Accessing Restricted Resources Using Digital IDs

Overview

Traditionally, information system have determined if access should be granted to restricted resources by primarly employing userid/password challenges and/or requiring that computers have specific network addresses, i.e. IP address authentication. These access management modes have several difficulties. These include individual users having to remember an ever-increasing number of frequently changed passwords and/or using only computers connected to a specific university or enterprise network. 

Using digital IDs to authentic the identity of individuals requesting access to restricted materials solves the aforementioned mentioned problems in that 

• multiple digital IDs are contained within one's personal security environment (PSE),
• all IDs in the PSE are protected by a single password,
• only this single password is required to access ALL resources requiring a digital ID,
• one's PSE can be duplicated on multiple computers and/or transported on a smart card: thus,
• access requires only one's digital ID and not that computers have specific network addresses.

Process

When you request, say by clicking on a hyperlink, access to a restricted resource, that resource will request your Web browser to send the appropriate public key.  Depending on which Web browser you are using and how your have its security settings configured, you may or may not be asked to 

• select which certified key is to be sent, and/or
• to provide a password to open your security environment.

Except for extremely unique circumstances, you should ALWAYS have you browser set to request your password before you can use your digital IDs!

Accessing Restricted Resources Using

Netscape Communicator