Provides security services to calling applications
|
It allows communicating applications:
-
to authenticate the user associated with another application
-
to delegate rights to another application
-
to apply security services such as confidentiality and integrity on a per-message basis
|
Is implemented atop alternative underlying cryptographic mechanisms.
|