IDUP and SPKM: developing public-key-based APIs and mechanisms for communication security services

Proceedings of Internet Society Symposium on Network and Distributed Systems Security Pub Date : 1996-02-22 DOI:10.1109/NDSS.1996.492419

C. Adams

{"title":"IDUP and SPKM: developing public-key-based APIs and mechanisms for communication security services","authors":"C. Adams","doi":"10.1109/NDSS.1996.492419","DOIUrl":null,"url":null,"abstract":"In this paper we discuss progress in the development of application program interfaces (APIs) and mechanisms which provide a comprehensive set of security services to application developers. The APIs, though similar, are designed for distinct environments: the session API (\"GSS\") is aimed at the on-line real-time messaging environment; the store-and-forward API (\"IDUP\") is particularly suited to electronic-mail types of environments (where messages are secured independently of any an-line communication with intended recipients of those messages). Both APIs are designed to be easy to use, yet with appropriate public-key-based mechanisms (such as SPKM and PIM) include many necessary services for communication security, such as data origin authentication, data confidentiality, data integrity, and support for non-repudiation. A full key management and certification infrastructure can be provided by implementations of these APIs/mechanisms in a way which is completely transparent to the calling application thus ensuring maximum flexibility and scalability to future environments.","PeriodicalId":104846,"journal":{"name":"Proceedings of Internet Society Symposium on Network and Distributed Systems Security","volume":"38 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"1996-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of Internet Society Symposium on Network and Distributed Systems Security","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/NDSS.1996.492419","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 2

Abstract

In this paper we discuss progress in the development of application program interfaces (APIs) and mechanisms which provide a comprehensive set of security services to application developers. The APIs, though similar, are designed for distinct environments: the session API ("GSS") is aimed at the on-line real-time messaging environment; the store-and-forward API ("IDUP") is particularly suited to electronic-mail types of environments (where messages are secured independently of any an-line communication with intended recipients of those messages). Both APIs are designed to be easy to use, yet with appropriate public-key-based mechanisms (such as SPKM and PIM) include many necessary services for communication security, such as data origin authentication, data confidentiality, data integrity, and support for non-repudiation. A full key management and certification infrastructure can be provided by implementations of these APIs/mechanisms in a way which is completely transparent to the calling application thus ensuring maximum flexibility and scalability to future environments.

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

IDUP和SPKM:为通信安全服务开发基于公钥的api和机制

在本文中，我们讨论了应用程序接口(api)和为应用程序开发人员提供一套全面的安全服务的机制的开发进展。这些API虽然相似，但设计用于不同的环境:会话API(“GSS”)针对在线实时消息传递环境;存储转发API(“IDUP”)特别适合于电子邮件类型的环境(在这种环境中，消息的安全性独立于与这些消息的预期接收者的任何在线通信)。这两种api都设计得易于使用，但如果使用适当的基于公钥的机制(如SPKM和PIM)，则包括许多必要的通信安全服务，如数据源身份验证、数据机密性、数据完整性和对不可否认性的支持。这些api /机制的实现可以以对调用应用程序完全透明的方式提供完整的密钥管理和认证基础设施，从而确保对未来环境的最大灵活性和可伸缩性。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

Proceedings of Internet Society Symposium on Network and Distributed Systems Security

自引率

0.00%

发文量

期刊最新文献

C-HTTP-the development of a secure, closed HTTP-based network on the Internet Mixing E-mail with Babel A case study of secure ATM switch booting A flexible distributed authorization protocol IDUP and SPKM: developing public-key-based APIs and mechanisms for communication security services