1 / 17

pkiuniversity

pkiuniversity.com. Honest Abe ’ s CA. Alice. Bob. Simple PKI hierarchy. Multi-level hierarchy. My personal Certificate (Installed on a Mac). Dartmouth CA ’ s Certificate (Installed on a Mac). Building a trust path.

daxia
Télécharger la présentation

pkiuniversity

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. pkiuniversity.com

  2. Honest Abe’s CA Alice Bob

  3. Simple PKI hierarchy

  4. Multi-level hierarchy

  5. My personal Certificate(Installed on a Mac)

  6. Dartmouth CA’s Certificate(Installed on a Mac)

  7. Building a trust path • To verify certificate α starting with a set of trusted certificates we need to: • Identify the issuer of α (i.e., β) • Verify if β is trusted • If β is among the set of trusted certificates, the original cert is trusted • Else if β is a root certificate, the original cert is untrusted • Else if β is not trustedset α=β and repeat the process until a trusted or a root certificate is identified

  8. Typical trust chain

  9. Cross certification

  10. Multiple cross certification

  11. Cross certification fuzziness

  12. Cross certification fuzziness

  13. Bridge CA

  14. Bridge CA advantages

  15. Certification Process

  16. How to obtain a certificate

More Related