Distributed System Security Architecture

<h2 id="dssaspx">DSSA/SPX</h2>
<p>DSSA/SPX is the <a href="/facts/Authentication_protocol/pcX97lnA">authentication protocol</a> of DSSA. The CDC is a <a href="/facts/Public_key_certificate/J7aYI4Bx">certificate</a> granting server while the certificate is a ticket signed by CA which contains the public key of the party being certified. Since the CDC is merely distributing previously signed certificates, it is not necessary for it to be trusted.
</p><p>
  
    
      
        A
        →
        C
        D
        C
        :
        B
      
    
    {\displaystyle A\to CDC\colon B}

</p><p>
  
    
      
        C
        D
        C
        →
        A
        :
        certificate
        ⁡
        (
        B
        ,
        C
        A
        )
      
    
    {\displaystyle CDC\to A\colon \operatorname {certificate} (B,CA)}

</p><p>
  
    
      
        A
        →
        B
        :
        A
        ,
        {
        
          T
          
            A
          
        
        ,
        A
        }
        
          K
          
            A
            B
          
        
        ,
        {
        L
        ,
        A
        ,
        
          P
          
            A
          
          ′
        
        }
        
          S
          
            A
          
        
        ,
        {
        {
        
          K
          
            A
            B
          
        
        }
        
          P
          
            B
          
        
        }
        
          S
          
            A
          
          ′
        
      
    
    {\displaystyle A\to B\colon A,\{T_{A},A\}K_{AB},\{L,A,P'_{A}\}S_{A},\{\{K_{AB}\}P_{B}\}S'_{A}}

</p><p>
  
    
      
        B
        →
        C
        D
        C
        :
        A
      
    
    {\displaystyle B\to CDC\colon A}

</p><p>
  
    
      
        C
        D
        C
        →
        B
        :
        certificate
        ⁡
        (
        A
        ,
        C
        A
        )
      
    
    {\displaystyle CDC\to B\colon \operatorname {certificate} (A,CA)}

</p><p>
  
    
      
        B
        →
        A
        :
        {
        
          T
          
            A
          
        
        +
        1
        }
        
          K
          
            A
            B
          
        
      
    
    {\displaystyle B\to A\colon \{T_{A}+1\}K_{AB}}

</p>
<h2 id="external-links">External links</h2>
<ul><li><a href="https://web.archive.org/web/20060502050726/http://www.pasta.cs.uit.no/thesis/html/ronnya/node43.html">Tromsø University</a></li>
<li><a href="http://citeseer.ist.psu.edu/gasser89digital.html">Gasser (1989)</a></li></ul>

Distributed System Security Architecture open-in-new

Distributed System Security Architecture