scope:

The ATIS IIF has identified required security functions that dictate the need for Public Key Infrastructure (PKI) operations and the related Certificates. The basis of trust for PKI operations is established by the Certificate Trust Management Hierarchy. The Certificate Trust Management Hierarchy approach satisfies the trust requirements of the security solutions, establishes trust relationships between relevant business entities, and forms the basis for establishing a trust organization and Certificate Authorities.

This document, the Certificate Trust Management Hierarchy Interoperability Specification, is designed to meet the following objectives:

To focus on interoperability solutions only.

To identify all elements in ATIS IIF systems that require the use of PKI operations and certificates.

To identify technical and business entities that are stakeholders or may be affected by specific PKI trust management hierarchies or operational demands.

To develop a Certificate Trust Management Hierarchy to address ATIS IIF's PKI certificate needs.

To establish requirements for the formatting of PKI certificates to satisfy ATIS IIF requirements.

To produce a standard PKI Certificate Trust Management Hierarchy diagram and normative text defining the ATIS IIF PKI implementation.

To use existing industry standards where possible.

This specification assumes that the Digital Rights Management (DRM) system is a Black Box (see 1.1.2).