Flexible and Scalable Credential Structures: NetBill Implementation and Experience

In electronic commerce consumers often need to present attributes such as membership in order to benefit from specific pricing or access. A scalable, efficient mechanism for conveying attributes independently from authentication is required. In this paper we describe a system based on a combination of Public Key Kerberos for Distributed Authentication (PKDA) and attribute credentials as a means for solving meeting these requirements. This system is compared to other proposals for distributed authentication and authorization, and is shown to be superior in several respects. The system has been implemented as part of the NetBill micropayment system and has been demonstrated to work well in meeting the stated requirements. ################################################## # #:RUN#ZDV#GRQH#DW#&DUQHJLH#0HOORQ#8QLYHUVLW\ # #&RQWDFW#$XWKRU ##### 1. Introduction The Internet is becoming increasingly pervasive in both industry and commerce. A variety of uses, from shopping, to information..