mipshop-1----Page:4
1  2  3  4  5  6  7 

How to Provide MN-MAP Security?
Authentication &
Authorization Mode

In this mode, the MAP and the MN need to know that the other end is "trusted". The MAP also needs to know if the MN is authorized for using it.
All 3 parties need certificates; MN’s is issued by its HA
Both MAP and HA only need to store a few trusted CAs’ public keys.
Similar to SSL, no global PKI is need here.
PPT Version