Using LDAP Directories for Management of PKI Processes

TL;DR

This paper proposes a framework that extends LDAP servers beyond directory services to manage PKI processes, including proof-of-possession and secure delivery of security environments.

Contribution

It introduces a novel approach to using LDAP servers for PKI process management, enhancing security and administrative capabilities.

Findings

Demonstrated proof-of-possession method for encryption keys

Secure delivery mechanism for personal security environments

Extended LDAP functionality for PKI process management

Abstract

We present a framework for extending the functionality of LDAP servers from their typical use as a public directory in public key infrastructures. In this framework the LDAP servers are used for administrating infrastructure processes. One application of this framework is a method for providing proof-of-possession, especially in the case of encryption keys. Another one is the secure delivery of software personal security environments.