Distributed System Security Architecture

Distributed System Security Architecture or (DSSA) is a computer security architecture that provides a suite of functions including login, authentication, and access control in a distributed system. To differ from other similar architectures, the DSSA architecture offers the ability to access all these functions without the trusted server (known as a certificate authority) being active.

In DSSA, security objects are handled by owners and access is controlled by the central, universally trusted, certificate authority.

DSSA/SPX

DSSA/SPX is the authentication protocol of DSSA. The CDC is a certificate granting server while the certificate is a ticket signed by CA which contains the public key of the party being certified. Since the CDC is merely distributing previously signed certificates, it is not necessary for it to be trusted.

${\displaystyle A\to CDC\colon B}$

${\displaystyle CDC\to A\colon \operatorname {certificate} (B,CA)}$

${\displaystyle A\to B\colon A,\{T_{A},A\}K_{AB},\{L,A,P'_{A}\}S_{A},\{\{K_{AB}\}P_{B}\}S'_{A}}$

${\displaystyle B\to CDC\colon A}$

${\displaystyle CDC\to B\colon \operatorname {certificate} (A,CA)}$

${\displaystyle B\to A\colon \{T_{A}+1\}K_{AB}}$

External links

• Tromsø University
• Gasser (1989)