The Concept of Trust in Network Security精选.pdfVIP

® Entrust White Paper The Concept of Trust in Network Security Date: August 2000 Version: 1.2 Entrust is a registered trademark of Entrust, Inc. in the United States and certain other countries. Entrust is a registered trademark of Entrust Limited in Canada. All other Entrust product names and service names are trademarks or registered trademarks of Entrust, Inc or Entrust Limited. All other company and product names are trademarks or registered trademarks of their respective owners. © Copyright 2000-2003 Entrust. All rights reserved. 2 Introduction Every security system depends on trust, in one form or another, among users of the system. In general, different forms of trust exist to address different types of problems and mitigate risk in certain conditions. Which form of trust to apply in a given circumstance is generally dictated by corporate policy. In a network security solution such as Entrust, there are two important forms of trust that customers should understand: third-party trust and direct (personal) trust. The purpose of this paper is to introduce these concepts and provide additional information so that customers understand which form of trust should be applied in a given situation. To fully explain third-party and direct trust, the paper also introduces the following concepts: Certification Authorities, Certification Authority domains, certificates, and cross-certification.