信息技术. 开放系统互连. 目录. 第8部分: 公钥和属性认证框架

[中文适用范围]： 此建议|国际标准通过提供一组完整服务所基于的框架来满足身份验证和其他安全服务领域的一些安全要求。 具体来说，本建议 |国际标准定义了以下框架： – 公钥证书； – 属性证书； – 认证服务。 [外文原描述]： ISO/IEC 9594 has been produced to facilitate the interconnection of information processing systems to provide directory services. A set of such systems, together with the directory information that they hold, can be viewed as an integrated whole, called the Directory. The information held by the Directory, collectively known as the Directory Information Base (DIB), is typically used to facilitate communication between, with or about objects such as application entities, people, terminals and distribution lists. ISO/IEC 9594-8:2014 defines a framework for public-key certificates. This framework includes the specification of data objects used to represent the certificates themselves, as well as revocation notices for issued certificates that should no longer be trusted. The public-key certificate framework defined in ISO/IEC 9594-8:2014, while it defines some critical components of a public-key infrastructure (PKI), it does not define a PKI in its entirety. However, it provides the foundation upon which full PKIs and their specifications would be built. Similarly, ISO/IEC 9594-8:2014 defines a framework for attribute certificates. That framework includes the specification of data objects used to represent the certificates themselves, as well as revocation notices for issued certificates that should no longer be trusted. The attribute certificate framework defined in ISO/IEC 9594-8:2014, while it defines some critical components of a Privilege Management Infrastructure (PMI), it does not define a PMI in its entirety. However, it provides the foundation upon which full PMIs and their specifications would be built. Information objects for holding PKI and PMI objects in the Directory and for comparing presented values with stored values are also defined. ISO/IEC 9594-8:2014 also defines a framework for the provision of authentication services by the Directory to its users.