Arbitrary Key Signing Description / User Story Goal or Desired Outcome Environment Process Flow Decipher a Data Encryption Key Description / User Story Fahima works with Khaled on sensitive projects. During the course of their work, they share documents to which they occasionally allow other people access. These documents are encrypted to a key managed by a server. Fahima and Khaled are given access to the key by virtue of their credentials and permissions established in the key management system. Software on access to the encrypted document such that the Fahima’s system mediates encryption is largely transparent to her. Goal or Desired Outcome Fahima can create documents to share with a group of colleagues that are encrypted only to that group. Fahima have to worry about the technical details behind that encryption. doesn’t Administrators of the key management system can set up shared group keys with proper permissions. The key management system must unlock files for Fahima upon her properly identifying herself. Environment Categories Covered: Applicable Deployment and Service Models: Desktop-based enrollment On premises Actors: Systems: Fahima a reasonably Client Software Management Server a – – sophisticated encryption user server that administrators use to establish the security policy for the Client Software. (This Khaled a normal knowledge – server could be, and often is, the same as the worker with little to no KMIP server below.) cryptographic experience KMIP Server a server managing the key – Client Software software – material for an enterprise designed to integrate with laptop / desktop endpoints and provide Directory server Active Directory or another –
Arbitrary Key Signing Description / User Story Goal or Desired Outcome Environment Process Flow Decipher a Data Encryption Key Description / User Story Fahima works with Khaled on sensitive projects. During the course of their work, they share documents to which they occasionally allow other people access. These documents are encrypted to a key managed by a server. Fahima and Khaled are given access to the key by virtue of their credentials and permissions established in the key management system. Software on Fahima’s system mediates access to the encrypted document such that the encryption is largely transparent to her. Goal or Desired Outcome Fahima can create documents to share with a group of colleagues that are encrypted only to that group. Fahima doesn’t have to worry about the technical details behind that encryption. Administrators of the key management system can set up shared group keys with proper permissions. The key management system must unlock files for Fahima upon her properly identifying herself. Environment Categories Covered: Desktop-based enrollment Applicable Deployment and Service Models: On premises Actors: Fahima – a reasonably sophisticated encryption user Khaled – a normal knowledge worker with little to no cryptographic experience Client Software – software designed to integrate with laptop / desktop endpoints and provide Systems: Client Software Management Server – a server that administrators use to establish the security policy for the Client Software. (This server could be, and often is, the same as the KMIP server below.) KMIP Server – a server managing the key material for an enterprise Directory server – Active Directory or another
PGP-Use-Cases.docx