Using LDAP Directories for Management of PKI Processes

Karatsiolis, Vangelis; Lippert, Marcus; Wiesmaier, Alexander

doi:10.1007/978-3-540-25980-0_10

Cited by 1 publication

(5 citation statements)

References 11 publications

(10 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This assures that a certicate cannot be used before the entity has updated its local data. The process can be enhanced to an indirect proof-of-possession as described in [8], if the entity's key-pair can be used for encryption. In this case the certicate would not be put in the attribute hiddenUserCertificate, but be encrypted with the contained public key and written to userEncryptedCertificate.…”

Section: Registration and Initial Certicationmentioning

confidence: 99%

“…It allows them to download the certicates from the LDAP, store them on the smart card and write them back to the userCertificate attribute. The application supports proof-ofpossession by using the userEncryptedCertificate attribute as proposed in [8].…”

Section: Case Studymentioning

confidence: 99%

“…In this context they are used for publishing certicates and certicate revocation information. We show in [8] how LDAP directories can support two important PKI functions. One is to provide a proof-of-possession for keys that can be used only for encryption.…”

Section: Introductionmentioning

confidence: 99%

“…The progress of each operation is reected by the LDAP and thus it is visible to trust center operators as well as to entities. The mechanism can further be combined with the proof-of-possession described in [8]. This work has rst been presented at the 4th International Workshop for applied PKI (IWAP'05) [13].…”

Section: Introductionmentioning

confidence: 99%

“…The trust center must therefore be able to accept the respective data format, e.g. PKCS#10[15], or perform an indirect proof-of-possession as described in[8].3. The trust center generates the key-pair and ships it as a softtoken.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Life-cycle management of X.509 certificates based on LDAP directories

Lippert

Karatsiolis²,

Wiesmaier

et al. 2006

JCS

View full text Add to dashboard Cite

Companies and organizations employ PKI technology to secure the communication in their intranets and over the internet. The services of authentication, non-repudiation, condentiality and the transport of authorization information are often supported by X.509 certicates. The synchronization of the certicates' life-cycle with the management of the PKI users is a common problem. We propose a mechanism to achieve this synchronization based on directory services. This enables to transparently update the information provided by the PKI and offers a high potential for automation. The mechanism spares personnel and is less error-prone, since it relies on processes and data that are already established. It reduces the costs to bootstrap and operate the infrastructure. We show a case study on the proposed mechanism that was conducted at the Technische Universität Darmstadt in Germany in order to supply 20,000 students with certicates and keys.

show abstract

Section: Registration and Initial Certicationmentioning

confidence: 99%

Section: Case Studymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations