Jump to content

Principal (computer security)

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Lfstevens (talk | contribs) at 18:16, 30 May 2012 (ce, rem tag). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A principal in computer security is an entity that can be authenticated by a computer system or network. This concept is also referred as security principal in Java and Microsoft literature.[1]

Principals are typically assigned rights and privileges over resources in the network. Principals typically represent physical persons, computational entities, systems connected to the network (physical or virtual) and services.

Typically a principal has an associated identifier (such as a Security Identifier) that allows it to be referenced for identification or assignment of properties and permissions.

References

  1. ^ « What Are Security Principals? », technet.microsoft.com, 28 March 2003.
  • RFC 2744 - Generic Security Service API Version 2.
  • RFC 5397 - WebDAV Current Principal Extension.
  • RFC 4121 - The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2.