• Summary
• Related Documents
  • Active Bibliography
  • Co-citation
• Version History

Abstract:

This paper presents an architectural framework, which identifies the core services necessary for a secure Internet-based communication and information infrastructure. We show how these services can be realized using existing software packages and new technologies. Then, we turn to the development of security infrastructures using the rapid prototyping environment "Wafe " and the extensible Web browser "Cineast ". We explain how basic operations such as secure transfer and certificate acquisition can be realized and demonstrate the implementation of different certificate verification strategies. Finally, we show how advanced trust management concepts can be developed and tested. Concluding, we present a comparison with the features of other Web browsers and indicate some directions of future research. The goal of this paper is to identify and describe the services necessary to build a secure corporate Intranet and to show how prototypical implementations of these components can be realized to evaluate different approaches and configurations. 1

Citations