NOTE

Certain commercial products are identified in this paper in order to specify adequately the experimental procedure, or to cite relevant examples. In no case does such identification imply recommendation or endorsement by the National Bureau of Standards, nor does it imply that the products or equipment identified are necessarily the best available for the purpose.

2.1.3

2.1.4

2.2

ACCESS REQUEST/AUTHORIZATION ISSUES

Distributed Versus Centralized Authentication Checking.

N-th Party Authentication

Access Authorization Design Principles.

Authorization Checking at Local and Remote Nodes.

Composite Authorizations.

1

10

11

11

12

Checking Required to Access the Authorization Mechanism

ACCESS CONTROL;

ISSUES RELATED TO THE ESTABLISHMENT OF

2.3.2

2.3.3

Profile Information to be Sent at Connection Establishment.

Error Handling.

25

26

2.4

ACCESS CONTROL; POLICY ISSUES AND REQUIREMENTS RELATED TO

USE OF A CONNECTION

26

2.4.1

Security Control Mechanism as Part of the Communication

Path..

2.7.4

3.

3.1

Separation of Data Processing and Data Communications.

NETWORK SECURITY MECHANISMS AT THE SECURITY CONTROLLER/

HOST LEVEL .

IDENTIFICATION/AUTHENTICATION.

33

33

34

35

35

35

36

36

37

38

38

40

43.

The SC as a Pre-Connection Check or a Reference Check.

SC-to-SC Authentication.

46

46

Control Over the Initial Requestor-to-SC Connection.

Selection of the Path for Set-Up Control Messages..

Handling Exceptional Conditions on Connection Creation .

61

61

63

TABLE OF CONTENTS

Section

Page

3.3.4

3.3.5

3.3.6

3.3.7

Crossing Inter-Network Boundaries (Gateways).

The Contents of the Initial Control Messages.

Control Over Play-Back of Connection Creation Messages.

Implicit Connection Creation.

64

3.4

THE SC/HOST-LEVEL MECHANISMS FOR CONTROLLING CONNECTION

USAGE.

73

4.3.5

4.4

4.4.1

4.4.2

Notifying the Master ICD of the Connection Status.

ACCESS CONTROL AT THE ICD LEVEL; USAGE OF A CONNECTION

Encipherment Scheme Considerations

Crypto-Multiplexing Considerations

115

116

120