公开(公告)号：DE602005003631D1

公开(公告)日：2008-01-17

申请号：DE602005003631

申请日：2005-10-21

Applicant: IBM

Inventor： BENANTAR MESSAOUD ,  GINDIN THOMAS ,  SWEENY JAMES

IPC: G06F21/00 ,  H04L29/06

Abstract: A method for creating a proof of possession confirmation for inclusion by an attribute certificate authority into an attribute certificate, the attribute certificate for use by an end user. The method includes receiving from the attribute certificate authority in response to a request by the end user, a plurality of data fields corresponding to a target system, the identity of the end user, and a proof of identity possession by the end user. The method further includes preparing a data structure corresponding to an authorization attribute of the attribute certificate, the data structure including a target system name, the identity of the end user, and the key identifier of the end user. Using a private key associated with the target system, the method includes signing the data structure resulting in a proof of possession confirmation, and sending the proof of possession confirmation to the attribute certificate authority for inclusion into the attribute certificate.

公开(公告)号：DE602005003631T2

公开(公告)日：2008-11-13

申请号：DE602005003631

申请日：2005-10-21

Applicant: IBM

Inventor： BENANTAR MESSAOUD ,  GINDIN THOMAS ,  SWEENY JAMES

IPC: G06F21/00 ,  H04L29/06

Abstract: A method for creating a proof of possession confirmation for inclusion by an attribute certificate authority into an attribute certificate, the attribute certificate for use by an end user. The method includes receiving from the attribute certificate authority in response to a request by the end user, a plurality of data fields corresponding to a target system, the identity of the end user, and a proof of identity possession by the end user. The method further includes preparing a data structure corresponding to an authorization attribute of the attribute certificate, the data structure including a target system name, the identity of the end user, and the key identifier of the end user. Using a private key associated with the target system, the method includes signing the data structure resulting in a proof of possession confirmation, and sending the proof of possession confirmation to the attribute certificate authority for inclusion into the attribute certificate.

公开(公告)号：AT380370T

公开(公告)日：2007-12-15

申请号：AT05109836

申请日：2005-10-21

Applicant: IBM

Inventor： BENANTAR MESSAOUD ,  GINDIN THOMAS ,  SWEENY JAMES

IPC: G06F21/00 ,  H04L29/06

Abstract: A method for creating a proof of possession confirmation for inclusion by an attribute certificate authority into an attribute certificate, the attribute certificate for use by an end user. The method includes receiving from the attribute certificate authority in response to a request by the end user, a plurality of data fields corresponding to a target system, the identity of the end user, and a proof of identity possession by the end user. The method further includes preparing a data structure corresponding to an authorization attribute of the attribute certificate, the data structure including a target system name, the identity of the end user, and the key identifier of the end user. Using a private key associated with the target system, the method includes signing the data structure resulting in a proof of possession confirmation, and sending the proof of possession confirmation to the attribute certificate authority for inclusion into the attribute certificate.