PKI-based AAIs 4/5
- For example, a distributed certificate management sys-tem (DCMS) was proposed and prototyped by the Swiss Federal Strategy Unit for Information Technology (FSUIT)
- The DCMS uses a DBMS to match public key certificates to group memberships (and to Ñsimulateì the functionality of ACs accordingly)
- The group membership information can be used to imple-ment role-based access controls
- The authentication part of the DCMS is similar in spirit and provides comparable services to VeriSign OnSite and the Swisskey Customer Branded CA service