An Architectural Model for Secure Authorizations

Chapter 2 motivated trust issues and safeguards for authorizations in the digital world. In this Chapter an appropriate architectural model for secure authorizations is presented. The notion of security supported by the model is further examined in Chap. 4.

In the following, an architectural model for secure authorizations is introduced.The model generalizes from the hybrid PKI model of Biskup and Karabulut [18, 19, 125] by abstracting from PKI-specific technology. The exposition focuses on the parties that are communicating directly with the service user. Licensing, delegation and the various modes of interaction, as defined by Biskup and Karabulut, are not described, they work just as in the hybrid PKI model [18, 19, 125]. The model for secure authorizations is already prepared for the extensions we make for pseudonymization in Chap. 8.