Abstract : There exist many obstacles that slow the global adoption of public key infrastructure (PKI) technology. The PKI interoperability problem, being poorly understood, is one of the most confusing. In this paper, we clarify the PKI interoperability issue by exploring both the juridical and technical domains. We demonstrate the origin of the PKI interoperability problem by determining its root causes, the latter being legal, organizational and technical differences between countries, which mean that relying parties have no one to rely on. We explain how difficult it is to harmonize them. Finally, we propose to handle the interoperability problem from the trust management point of view, by introducing the role of a trust broker which is in charge of helping relying parties make informed decisions about X.509 certificates.
Ronald C. Dodge; Lynn Futcher. 8th World Conference on Information Security Education (WISE), Jul 2013, Auckland, New Zealand. Springer, IFIP Advances in Information and Communication Technology, AICT-406, pp.68-82, 2013, Information Assurance and Security Education and Training. 〈10.1007/978-3-642-39377-8_8〉
https://hal.inria.fr/hal-01463660
Contributeur : Hal Ifip
<>
Soumis le : jeudi 9 février 2017 - 15:45:39
Dernière modification le : mercredi 29 novembre 2017 - 15:59:43
Document(s) archivé(s) le : mercredi 10 mai 2017 - 14:20:59
Ahmad Wazan, Romain Laborde, François Barrere, Abdelmalek Benzekri, David Chadwick. PKI Interoperability: Still an Issue? A Solution in the X.509 Realm. Ronald C. Dodge; Lynn Futcher. 8th World Conference on Information Security Education (WISE), Jul 2013, Auckland, New Zealand. Springer, IFIP Advances in Information and Communication Technology, AICT-406, pp.68-82, 2013, Information Assurance and Security Education and Training. 〈10.1007/978-3-642-39377-8_8〉. 〈hal-01463660〉
