[ietf-enroll] Charter

Jim Schaad jimsch at nwlink.com
Mon Apr 28 15:03:05 EDT 2003


Here is a candidate charter for people to take shots at.

Description of Working Group:

There are many cases where a user needs to obtain credential information
from a service provider and provide for some type of information for
validation of identity.  This working group will look at some of the
cases dealing with the use of cryptographic algorithms for providing
this information.

When doing enrollment of a user against a service provider, three pieces
of information need to be provided or created in order to support
authentication of the user to the provider and to allow for additional
security services to be provided any information exchanged.  These
pieces of data are:

1.	The name of the entity being enrolled,
2.	A piece of keying information to be used
3.	A set of permissions for operations for the entity being
enrolled.

This group will create a model to be used in describing enrollment
procedures and create a document for a framework how this is to be done.
The group will then produce three documents profiling the use of the
framework for the following cases:

1.	A shared secret key
2.	A base asymmetric key
3.	A bound asymmetric key (e.g. an X.509 certificate).

Additionally, the group will consider the case of using a credit card
profiling the framework.

Goals and Milestones:

Sept 2003	First draft of model
Dec 2003	Last call on model document
Nov 2003	First draft of Framework document
April 2004	Last call on module document
March 2004	First draft of secret key profile
March 2004	First draft of bare asymmetric key profile
March 2004	First draft of bound asymmetric key profile
Aug 2004	Last call on secret key profile
Aug 2004	Last call on bare asymmetric key profile
Aug 2004	Last call on bound asymmetric key profile




More information about the ietf-enroll mailing list