Using digital credentials on the World Wide Web

Issue title: Security in the World Wide Web

Article type: Research Article

Authors: Winslett, M. | Ching, N. | Jones, V. | Slepchin, I.

Affiliations: Department of Computer Science, University of Illinois at Urbana-Champaign, 1304 West Springfield Avenue, Urbana, IL 61801, USA; Tel. +217 333 3536; E-mail: winslett@cs.uiuc.edu, ching@cs.uiuc.edu, vjones@cs.uiuc.edu, slepchin@cs.uiuc.edu

Abstract: Often an information source on the Web would like to provide different classes of service to different clients. In the autonomous, highly distributed world of the Web, the traditional approach of using authentication to differentiate between classes of clients is no longer sufficient, as knowledge of a client's identity will often not suffice to determine whether a client is authorized to use a service. Our goal in this research project is to explore the use of digital credentials, digital analogues of the paper credentials we carry in our wallets today, to help solve this problem. In this paper we describe the major features required of a Web environment deploying digital credentials, including the introduction of security assistants for both clients and servers, and report on the status of our investigation into a credential-based environment.

DOI: 10.3233/JCS-1997-5307

Journal: Journal of Computer Security, vol. 5, no. 3, pp. 255-267, 1997