In effect, today, credentials aren't portable. Ideally, users would be able to use a common set of credentials with their desktop and laptop PCs, PDAs, cell phones, and other Internet-ready devices. There are at least two possible solutions for providing credential portability. In general, the security provided by such systems will be less than is provided in systems using hardware tokens, as the hardware tokens tend to be more resistant to improper inspection and modification. However, in many environments, the security offered will be sufficient.
Availability is also at a premium.
Credentials must be available to many different types of client with different characteristics in terms of processing power, storage and network connectivity. Return to working group directory. Return to IETF home page.