UCCAP - References

UC material relevant to UCCAP:

• "An Information Architecture for UC: Critical Building Blocks" - Overview and motivation for network middleware, including authentication. May 1996.
• A University Common Authentication Project - 1997 proposal to work on certificates and Kerberos
• Authentication Working Group web site - includes reports dated October 31, 1997 and July 31, 1998.
• Report to JOG January 28, 1998, recommending next phase.
• University Directory Project
• UCLA Campus-Wide Authentication Project
• UCI - Campus-Wide Web Authentication, Authorization and Demographics Database Project
• Policy references
• An Architectural Prototype for Certificate-based.Authentication and Authorization - a slide presentation concerning some joint work with the DLF

Material outside UC relevant to PKI/certificates in university environments:

• PKI and Security for Higher Education - a white paper covering discussions of the August 1999 Educause meeting on PKI in Snowmass CO.
• Public Key Infrastructure: Evaluation and Recommendations - UMinn. A top-down analysis leading to recommendations.
  Distinguishes "two kinds of key pairs: Web-enabled keys and dual-purpose keys" - $1 for the former, $75 for the latter.
• U Colorado - PKI project documentation. See particularly UMS Public Key Infrastructure (PKI) Analysis Table of Contents
• Columbia Certification Authority
• Inspire, Indiana's virtual library - uses certs.
• Securing IT Resources with Digital Certificates and LDAP, Presentation to CAUSE, December 1997, Kent Cearley and Lindsay Winsor, University of Colorado System Office, Boulder, Colorado.
  An excellent document. Starts with a bit of history/motivation and gives an overview of Certificate/PKI/LDAP technology. Talks a lot about policy. Overview of the "PKI technology" forecast. Statement of how Colorado is proceeding.
• CNI - Coalition for Networked Information - we are tracking their current program on authentication. See also the paper Access Management for Networked Information Resources.
• Remote Authentication and Authorization for JSTOR
• Access Management of Web-based Services - a DLIB magazine article published Sept 1998 by Columbia
• CREN's Certificate Authority Service. CREN Announces NEW Certificate Authority Service

Assorted PKI/certificate references:

• FPKI - Federal Public Key Infrastructure - documentation of an on-going federal PKI effort. See especially Access with Trust.
• PKIX - the IETF group working to standardize certificates based on X.509.
• NIST PKI Program
• PKI References
• Introduction to Public Key Cryptography - a Verisign overview.
• ANSI - Organization Name Registration - describes the naming hierarchy and procedures for registering a name.
• The OpenLDAP Foundation
• MIT Jonah PKIX Freeware Distribution Home Page

Assorted random references:

• California Digital Signature Regulations
• Evaluating the Cost of Ownership for Digital Certificate Projects - compares Verisign, Entrust, and Netscape, with Verisign winning handily.
• A Total Economic Impact Analysis of Two PKI Vendors: Entrust and VeriSign - compares Entrust and Verisign, with Entrust winning handily.
• Guidelines for Constructing Policies Governing the Use of Identity-Based Public Key Certificates - Sept 21, 1998. A 113-page draft document by NACHA (National Automated Clearing House Association) The Internet Council, with comments accepted thru Dec 31, 1998. Includes guidance on if/how to draft a CPS.
• An Incremental Approach to Cross-organizational Authentication and Authorization - a paper by Cornell, Septemeber 1998
• Software Industry Issues: Digital Signatures
• Re-Evaluating Proposals for a Public Key Infrastructure

Send your questions, comments, and suggestions to IR&C
Last updated October 1, 1999