Google Answers Logo
View Question
 
Q: Key distribution for occasional/short term users ( No Answer,   0 Comments )
Question  
Subject: Key distribution for occasional/short term users
Category: Computers > Security
Asked by: southof40-ga
List Price: $20.00
Posted: 23 Feb 2004 21:21 PST
Expires: 24 Mar 2004 21:21 PST
Question ID: 310127
Please feel free to ask for clarification of my question.

Consider this scenario:

A charitable organisation has funds which it distributes to research projects
it deems worthy of support. The recipients receive funds over the
course of 12 months. The recipients sign an initial contract to agree
to the funding arrangement and then, from time to time through the
year submit progress reports which are also signed. This amounts to
approx 5 interactions in a year. The recipients typically receive
funding once and then never again. The funds doner deals with approximately
150 projects a year.

It would improve matters if both initial and progress report signing
could be done electronically.

Please provide examples of key/certificate distribution in such a situation.

To refine my question I would just say the following:

1. I am familiar with situations where employees are issued with a
'smart card' which they use in a card reader next to the client
machine to activate a client certificate. I believe this (and all
other hardware based solutions that I have heard of) is not a good
approach for the current scenario due to the low frequency/short
duration of usage by the fund receipients.

2. I appreciate that a certificate could be emailed to the fund
receipients from the fund donors. However it seems to me that (A)
there is a risk of the email being intercepted and (B) upon receipt
the certificate is stored on the client machine and so effectively
"belongs" to the machine rather than the person. However I appreciate
I am ignorant of many aspects of this situation and so if the
researcher is able to offer a credible approach in this area I would
be interested to hear of it.

3. I imagine that some/all of the desired functionality could be
achieved by simply distributing a userid/password pair which was
entered into a SSL encrypted web page. Clearly secure
distribution/storage of userid/password is an issue here.

Would appreciate examples of key/certificate distribution in such a
situation as I have described. 

thanks
Answer  
There is no answer at this time.

Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy