home *** CD-ROM | disk | FTP | other *** search
- 0, Internet is becoming increasingly popular for
- 4, exchange of information as it is conducting business
- 7, transactions. It is extremely important that the
- 10, information flowing on the wire is secured against
- 13, any unauthorized access or modification. It's also
- 16, important to know who the communicating parties
- 18, are and you should be able to guarantee their
- 20, authenticity. To provide these services, we need to
- 24, enable mechanisms for authentication, authorization,
- 27, and privacy. Microsoft Information Security
- 30, Framework is a collection of technologies and products
- 33, which provides a set of services which include
- 36, secure communication facilities, a certificate server,
- 39, a certificate storage and retrieval facility, and
- 42, a whole set of APIs to program your applications
- 47, using these certificate services. These services
- 49, also come built-in into Internet Explorer as a
- 52, client piece and are in Internet Information Server as a
- 56, server piece. So as an application writer, as a web site
- 58, developer, you may want to use these facilites
- 61, built-into our Information Server to create a
- 63, certificate-based authentication system. The biggest
- 66, advantage of this is that you don't have to know your
- 68, customer, so the parties who wish to communicate
- 71, with you, apriori, and yet you can enforce
- 75, proper access controls based on the identity which
- 77, is encoded in these certificates. These
- 80, certificates could be obtained by third parties like
- 82, VeriSign, or could be generated internally using Microsoft
- 85, Certificate Server.
- 87, END