Security mechanisms for distributed information system in Industrial Technology Research Institute (ITRI)

A security mechanism based upon a public key cryptosystem and signature scheme, used in the ITRI distributed information system is proposed. Example protocols are presented for the establishment of authenticated connections, for the management of authenticated mail, and for signature verification and sensitive information integrity guarantees. An access control scheme for a distributed information system which adopts a cryptographic concept is discussed. Some techniques are presented to be used for access control mechanisms capable of capturing, enforcing, and protecting the relevant access control semantics at each network site.<>