Trusted Third Parties (3)
There is little consensus on what a TTP is or does
- in many cases what we see is TSP (nearly a truism)
- in practice many entities will be what could be called TTPs without actually realising it
Financial services TTPs are usually built around a specific business model e.g. Identrus, eTrust, TrustCenter
The market for TTPs is clearly moving to authorisation/entitlements management
- by using certificates or other mechanisms
- issues of scalability
Consortia will help with cross-certification issues