@inproceedings{9a1900712abe42eb8af5b5ba1b308a58,
title = "Certificate distribution with local autonomy",
abstract = "Any security architecture for a wide area network system spanning multiple administrative domains will require support for policy delegation and certificate distribution across the network. Practical solutions will support local autonomy requirements of participating domains by allowing local policies to vary but imposing restrictions to ensure overall coherence of the system. This paper describes the design of a such a system to control access to experiments on the ABone active network testbed. This is done through a special-purpose language extending the Query Certificate Manager (QCM) system to include protocols for secure mirroring. Our approach allows significant local autonomy while ensuring global security of the system by integrating verification with retrieval. This enables transparent support for a variety of certificate distribution protocols. We analyze requirements of the ABONE application, describe the design of a security infrastructure for it, and discuss steps toward implementation, testing and deployment of the system.",
keywords = "ABone, Access control, Active networks, Certificate distribution, Local autonomy, QCM, Query certificate manager, Security policy",
author = "Pankaj Kakkar and Michael McDougall and Gunter, {Carl A.} and Trevor Jim",
note = "Publisher Copyright: {\textcopyright} Springer-Verlag Berlin Heidelberg 2000.; 2nd International Working Conference on Active Networks, IWAN 2000 ; Conference date: 16-10-2000 Through 18-10-2000",
year = "2000",
doi = "10.1007/3-540-40057-5_21",
language = "English (US)",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer",
pages = "277--295",
editor = "Hiroshi Yasuda",
booktitle = "Active Networks - 2nd International Working Conference, IWAN 2000, Proceedings",
address = "Germany",
}