Interested to Buy Any Domain ? << Click Here >> for more details...
Answer Posted / rithi
Linda Gricius (March, 1998):
CSI Common Security Protocols define the details of the
tokens in the SECIOP messages. Three protocols are defined:
SPKM Protocol
- this protocol supports identity based policies without
delegation (CSI level 0) using public key technology for
keys assigned to both principals and trusted authorities.
The SPKM protocol is based on the definition in The Simple
Public-Key GSS-API Mechanism, Internet Draft
draft-ietf-cat-spkmgss-06.txt January 1996.
GSS Kerberos Protocol
- this protocol supports identity based policies with
unrestricted delegation (CSI level 1) using secret key
technology for keys assigned to both principals and trusted
authorities. It is possible to use it without delegation (so
providing CSI level 0).
The GSS protocol is based on the IETF GSS Kerberos V5
definition, which specifies details of the use of Kerberos
V5 with GSS-API. It includes updates to RFC 1510; e.g., how
to carry delegation information. It is specified in RFC
1964. This itself is a profile of the Kerberos V5 mechanism
as defined in IETF RFC 1510, September 1993.
CSI-ECMA Protocol
- this protocol supports identify and privilege based
policies with controlled delegation (CSI level 2). It can be
used with identity, but no other privileges, and without
delegation restrictions if the administrator permits this
(CSI level 1), and can be used without delegation (CSI level
0).
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers
Explain does corba define high level application architectures?
Explain some reason to avoid the development of multi-threaded corba application?
Are CORBAsec implementations from the US generally subjected to export control?
Explain the reason to implement a corba application with multi-threading?
Explain can corba application have call back?
What would be the most suitable ORB products when buliding a small lab for evaluating, testing and implementing security functions in a CORBA system?
Explain does corba supports asynchronous communication?
Explain what is corba good for?
Does corba supports asynchronous communication?
Can corba allow servers to cause client side events or notifications?
Can corba application be tuned for better performance?
What are the shortcomings of CORBA Security service?
How to implement the CORBA security service?
Can corba application have call back?
How does corba support interoperability?
