Role based control via attribute certificate

This paper focuses the definition of role based control via attribute certificate. With attribute certificates the notion of binding a key to an identity by a certificate is abandoned in favor of the idea that the function of a certificate becomes more general when permissions are assigned to the holder. A general overview of PKI and PMI boundaries, followed by the characteristics of an attribute certificate in XML structure is presented. The digital signature is used in a structure to sign a holiday application form. Several persons must sign this document. A signatory could be the manager who has the privilege of allowing the application form. This implies the importance of knowing the signatories´ role and the elements necessary to control the role of signatories.