首页> 外文会议>IEEE Conference on Communications and Network Security >TLS with trustworthy certificate authorities
【24h】

TLS with trustworthy certificate authorities

机译:具有可信赖证书颁发机构的TLS

获取原文

摘要

Cloud platforms can leverage Trusted Platform Modules to help provide assurance to clients that cloud-based Web services are trustworthy and behave as expected. We discuss a variety of approaches to providing this assurance, and we implement one approach based on the concept of a trustworthy certificate authority. TaoCA, our prototype implementation, links cryptographic attestations from a cloud platform, including a Trusted Platform Module, with existing TLS-based authentication mechanisms. TaoCA is designed to enable certificate authorities, browser vendors, system administrators, and end users to define and enforce a range of trust policies for web services. Evaluation of the prototype implementation demonstrates the feasibility of the design, illustrates performance tradeoffs, and serves as an end-to-end, proof-of-concept evaluation of underlying trustworthy computing abstractions. The proposed approach can be deployed incrementally and provides new benefits while retaining compatibility with the existing public key infrastructure used for TLS.
机译:云平台可以利用受信任的平台模块来帮助向客户保证基于云的Web服务是可信赖的,并且行为符合预期。我们讨论了提供此保证的多种方法,并基于可信任证书颁发机构的概念实施了一种方法。 TaoCA(我们的原型实现)将来自云平台(包括受信任的平台模块)的加密证明与现有的基于TLS的身份验证机制链接在一起。 TaoCA旨在使证书颁发机构,浏览器供应商,系统管理员和最终用户能够定义和实施一系列针对Web服务的信任策略。对原型实现的评估证明了设计的可行性,说明了性能折衷,并充当了对基础可信赖计算抽象的端到端,概念验证评估。所提出的方法可以逐步部署并提供新的好处,同时保持与用于TLS的现有公钥基础结构的兼容性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号