【英文标准名称】:Informationtechnology-InternationalStandardizedProfilesADYnn-OSIDirectory-Part7:ADY43-DSAtoDSAAuthentication
【原文标准名称】:信息技术.国际标准化轮廓ADYnn.OSI目录.第7部分:ADY43.DSA到DSA鉴别
【标准号】:ISO/IECISP15125-7-1998
【标准状态】:作废
【国别】:国际
【发布日期】:1998-11
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1
【标准类型】:()
【标准水平】:()
【中文主题词】:网络互连;信息技术;数据处理;信息交换;开放系统互连;记录;标准界面;人名地址录;起动功能
【英文主题词】:Authenticitytest;Dataprocessing;Directories;Informationinterchange;Informationtechnology;Initiationfunction;Networkinterconnection;OSI;Records;Standardizedprofiles
【摘要】:1GeneralTheDirectoryStandardsdefinevariousmeansofauthenticationbetweenDUAsandDSAsandalsobetweentwoDSAs.AsspecifiedbytheDirectoryStandards,themeansofauthenticationatthetimeofestablishmentofanassociation(i.e.atBind-time),forDAP,DSP,DOP,andDISP,are:·None-nocredentialsaresupplied·Simpleunprotectedauthentication,withorwithoutpassword:eachauthenticatingpartysuppliesanameandoptionallyapassword·Simpleprotectedauthentication:eachauthenticatingpartysuppliesanameandapasswordwhoseinformationistransmittedinhashedformtopreservepasswordconfidentialityandtopreventreplay·StrongauthenticationinwhicheachauthenticatingpartysuppliesatokensignedwithadigitalsignaturewhichcanbeverifiedbytheotherTheDirectorystandardsalsopermitotherformsofauthenticationatthetimeofassociationestablishment,wherebycredentialsarepassedby"external"elements.SuchmeansareoutsidethescopeofthispartofISO/IECISP15125.Inaddition,theDirectoryStandardsdefineamethodwherebycertainDAP,DSP,orDISPenquiriesandresultscanbeauthenticatedandsealedbymeansofadigitalsignature.ThispartofISO/IECISP15125profiles:·Simpleunprotectedauthentication,withorwithoutpassword,betweentwoDSAs·SimpleprotectedauthenticationbetweentwoDSAs·StrongauthenticationbetweentwoDSAs·SignedDSPandDISPinvokesandreturn-resultsexchangedbetweentwoDSAsItalsoprofilesthebehaviourofaDSAincombiningsigneduncorrelatedlistandsearchinformationasreturnedbyDSPreturnresults.ItalsoprofilestheuseoftheoriginatorelementtoconveyinformationabouttheoriginatoroftheDAPassociationwithinwhichanoperationiscreated.Sincetherearemanyoptionsandpossibilitiesintheuseofthesetechniques,thispartofISO/IECISP15125doesnotattempttospecifyhoweachfacilityshallbeused.Thisresultsincertainfeatures(e.g.thedouble-hashingtechniquedescribedinthelastparagraphof[ISO/IEC9594-8:1995|ITU-TRec.X.509(1993)]subclause6.2)beingconsideredasout-of-scope.DSAsarealsopermittedtobindtoeachotherusingnocredentialsatall.However,thispossibilityisoutsidethescopeofthispartofISO/IECISP15125.2PositionwithinthetaxonomyThispartofISO/IECISP15125isidentifiedinISO/IECTR10000-2as"ADY43—DSAtoDSAAuthentication".3ScenarioThispartofISO/IECISP15125profilessimpleandstrongauthenticationbetweenDSAs(BINDdialogueinFigure1)intheestablishmentofDSP,DOPandDISPAssociations,andsignedoperationsbetweenDSAs(OPERATIONdialogueinFigure1)withintheseAssociations.Italsoprofilesthehandlingofuncorrelatedlistandsearchresults(seeright-hand-sideofdiagram)withinDSP(thereisnoanalogueforthiswithinDOPandDISP).note:1Whenoperationsarenotsigned,authenticationfromusertoDSAoccursonlywhentheDUAbindstoaDSAusingDAP.Thereafter,theauthenticatedidentityoftheoriginatorofanoperationispassedfromoneDSAtoanotherasappropriate.ThereisnoobligationonareceivingDSAtoregardtheoriginatorvaluesuppliedasvalid,andinparticular,anoriginatorvaluesuppliedoveraDSPassociationcanbetreatedasifnoauthenticationhadtakenplace.TheDirectoryStandardsalsopermitDSAstoperformanassessmentof"Authentication-Level"toreflecttheperceivedreliabilityoftheauthenticationmethod(9594-2Subclause16.4.2.3).
【中国标准分类号】:L79
【国际标准分类号】:35_100_05
【页数】:46P;A4
【正文语种】:英语