Distributed System Security Architecture
Encyclopedia
Distributed System Security Architecture or (DSSA) is a computer security architecture
that provides a suite of function
s including login, authentication, and access control
in a distributed system. To differ from other similar architectures, the DSSA architecture offers the ability to access all these functions without the trusted server
(known as a certificate authority
) being active.
In DSSA, security objects are handled by owners and access is controlled by the central, universally trusted, certificate authority.
of DSSA. The CDC is a certificate
granting server while the certificate is a ticket signed by CA which contains the public key of the party being certified. Since the CDC is merely distributing previously signed certificates, it is not necessary for it to be trusted.
Security Architecture
Security provided by IT Systems can be defined as the IT system’s ability to be able to protect confidentiality and integrity of processed data, as well as to be able to provide availability of the system and data....
that provides a suite of function
Subroutine
In computer science, a subroutine is a portion of code within a larger program that performs a specific task and is relatively independent of the remaining code....
s including login, authentication, and access control
Access control
Access control refers to exerting control over who can interact with a resource. Often but not always, this involves an authority, who does the controlling. The resource can be a given building, group of buildings, or computer-based information system...
in a distributed system. To differ from other similar architectures, the DSSA architecture offers the ability to access all these functions without the trusted server
Server (computing)
In the context of client-server architecture, a server is a computer program running to serve the requests of other programs, the "clients". Thus, the "server" performs some computational task on behalf of "clients"...
(known as a certificate authority
Certificate authority
In cryptography, a certificate authority, or certification authority, is an entity that issues digital certificates. The digital certificate certifies the ownership of a public key by the named subject of the certificate...
) being active.
In DSSA, security objects are handled by owners and access is controlled by the central, universally trusted, certificate authority.
DSSA/SPX
DSSA/SPX is the authentication protocolAuthentication protocol
An authentication protocol is a type of cryptographic protocol with the purpose of authenticating entities wishing to communicate securely.There are many different authentication protocols such as:* AKA* CAVE-based_authentication...
of DSSA. The CDC is a certificate
Public key certificate
In cryptography, a public key certificate is an electronic document which uses a digital signature to bind a public key with an identity — information such as the name of a person or an organization, their address, and so forth...
granting server while the certificate is a ticket signed by CA which contains the public key of the party being certified. Since the CDC is merely distributing previously signed certificates, it is not necessary for it to be trusted.