Paper Info
Title
Static evaluation of Certificate Policies for GRID PKIs interoperability
Abstract
Validating an end-entity X.509 digital certificate prior to authorizing it for using a resource into the computational Grid has become a widely studied topic due to its importance for security. A more comprehensive validation process involves not only a real-time check on the credential's status, but also an evaluation of the trust level applicable to its Certification Authority. Nowadays Policy Management Authorities (PMAs) gather Grid CAs fulfilling a minimum set of requirements defined in an Authentication Profile thus guaranteeing a trusted interoperability environment for Grid projects. Currently this is a manual process that only results in a binary decision (the CA is able to become part of the PMA or not), however in practice, different CAs offer different security levels. In this paper we present ways to apply the Reference Evaluation Methodology (REM) to automatically obtain the security level of a CA. The described process is based on the building of a formalized policy template for Grid Certificate Policies. This methodology has been used to evaluate the security level offered by a set of EUGridPMA's CAs; the obtained results are then conveyed to relying parties using an infrastructure composed of CertiVeR's Validation Service and the Open GRid Ocsp (OGRO) middleware for the Globus Toolkit 4, thus providing enough information for a comprehensive certificate validation decision.
Year
DOI
Venue
2007
10.1109/ARES.2007.143
ARES
Keywords
Field
DocType
grid computing,public key cryptography,authorization,computer security,certification authority,middleware,open systems,binary decision,authentication,interoperability,computer architecture,authorisation,accreditation,certification,security,information security
Online Certificate Status Protocol,Root certificate,Authentication,Grid computing,Public key certificate,Computer science,Computer security,Certificate authority,Information security,Certificate
Conference
ISBN
Citations 
PageRank 
0-7695-2775-2
5
0.52
References 
Authors
7
5
Name
Order
Citations
PageRank
Valentina Casola140247.27
Nicola Mazzocca267478.37
Jesus Luna314316.72
Oscar Manso4313.57
Manel Medina5488.07