A New Model for Authentication and Authorization across Heterogeneous Trust-Domain

Distributed systems could be more secured with a distributed trust model based on either PKI or Kerberos. However, it becomes difficult to establish trust relationship across heterogeneous domains due to different actual trust mechanism and security policy as well as the intrinsic flaw of each trust model. This paper is to propose a new high-compatible model, capable of working under the condition of mutual authentication and authorization, in order to address the issue of establishing trust across domains.