1. CS526 – Advanced Internet And Web Systems Semester Project Public Key Infrastructure (PKI) By Samatha Sudarshanam

2. Introduction PKI’s? Functionality of a Public Key Infrastructure –Creation of the key–pair and the certificate request –Signing of the certificate request by the Certification Authority –Certification Authority chains –Typical uses of public key cryptography

3. PKIX Important concepts with regard to the PKIX standards –Certificate–using Systems and PKIs –Certificate–using Systems and PMIs

4. PKIX (cntd …) PKIX standardization areas. Public–key infrastructure functionality Public–Key Infrastructure (PKI) Privilege Management Infrastructure (PMI)

5. PKIX standardization areas –Profiles of X.509 v3 Public Key Certificates and X.509 v2 Certificate Revocation Lists (CRLs). –Management protocols –Operational protocols. –Certificate policies and Certificate Practice Statements. –Time–stamping and data–certification/validation services

6. Public–key infrastructure functionality Registration Initialisation Certification Key–pair recovery Key generation Key update Key expiry Key compromise Cross certification Revocation Certificate and Revocation Notice Distribution and Publication

7. Public–Key Infrastructure (PKI) Type of componentDescription Certification Authorities (CAs)to issue and revoke PKCs Organisational Registration Authorities (ORAs) to vouch for the binding between public keys and certificate holder identities and other attributes Certificate holdersto sign and encrypt digital documents Clientsto validate digital signatures and their certification path from a known public key of a trusted CA Repositoriesto store and make available certificates and Certificate Revocation Lists (CRLs)

8. PKI Entities

9. Privilege Management Infrastructure (PMI) Type of componentDescription Attribute Authorities (AAs)to issue and revoke ACs (also called Attribute Certificate Issuer) Attribute Certificate Usersto parse or process an AC Attribute Certificate Verifierto check the validity of an AC and then make use of the result Clientsto request an action for which authorisation checks are to be made Repositoriesto store and make available certificates and Certificate Revocation Lists (CRLs)

10. Attribute Certificate Exchanges

11. Conclusion This document describes Public Key Infrastructures, the PKIX standards, practical PKI functionality. Its aim is foster the creation of viable open– source PKI implementations.