In Phase II we will investigate the more advanced aspects of certificate based security including creation and use of certificate revocation lists, certificate expiration, and distributed authorization. We will also begin to propose policies and the administrative model. At the end of Phase II, UMS should be able to make a decision about whether or not to use certificate based security for Web based applications. This phase will also evaluate digital signatures on Web forms for workflow requirements and strategies. We will work to quantify the complexity.
Certificates require a lot of infrastructure.
We'll work on that too. Therefore, certificates won't work for workflow. Authorization by position is a challenge we need to solve regardless of the security mechanism we choose. We think certificate extensions can carry role information and we'll test that. UMS is not attempting to determine the security management interfaces for the campuses, just looking for its own mechanism that will be flexible and most likely to co-exist with campus mechanisms.