[Hipsec-rg] 答复: Hierarchical HITs

[zhangdacheng at huawei.com (Zhang Dacheng)]

 

Hi! On Sat, 17 Jan 2009, Sheng Jiang wrote:

> As I explained earlier, a self-issued identity means little. Will any 
> country allow entrance of a man whose identity card is issued by 
> himself only?

I think we should distinguish authorization (deciding whether to grant
access) and authentication (verifying identity).

--
Regards, Oleg.

_______________________________________________
Hipsec-rg mailing list
Hipsec-rg at listserv.cybertrust.com
https://listserv.cybertrust.com/mailman/listinfo/hipsec-rg

Hi,

I think Sheng Jiang just indicates that the authentication results should be
able to be used by authorisation systems. In any un-trivial systems, access
control (AC) is performed by authorisation mechanisms, and authentication
results do not mean a lot if they cannot be used for authorisation. HHITs
can provide information about administration domains, which may be valuable
for authorisation systems to make AC assertions.

Best Regards, 

Dacheng Zhang