An Efficient Kerberos Authentication Mechanism Associated with Directory Systems

摘要

Since any suggestion to regional services are not described in Kerberos, authentication between regions can be performed via PKINIT(Public Key Cryptography for Initial Authentication) presented by IETF(Internet Engineering Task Force) CAT working group. In this paper, an efficient Kerberos authentication mechanism associated with X.509 and Domain Name system(DNS) is presented for regional services. The new protocol is better than the authentication mechanism proposed by IETF CAT Working group in terms of communication complexity.