Subject: [KEYPROV] [issue21] Consider to add object diagram in DSKPP for relationships among IDs

From: Andrea Doherty <[email-masked]>
Date: Thu, 05 Jul 2007 20:57:01 +0000

Andrea Doherty <[email-masked]> added the comment:

Device pertains to something physical that the user holds, and "cryptographic 
token", as stated in PKCS#11, "stores objects and can perform cryptographic 
functions".  However, the use of the word "token" is often confused with the 
physical device, and equally often confused with the software that performs the 
functions.  In addition, note that "token" gets used in different and equally 
confusing ways in other arenas, e.g., OASIS WS Security.  

Thus, I propose that we do not use "token".  I also propose that we refer 
to "cryptographic module" wherever the PKCS#11 definition applies (on first 
look, this will be almost a 1:1 replacement of "cryptographic token" 
with "cryptographic module).  With this proposal in mind, please consider the 
following alternative to Shuh's initial object diagram:

DSKPP Basic Object Model
========================

-----------          -------------
|User     |          |Device     | 
|---------|*  owns  *|-----------|
|  UserID |--------->|  DeviceID |
|  ...    |          |  ...      |
-----------          -------------
                         | 1
                         |
                         | contains
                         |
                         | 1
                         |
                         V  (DSKPP Client)
                   -----------------------
                   |Cryptographic Module |
                   |---------------------|
                   |                     |
                   |Encryption Algorithms|
                   |MAC Algorithms       |
                   |...                  |
                   -----------------------
                         | 1
                         |
                         | contains
                         |
                         | 1
                         V
                   -----------------------
                   |Key Container        |
                   |---------------------|
                   |                     |
                   |Encryption Algorithms|
                   |MAC Algorithms       |
                   |...                  |
                   -----------------------
                         | 1
                         |
                         | contains
                         |
                         V *
                     -------------
                     |Key        | 
                     |-----------|
                     |  KeyID    |
                     |  ...      |
                     -------------

_________________________________________________________
KEYPROV Roundup Issue Tracker <[email-masked]>
<http://www.tschofenig.priv.at:8080/keyprov/issue21>
_________________________________________________________

_______________________________________________
KEYPROV mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/keyprov