Table of Contents

1 Scope<br>2 Normative references<br>3 Definitions<br>4 Abbreviations<br>5 Conventions<br>6 Frameworks overview<br>7 Public keys and public-key certificates<br>8 Trust models<br>9 Public-key certificate and CRL extensions<br>10 Delta CRL relationship to base<br>11 Authorization and validation lists<br>12 Certification path processing procedure<br>13 PKI directory schema<br>14 Attribute certificates<br>15 Attribute authority, source of authority and<br>&nbsp;&nbsp;&nbsp;certification authority relationship<br>16 PMI models<br>17 Attribute certificate and attribute certificate<br>&nbsp;&nbsp;&nbsp;revocation list extensions<br>18 Delegation path processing procedure<br>19 PMI directory schema<br>20 Protocol support for public-key and privilege<br>&nbsp;&nbsp;&nbsp;management infrastructures<br>21 Authorization and validation list management<br>22 Trust broker protocol<br>Annex A - Public-key and attribute certificate<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;frameworks<br>Annex B - Reference definition of cryptographic<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;algorithms<br>Annex C - Certificate extension attribute types<br>Annex D - External ASN.1 modules<br>Annex E - CRL generation and processing rules<br>Annex F - Examples of delta CRL issuance<br>Annex G - Privilege policy and privilege attribute<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;definition examples<br>Annex H - An introduction to public key cryptography<br>Annex I - Examples of use of certification path<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;constraints<br>Annex J - Guidance on determining for which<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;policies a certification path is valid<br>Annex K - Key usage certificate extension issues<br>Annex L - Deprecated extensions<br>Annex M - Directory concepts<br>Annex N - Considerations on strong authentication<br>Annex O - Alphabetical list of information item<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;definitions<br>Annex P - Amendments and corrigenda<br>Bibliography

Abstract

Provides some of the security requirements in the areas of authentication and other security services through the provision of a set of frameworks upon which full services can be based.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	British Standards Institution
Pages
ISBN
Committee	IST/6
Supersedes	92/61744 DC : DRAFT APR 1992