Temporary certs for moble users



 All,

I have been investigating different PKI solutions for mobile users for some
time now, and recently came across a paper called "Providing secure mobile
access to information servers with temporary certificates".  The research is
being lead by two Spanish scholars, with whom I have been corresponding
some.  The basic theory is by issuing only short-term certificates to mobile
users, several of the certificate management problems are solved.  From what
I gathered, their proposal resembles a Kerberos for the internet.  Anyway, I
was wondering if anyone in the group has investigated or even implemented
any technologies along these lines; I haven't seen anything like this yet,
but their research looks sound.  The Paper (in English thankfully!) can be
found at:

http://www.terena.nl/tnnc/8A/8A1/8A1.html

Please feel free to respond directly to me if you would rather not post
directly to the list.

Best,

Tom Macklin
SFA, Inc.
Network Security Engineer



Date Index | Thread Index | Problems or questions? Contact list-master@nist.gov