Authorization Certificate

Authorization Certificate

In computer security, an attribute certificate (AC) is a digital document containing attributes associated to the holder by the issuer. When the associated attributes are mainly used for authorization purpose, AC is called authorization certificate. AC is standardized in X.509. RFC 3281 further specifies the usage of AC for authorization purpose in the Internet.

AC is the complement of public key certificate (PKC). While PKC is issued by a CA and is used as a proof of identity of its holder like a passport, AC is issued by AA and is used to characterize or entitle its holder like a visa. Because identity information seldom changes and has a long validity time while attribute information frequently changes or has a short validity time, separate certificates with different security rigours, validity times and issuers are necessary.

Read more about Authorization Certificate:  Comparison of Attribute and Public Key Certificates, Usage, Contents of A Typical Attribute Certificate, Benefits

Famous quotes containing the word certificate:

    God gave the righteous man a certificate entitling him to food and raiment, but the unrighteous man found a facsimile of the same in God’s coffers, and appropriated it, and obtained food and raiment like the former. It is one of the most extensive systems of counterfeiting that the world has seen.
    Henry David Thoreau (1817–1862)