Public Key Management

Page 1

Trusted Third Party Generation

trusted third party generates the key pair

trusted party submits the key pair to the CA to generate the public key

disadvantages :

1. owner does not generate the public key pair

2. owner does not distribute the private key

3. owner trusts the third party for key generation and distribution

Combined Generation

owner generates the public key pair

owner submits the key pair to the CA to generate the public key

advantages

owner has full control

private key can be locally generated & stored and may not be distributed

disadvantages:

owner has to generate the key pairs

has to convince the CA that he is aware of the private key

Self Creation

owner generates the key pair

certifies the public key

CA-FREE CERTIFICATE MODEL

no CA involved

owner generates the public key or may not generate

relying party to obtain the public key from owner directly

relying party at risk

REPUTATION-BASED CERTIFICATE MODEL

owner obtains the key from the CA

relying party has no relationship with the CA

relying party obtains the public key cert from the CA

relying party can verify the cert from CA but no assurance of purpose

CLOSED CERTIFICATION MODEL

relying party gets the public key certification from the owner's CA

application for closed environments

single CA is responsible for all managing all public certs

CONNECTED CERTIFICATION MODEL

relying party has relationship with trusted third party which has relationship with the owner's CA

Certificate Creation

CERT MANAGEMENT MODELS