[e-lang] eRights Authentication

Mark S. Miller markm at cs.jhu.edu
Sun Jan 21 23:04:42 CST 2007


Sankar Narayanan wrote:
> I am newly to eRights so i need some info about authentication in eRights.
> How the authentication process is done in eRights? can anyone have idea 
> about this pls share the info? and i also need the some URL about eRights

Hi Sankar,

What kind of authentication are you interested in? Why? The reason I'm asking 
is that, often, people think they need authentication when what they're really 
interested in is authorization. While some kinds of authentication are indeed 
possible, it's also trickier than people normally realize.

In any case, try Chapter 7 of <http://erights.org/talks/thesis/>. In section 
7.5, it says: "The VatID ensures that the vat Bob is speaking to is the one 
hosting the object Alice meant to introduce him to---making spoofing 
infeasible." When you understand what this means in this context, this might 
also answer the questions you have in mind.

-- 
Text by me above is hereby placed in the public domain

     Cheers,
     --MarkM


More information about the e-lang mailing list