作者:标准资料网 时间:2024-05-13 08:42:27   浏览:8050   来源:标准资料网

【英文标准名称】:Informationtechnology-OpenSystemsInterconnection-TheDirectory:Public-keyandattributecertificateframeworks
【原文标准名称】:信息技术.开放系统互连.目录:公共键和属性认证框架
【标准号】:ISO/IEC9594-8-2005
【标准状态】:作废
【国别】:国际
【发布日期】:2005-12
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1/SC6
【标准类型】:()
【标准水平】:()
【中文主题词】:校验;合格证书;电信设备;数据网络;数据处理;定义;人名地址录;膨胀;导则;信息交换;信息技术;计数检查;作标记;网络互连;开式系统;开放系统互连;电信
【英文主题词】:Authentication;Certificates;Communicationservice;Datanetwork;Dataprocessing;Definitions;Directories;Expansion(deformation);Guidelines;Informationinterchange;Informationtechnology;Inspectionbyattributes;Marking;Networkinterconnection;Opensystems;Opensystemsinterconnection;OSI;Telecommunication;Telecommunications
【摘要】:ThisRecommendation|InternationalStandardaddressessomeofthesecurityrequirementsintheareasofauthenticationandothersecurityservicesthroughtheprovisionofasetofframeworksuponwhichfullservicescanbebased.Specifically,thisRecommendation|InternationalStandarddefinesframeworksfor:–Public-keycertificates;–Attributecertificates;–Authenticationservices.Thepublic-keycertificateframeworkdefinedinthisRecommendation|InternationalStandardincludesdefinitionoftheinformationobjectsforPublicKeyInfrastructure(PKI),includingpublic-keycertificates,andCertificateRevocationList(CRL).TheattributecertificateframeworkincludesdefinitionoftheinformationobjectsforPrivilegeManagementInfrastructure(PMI),includingattributecertificates,andAttributeCertificateRevocationList(ACRL).ThisSpecificationalsoprovidestheframeworkforissuing,managing,usingandrevokingcertificates.Anextensibilitymechanismisincludedinthedefinedformatsforbothcertificatetypesandforallrevocationlistschemes.ThisRecommendation|InternationalStandardalsoincludesasetofstandardextensionsforeach,whichisexpectedtobegenerallyusefulacrossanumberofapplicationsofPKIandPMI.Theschemacomponents,includingobjectclasses,attributetypesandmatchingrulesforstoringPKIandPMIobjectsintheDirectory,areincludedinthisRecommendation|InternationalStandard.OtherelementsofPKIandPMI,beyondtheseframeworks,suchaskeyandcertificatemanagementprotocols,operationalprotocols,additionalcertificateandCRLextensionsareexpectedtobedefinedbyotherstandardsbodies(e.g.,ISOTC68,IETF,etc.).TheauthenticationschemedefinedinthisRecommendation|InternationalStandardisgenericandmaybeappliedtoavarietyofapplicationsandenvironments.TheDirectorymakesuseofpublic-keycertificatesandattributecertificates,andtheframeworkfortheDirectory'suseofthesefacilitiesisalsodefinedinthisRecommendation|InternationalStandard.Public-keytechnology,includingcertificates,isusedbytheDirectorytoenablestrongauthentication,signedand/orencryptedoperations,andforstorageofsignedand/orencrypteddataintheDirectory.AttributecertificatescanbeusedbytheDirectorytoenablerule-basedaccesscontrol.AlthoughtheframeworkfortheseisprovidedinthisSpecification,thefulldefinitionoftheDirectory'suseoftheseframeworks,andtheassociatedservicesprovidedbytheDirectoryanditscomponentsissuppliedinthecompletesetofDirectorySpecifications.ThisRecommendation|InternationalStandard,intheAuthenticationservicesframework,also:–specifiestheformofauthenticationinformationheldbytheDirectory;–describeshowauthenticationinformationmaybeobtainedfromtheDirectory;–statestheassumptionsmadeabouthowauthenticationinformationisformedandplacedintheDirectory;–definesthreewaysinwhichapplicationsmayusethisauthenticationinformationtoperformauthenticationanddescribeshowothersecurityservicesmaybesupportedbyauthentication.ThisRecommendation|InternationalStandarddescribestwolevelsofauthentication:simpleauthentication,usingapasswordasaverificationofclaimedidentity;andstrongauthentication,involvingcredentialsformedusingcryptographictechniques.Whilesimpleauthenticationofferssomelimitedprotectionagainstunauthorizedaccess,onlystrongauthenticationshouldbeusedasthebasisforprovidingsecureservices.Itisnotintendedtoestablishthisasageneralframeworkforauthentication,butitcanbeofgeneraluseforapplicationswhichconsiderthesetechniquesadequate.
【中国标准分类号】:L79
【国际标准分类号】:35_100_70
【页数】:162P.;A4
【正文语种】:英语