Trusted Third Parties (1)
TTP are amorphous, range from:
- low value, low reliance and really just Third Parties not TTPs
- to, TTPs that couldn’t actually back the risk from the trust
- to, whole financial frameworks with TTP elements
TTPs can provide multiple services
- basic identity certificates (context free or dependent)
- e.g. this person is Joe Blow vs. this person is Joe Blow a DB customer.
- on-line certificate verification
- on-line transaction verification
- multi-party authentication/authorisation
- notarization, time stamping or high-end non-repudiation
- insourced certificate management services
- value add services e.g. repositories, business services, tool-kits