The Refereed Papers are linked below as individual papers. The papers are also available as a single download in the following formats: uncompressed(3.5M), GZIP compressed(2.9M) or ZIP compressed(2.8M). All files are in Adobe Acrobat's PDF format. Presentation slides, and panel proceedings will be added as they become available.

Workshop Summary (HTML)

Opening Remarks

• Ken Klingenstein, Director of Internet2 Middleware Initiative; General Chair :
  Presentation (HTML)
• Carl Ellison - Intel; Program Chair :
  Presentation (HTML)

Invited Talk

• Making PKI Usable: Some Issues, Techniques, and Results
  • Alma Whitten, University of California, Berkeley

Refereed Papers: Enrollment

• An Overview of Public Key Certificate Support for Canada's Government On-Line (GOL) Initiative:
  Paper (PDF), Presentation (PDF), (HTML)
  • Mike Just, Treasury Board of Canada, Secretariat
• FreeICP.ORG: Free Trusted Certificates by Combining the X.509 and PGP Hierarchy Through a Collaborative Trust Scoring System :
  Paper (PDF), Presentation (PDF), (HTML)
  • Marco Antônio Carnut, Evandro Curvelo Hora, Cristiano Lincoln Mattos : Tempest Security Technologies; Fábio Silva, Universidade Federal de Pernambuco - CIn/UFPE, Brazil
• Improving Message Security With a Self-Assembling PKI:
  Paper (PDF), Presentation (PDF), (HTML)
  • Jon Callas, PGP Corporation

Panel: Attribute Certificates

• X.509 public key certificates are a strong mechanism for binding users to public keys. In many applications this is necessary, but not sufficient: other attributes of the user must be established before the application can reliably use the key. Multiple approaches to the user attribute problem have been developed, but none has gained universal acceptance. This session will present the case for two competing attribute mechanisms - X.509 attribute certificates, and SAML attribute assertions.
• Moderator:Tim Polk, NIST
• Russ Housley, Vigil Security
• Carlisle Adams, Entrust Technologies: Presentation (HTML)
• Session Notes (HTML)

Panel: ReThinking Trust

• This session will present the current state of trust models and practices in networked communities. It will look at macro models (hierarchies and bridges, federations, virtual organizations, etc) and micro models (static and run time trust decision architectures). It will then drill down into federated trust and discuss current deployments. There will be discussions around some of the emergent issues in federations, including multiple federations, multi-use federations, and managing trust.
  
• Presentation Slides (HTML)
• Session Notes (HTML)
• Rich Guida, Johnson and Johnson
• Ken Klingenstein, Internet2

Work In Progess Session

• Organized by Peter Honeyman, University of Michigan
  Session Notes (HTML)

Federations in Higher Education Birds Of A Feather (BoF) Session

• Session Notes (HTML)

  Refereed Papers: Security of the CA

• Intrusion Tolerant Password-Enabled PKI :
  Paper (PDF), Presentation (PDF), (HTML)
  • Xunhua Wang, James Madison University
• Decentralization Methods of Certification Authority Using the Digital Signature Schemes :
  Paper (PDF), Presentation (PDF), (HTML)
  • Satoshi Koga, Kouichi Sakurai, Kyushu University, Japan
• MOCA: Mobile Certificate Authority for Wireless Ad Hoc Networks :
  Paper (PDF), Presentation (PDF), (HTML)
  • Seung Yi, Robin Kravets, University of Illinois at Urbana-Champaign

  Refereed Papers: Authorization

• Mediating Between Strangers: A Trust Management Based Approach :
  Paper (PDF), Presentation (HTML)
  • Joachim Biskup, Yücel Karabulut, Universität Dortmund, Germany
• Electronic Signature System with Small Number of Private Keys :
  Paper (PDF)
  • Ahto Buldas, Tallinn Technical University, Estonia; Märt Saarepera, Independent
• Privacy-Enhanced Credential Services :
  Paper (PDF), Presentation (HTML)
  • Alex Iliev, Sean Smith, Dartmouth College

Panel: Transports for Trust - Technology View

1. Transports for trust (PKI, SAML,etc.) - when to use which, how they can interact, etc. :
   Presentation (PDF), Irving Reid - Baltimore
2. Implementation experience with SAML and relevance to PKI (Shibboleth et al) :
   Presentation (PDF), Scott Cantor OSU
3. Identity Management topics - SAML applications in Liberty et al. :
   Presentation (PDF), Bronislav Kavsan - RSA/Liberty Alliance
4. Update on SAML TC - what the TC is working on now and what is in the future :
   Presentation (PDF), Carlisle Adams - Entrust

• Moderator: Krishna Sankar, Cisco Systems: Presentation (PDF)
• Session Notes (HTML)

Refereed Papers: Attacks

• On the Usefulness of Proof-of-Possession :
  Paper (PDF) Presentation (PDF), (HTML)
  • N. Asokan, Valtteri Niemi, Pekka Laitinen, Nokia Research Center, Finland
    
• Keyjacking: Risks of the Current Client-side Infrastructure :
  Paper (PDF), Presentation (PDF)
  • John Marchesini, S. W. Smith, Meiyuan Zhao, Dartmouth College

Book Project / Wrap Up

• Toward a Mature, Globally Interoperable Public Key Infrastructure
  Presentation (HTML)
• Eugene C. McDowell, National Oceanic & Atmospheric Administration