Key distribution center


Key distribution center

In cryptography, a key distribution center (KDC) is part of a cryptosystem intended to reduce the risks inherent in exchanging keys. KDCs often operate in systems within which some users may have permission to use certain services at some times and not at others.

ecurity overview

For instance, an administrator may have established a policy that only certain users may use the tape backup facility. (Perhaps the administrator has concerns that unrestricted use might result in someone smuggling out a tape containing important information; but the precise reason does not matter for the purpose of explaining the functioning of the key distribution center.) Many operating systems can control access to the tape facility via a 'system service'. If that system service further restricts the tape drive to operate on behalf only of users who can submit a service-granting ticket when they wish to use it, there remains only the task of distributing such tickets to the appropriately permitted users. If the ticket consists of (or includes) a key, we can then term the mechanism which distributes it a KDC. Usually, in such situations, the KDC itself also operates as a system service.

Operation

A typical operation with a KDC involves a request from a user to use some service. The KDC will use cryptographic techniques to authenticate requesting users as themselves. It will also check whether an individual user has the right to access the service requested. If the authenticated user meets all prescribed conditions, the KDC can issue a ticket permitting access.

KDCs mostly operate with symmetric encryption.

In most (but not all) cases the KDC shares a key with each of all the other parties.

The KDC produces a ticket based on a server key.

The client receives the ticket and submits it to the appropriate server.

External links

* [http://www.zeroshell.net/eng/kerberos/Kerberos-operation/ Kerberos 5 KDC operation]

The server can verify the submitted ticket and grant access to the user submitting it.

Security systems using KDCs include Kerberos.

Benefits

* Easier key distribution
* Scalability

Drawbacks

* A KDC can become a single point of failure
* Everybody must trust the KDC


Wikimedia Foundation. 2010.

Look at other dictionaries:

  • Key Distribution Center — Ein Key Distribution Center (abgekürzt: KDC, engl. für Schlüssel Verwaltungs Zentrale, auch Trust Center genannt oder, im Kerberos System, Kerberos Server), gibt für angemeldete Nutzer in einem Netzwerk auf Anforderung eine Ausweis Datei (TGT)… …   Deutsch Wikipedia

  • Key (cryptography) — In cryptography, a key is a piece of information (a parameter) that determines the functional output of a cryptographic algorithm or cipher. Without a key, the algorithm would produce no useful result. In encryption, a key specifies the… …   Wikipedia

  • Distribution — Contents 1 In mathematics, science, and technology 1.1 In mathematics 1.2 In science …   Wikipedia

  • Key Tronic — ist ein Hersteller von Computerzubehör mit Hauptsitz in Spokane im US Bundesstaat Washington. Key Tronic wurde 1969 gegründet und stellt hauptsächlich Tastaturen, Mäuse und andere Eingabegeräte her. Die Eingabegeräte von Key Tronic sind sehr… …   Deutsch Wikipedia

  • Center of Excellence in Nanotechnology at AIT — Center of Excellence at AIT CoEN @ AIT Motto There is no sky to limit us at the bottom Type Center of Excellence Endowment …   Wikipedia

  • Center for Information Technology — The Center for Information Technology (CIT) is an agency of the United States Federal Government. CIT, first established in 1964 as the Division of Computer Research and Technology (DCRT), provides the technological and computational support and… …   Wikipedia

  • Key (lock) — A cut key A key is an instrument that is used to operate a lock. A typical key consists of two parts: the blade, which slides into the keyway of the lock and distinguishes between different keys, and the bow, which is left protruding so that… …   Wikipedia

  • Center Party —    An ideologically centrist political party formed in late 1998 to contest the 17 May 1999 election (see KNESSET ELECTIONS) to the 15th Knesset. Its founders were former Likud members of the Knesset and cabinet ministers Dan Meridor, Ronnie Milo …   Historical Dictionary of Israel

  • IBM RFID Information Center — (RFIDIC) is based on EPCglobal s Electronic Product Code Information Services (EPCIS) standard specification. RFID Information Center enables tracking of uniquley identifiable (serialized) product throughout the supply chain. Despite the name,… …   Wikipedia

  • World Trade Center — For other uses, see World Trade Center (disambiguation). World Trade Center[1] …   Wikipedia