Integrated secure-negotiation service for subjects of electronic commerce

Electronic commerce shall provide its subjects with a credential-based security service in the open distributed computing environment. In this paper, based on CORBA security service specification which the OMG defined, we propose an integrated secure-negotiation service for subjects of electronic commerce, providing mutual authentication and label-based authorization. This proposed structure, by Kerberos for authentication and authenticated key exchange, assures not only the identification of a partner but also the confidence of origin of the business item for negotiations between subjects of electronic commerce. Since our deployed Kerberos is extended to the mutual authentication service based on the CORBA platform, it is efficient for security administration to manage information such as a key management in an open distributed computing environment.