Goals
Provides security services to calling applications
It allows communicating applications:
- to authenticate the user associated with another application
- to delegate rights to another application
- to apply security services such as confidentiality and integrity on a per-message basis
Is implemented atop alternative underlying cryptographic mechanisms.