| 摘要 |
A system and method for authentication and security in a communication system is provided. The system provides for two-way or mutual authentication. In one embodiment, both the server and client must exchange valid certificates, otherwise communication will not be allowed to occur. This requirement is not limited to client/server, as server-to-server communication may also be required to exchange valid certificates. Furthermore, the user does not have to perform any special functions in order to exchange his/her certificate. The exchange of the certificates is transparent by way of the processes that are built into the system as a whole. The client provides the automatic interface to the certificate for purposes of exchange with services within the network. In one embodiment, the user initiates, through self-provisioning, a certificate signing request to the administrator system. The administrator system, either by manual or automatic means, approves the certificate signing request and forwards the request to the certificate authority. The certificate authority then signs the certificate signing request, thereby creating a valid certificate. The certificate is sent back to the administrator system which then, upon request by the client system, delivers the certificate to the client.
|
