Architecture for Public-Key Infrastructure (APKI)
Copyright © 1998 The Open Group

---

Open Group Guide
Architecture for Public-Key Infrastructure (APKI)
Document Number: G801
ISBN: 1-85912-221-3

• Frontmatter
  • Preface
    • The Open Group
    • Development of Product Standards
    • Open Group Publications
    • Versions and Issues of Specifications
    • Corrigenda
    • Ordering Information
    • This Document
  • Trademarks
  • Acknowledgements
  • Referenced Documents
    • Open Group Documentation
    • IETF RFCs
    • IETF PKIX Documentation
    • Other IETF Documentation
    • IPsec Working Group Documentation
    • Standards Documentation
• Requirements on a Public-Key Infrastructure
  • Baseline Requirements for a Global PKI
    • Required Services
    • Required Functionality and Characteristics
      • Key Lifecycle Management
      • Distributed Certificate Management Structure
      • Security of the PKI
      • Time Service
      • Interoperability
    • Known Issues
    • Recommendations
  • The Importance of Architecture
    • What is Architecture?
    • Protocols
    • Interfaces
    • Profiles
    • Negotiation
• PKI Architecture and Summary of Recommendations
  • PKI Architecture Overview
  • Summary of Recommendations
    • System Security-Enabling Services
    • Cryptographic Primitives
    • Cryptographic Services
    • Long-Term Key Services
    • Protocol Security Services
    • Secure Protocols
    • Security Policy Services
    • Supporting Services
    • Footnotes
• Public-Key Infrastructure Components
  • System Security-Enabling Components
    • Function
  • Cryptographic Primitive Components
    • Function
    • Protocols
    • Interfaces
    • Profiles
    • Negotiation
  • Cryptographic Service Components
    • Function
    • Protocols
    • Interfaces
    • Profiles
    • Negotiation
  • Long-Term Key Services Components
    • Function
      • Key Lifecycle Management
      • Key Recovery
      • Virtual Smartcard Service
      • Certificate Management
      • Public-Key Delivery and Verification
    • Protocols
      • Key Lifecycle Management
      • Key Recovery
      • Virtual Smartcard Service
      • Certificate Management
      • Public-Key Delivery and Verification
    • Interfaces
      • Key Lifecycle Management
      • Key Recovery
      • Virtual Smartcard Service
      • Public-Key Delivery and Verification
      • Certificate Management
    • Profiles
    • Negotiation
  • Protocol Security Services Components
    • Function
    • Protocols
      • Session-Oriented Protocol Security Services
      • Store-and-Forward Protocol Security Services
      • Notary and Non-Repudiation Services
    • Interfaces
      • Session-Oriented Protocol Security Services
      • Store-and-Forward Protocol Security Services
      • Non-Repudiation Services
    • Profiles
    • Negotiation
  • Secure Protocol Components
    • Function
    • Protocols
    • Interfaces
    • Profiles
    • Negotiation
  • Security Policy Services Components
    • Function
    • Protocols
    • Interfaces
    • Profiles
  • Supporting Services Components
    • Function
      • Security Auditing Services
      • Time Service
      • Directory Services
    • Protocols
      • Security Audit Service
      • Time Service
      • Directory Services
    • Interfaces
      • Security Auditing Service
      • Time Service
      • Directory Services
    • Profiles
• Hardware Security Devices in the PKI Architecture
  • Security Tokens
  • Cryptographic Modules
• Requirements for Virtual Smartcard Services
  • Overview of Virtual Smartcard Services
• Glossary
  • access control
  • access control policy
  • accountability
  • API
  • association-security-state
  • audit
  • audit trail
  • authenticated identity
  • authentication
  • authentication certificate
  • authentication exchange
  • authentication information (AI)
  • authorization
  • availability
  • certification authority (CA)
  • ciphertext
  • clear text
  • client-server
  • confidentiality
  • contextual information
  • credentials
  • cryptanalysis
  • cryptographic algorithm
  • cryptographic checkvalue
  • cryptography
  • data integrity
  • data origin authentication
  • decipherment
  • decryption
  • denial of service
  • digital signature
  • distinguishing identifier
  • encipherment
  • encryption
  • end-to-end encipherment
  • identification
  • integrity
  • key
  • key management
  • messaging application
  • off-line authentication certificate
  • on-line authentication certificate
  • password
  • peer-entity authentication
  • principal
  • private key
  • public key
  • quality of protection
  • repudiation
  • seal
  • secret key
  • secure association
  • secure context
  • security architecture
  • security attribute
  • security audit
  • security audit trail
  • security certificate
  • security label
  • security service
  • security state
  • signature
  • trust
  • trusted computing base (TCB)
  • trusted functionality
  • trusted third party
• INDEX

---

Why not acquire a nicely bound hard copy?
Click here to return to the publication details or order a copy of this publication.