Interested to Buy Any Domain ? << Click Here >> for more details...
Answer Posted / rithi
Linda Gricius (March, 1998):
CSI Common Security Protocols define the details of the
tokens in the SECIOP messages. Three protocols are defined:
SPKM Protocol
- this protocol supports identity based policies without
delegation (CSI level 0) using public key technology for
keys assigned to both principals and trusted authorities.
The SPKM protocol is based on the definition in The Simple
Public-Key GSS-API Mechanism, Internet Draft
draft-ietf-cat-spkmgss-06.txt January 1996.
GSS Kerberos Protocol
- this protocol supports identity based policies with
unrestricted delegation (CSI level 1) using secret key
technology for keys assigned to both principals and trusted
authorities. It is possible to use it without delegation (so
providing CSI level 0).
The GSS protocol is based on the IETF GSS Kerberos V5
definition, which specifies details of the use of Kerberos
V5 with GSS-API. It includes updates to RFC 1510; e.g., how
to carry delegation information. It is specified in RFC
1964. This itself is a profile of the Kerberos V5 mechanism
as defined in IETF RFC 1510, September 1993.
CSI-ECMA Protocol
- this protocol supports identify and privilege based
policies with controlled delegation (CSI level 2). It can be
used with identity, but no other privileges, and without
delegation restrictions if the administrator permits this
(CSI level 1), and can be used without delegation (CSI level
0).
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers
How does corba support interoperability?
How to come up with application security design using CORBA Security service?
Explain some reason to avoid the development of multi-threaded corba application?
Explain high-level technical overview of corba?
Is there a set of UML diagrams for the CORBASEC Specification?
Explain the reason to implement a corba application with multi-threading?
Compare CORBA security with security of other distributed object computing frameworks such as Java RMI or DCOM?
How to implement the CORBA security service?
Explain does corba supports asynchronous communication?
Does corba support distributed reference counting architectures?
What is corba good for?
Can corba allow servers to cause client side events or notifications?
Explain are the different threading models that can be used within corba servers?
Are CORBAsec implementations from the US generally subjected to export control?
What are the shortcomings of CORBA Security service?
