Netscape Certificate Management System 6.1, Руководство администратора

Страница: 826 / 840

826 Netscape Certificate Management System Administrator’s Guide • February 2003
Certificates support single sign-on within a public-key infrastructure (PKI). A user
can log in once to a local client’s private-key database and thereafter, as long as the
client software is running, rely on certificate-based authentication to access each
server within an organization that the user is allowed to access.
slot The portion of a PKCS #11 module (implemented in either hardware or
software) that contains a token.
smart card A small device, typically about the size of a credit card, that contains a
microprocessor and is capable of storing cryptographic information (such as keys
and certificates) and performing cryptographic operations. Smart cards implement
some or all of the PKCS #11 interface.
spoofing The act of pretending to be someone else. For example, a person can
pretend to have the email address
jdoe@example.com
, or a computer can identify
itself as a site called
www.netscape.com
when it is not. Spoofing is one form of
impersonation. See also misrepresentation, impersonation.
SSL See Secure Sockets Layer (SSL).
subject The entity identified by a certificate. In particular, the subject field of a
certificate contains a subject name that uniquely describes the certified entity.
subject name A distinguished name (DN) that uniquely describes the subject of a
certificate.
subordinate CA A certificate authority whose certificate is signed by another
subordinate CA or by the root CA. See CA certificate, root CA.
symmetric encryption An encryption method that uses the same cryptographic
key to encrypt and decrypt a given message.
tamper detection A mechanism ensuring that data received in electronic form
has not been tampered with; that is, that the data received entirely corresponds
with the original version of the same data.
token
A hardware or software device that is associated with a slot in a PKCS #11
module. It provides cryptographic services and optionally stores certificates and
keys.
tree hierarchy The hierarchical structure of an LDAP directory.