Download The TIES final report

CONTENTS
EXECUTIVE SUMMARY
SECTION I – INTRODUCTION
1
Scope
2
Partners
3
References
4
Abbreviations
IV
1
1
2
2
3
SECTION II – DESIGN ISSUES
5
Model
6
General requirements
6.1
Applications of the ac-PKI
6.2
Simplicity
6.3
Standards-based
6.4
Application in FE
6.5
User confidentiality
6.6
Service environments
7
Stakeholders
7.1
Users
7.2
Institutions
7.3
DSPs
8
Risk analysis
8.1
Assets
8.2
Threats
8.3
Vulnerabilities
8.4
Institutional applications
8.5
Grid applications
8.6
Risk assessment
8.7
Key theft and disclosure
9
Estimates
10
Authorisation
11
Technical options
11.1 Key generation
11.2 Revocation
11.3 Certificate and CRL profiles
11.4 Use of Directory
12
PKI architecture
13
Existing institutional PKIs
14
Policy requirements
14.1 Policy classes
14.2 Grid
14.3 US HE model certificate policies
14.4 Two-tier policies
14.5 Policies for ac-PKI
15
Total cost of ownership (TCO)
4
4
4
4
5
5
6
6
6
7
7
7
8
9
9
9
10
11
11
11
11
12
13
13
13
15
17
19
19
20
21
21
22
22
23
23
24
SECTION III – CONCLUSIONS AND RECOMMENDATIONS
16
Conclusions
16.1 Initial questions
16.2 Effectiveness of X.509
16.3 CA architecture
16.4 Procurement
16.5 Policy
25
25
25
27
27
28
29
ii