003 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||