Enhanced Windows-Based Warning Terms Separation Proof-of-Concept (POC) - Architecture, Detailed Design & Project Plan

PDF

Authors
  1. Magar, A.
Corporate Authors
Defence R&D Canada - Ottawa, Ottawa ONT (CAN);Magar Security Architecture Inc, Ottawa ONT (CAN)
Abstract
The Department of National Defence (DND) has a requirement to share information subject to warning terms separation within a single network environment that enforces security policy. This paper continues a series of investigations into the application of Public Key Infrastructure (PKI) and Privilege Management Infrastructure (PMI) by proposing a proof-of-concept (POC) demonstration of an enhanced Windows-based architecture that combines commercial-off-the-shelf (COTS) PKI and PMI technology to address this requirement. The proposed POC demonstration architecture is not an end point but an evolving design. It is modular in nature so that as products and standards continue to evolve, components can be replaced with best-of-breed COTS technology without impacting other facets of the architecture.
Keywords
Access control;Access management;Audit;Authentication;Authorization;Caveat separation;Content-based encryption;Identity management;Information management;Privilege Management Infrastructure;Public Key Infrastructure;Rights management;Warning terms separation;Windows 2000
Report Number
DRDC-OTTAWA-CR-2003-207 — Contractor Report
Date of publication
01 Dec 2003
Number of Pages
105
DSTKIM No
CA023346
CANDIS No
520645
Format(s):
Hardcopy;CD ROM

Permanent link

Document 1 of 1

Date modified: