Role based control via attribute certificate

This paper focuses the definition of role based control via attribute certificate. With attribute certificates the notion of binding a key to an identity by a certificate is abandoned in favor of the idea that the function of a certificate becomes more general when permissions are assigned to the holder. A general overview of PKI and PMI boundaries, followed by the characteristics of an attribute certificate in XML structure is presented. The digital signature is used in a structure to sign a holiday application form. Several persons must sign this document. A signatory could be the manager who has the privilege of allowing the application form. This implies the importance of knowing the signatories' role and the elements necessary to control the role of signatories.