© University of Kent - Contact | Feedback | Legal | FOI | Cookies
The X.509 Privilege Management Infrastructure
DW Chadwick
In Borka Jerman-Blazic, Wolfgang Schneider, and Tomaz Klobucar, editors, Security and Privacy in Advanced Networking Technologies, pages 182-196. IOS Press, 2004 Proceedings of the NATO Advanced Networkign Workshop on Advanced Security Technologies in Networking, Bled, Slovenia, 15-18 September 2003.Abstract
Abstract. This paper provides an overview of the Privilege Management Infrastructure (PMI) introduced in the 2000 edition of X.509. It describes the entities in the infrastructure: Sources of Authority, Attribute Authorities and Privilege Holders, as well as the basic data structure - the attribute certificate - that is used to hold privileges. The contents of attribute certificates are described in detail, including the various policy related extensions that may be added to them. The similarities between PMIs and PKIs are highlighted. The paper also describes how attribute certificates can be used to implement the three well known access control schemes: DAC, MAC and RBAC. Finally the paper gives an overview of how a privilege verifier might operate, and the various types of information that need to be provided to it.
Download publication 156 kbytes (PDF)
Bibtex Record
@incollection{2278,
author = {DW Chadwick},
title = {{The X.509 Privilege Management Infrastructure}},
month = {unknown},
year = {2004},
pages = {182-196},
keywords = {determinacy analysis, Craig interpolants},
note = {Proceedings of the NATO Advanced Networkign Workshop on Advanced Security Technologies in Networking, Bled, Slovenia, 15-18 September 2003},
doi = {},
url = {http://www.cs.kent.ac.uk/pubs/2004/2278},
publication_type = {incollection},
submission_id = {18290_1131377862},
ISBN = {1576034308},
booktitle = {Security and Privacy in Advanced Networking Technologies},
publisher = {IOS Press},
editor = {Borka Jerman-Blazic and Wolfgang Schneider and Tomaz Klobucar},
}