| 摘要 |
<p>A privilege (20) and associated control attributes (30) are delegated from a security token (10) to another data processing unit, for example a security token or an intelligent device such as a computer system. The privilege (20) may be in the form of an attribute certificate, a key component of a cryptographic key, a complete cryptographic key, digital certificate, digital right, license or loyalty credits. The purpose of the delegation is to allow another data processing unit to act as a surrogate for the security token (10) or to access a resource which requires components from both units before access is permitted. Attributes (30) associated with the delegated privilege (20) control the scope and use of the privilege (20). The delegation may allow the surrogate to perform authentications, access data or resources included on another security token or computer system. Authentications are performed prior to transferring of the delegable privileges.</p> |
