Proposition summary to X.509 committee: Adding the Role of technical and juridical expert to X.509 trust model

Ahmad Samer Wazan (1) , Romain Laborde (2) , François Barrère (2) , Abdelmalek Benzekri (2, 3) , David W. Chadwick (4)

1 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
2 IRIT-SIERA - Service IntEgration and netwoRk Administration
3 UT3 - Université Toulouse III - Paul Sabatier
4 University of Kent [Canterbury]

The X.509 trust model is only appropriate for the closed deployment model of PKI, in which the RPs and the subjects both have relationships the CAs. It is not appropriate for the open deployment model where the RP has no explicit relationship with the CA. The closed model is usually applied to contexts with limited scope such as a collaboration between organizations where each organization manages its own PKI including one or more CAs. All the relationships between all the entities (RPs, CAs and certificates holders) participating in the collaboration are clarified through agreed contracts between the involved organizations. Cross-certified CAs, bridge CAs are example of the closed model. However, in the open model, which applies to the Internet today, there is no explicit contractual relationship between the CA and the relying parties (RPs).The objective of this summary is to show the necessity of extending the X.509 trust model to include the role of technical and juridical expert.

Domaines: Cryptographie et sécurité [cs.CR]

Ahmad Samer Wazan, Romain Laborde, François Barrère, Abdelmalek Benzekri, David W. Chadwick. Proposition summary to X.509 committee: Adding the Role of technical and juridical expert to X.509 trust model. 2013. ⟨hal-02902193⟩