uEnsure
integrity of transmitted data:
ØUse
private key and a public key
ØPrivate
key used to sign a block of data
ØPublic
key used to determine whether the data has been modified
§Verifies that no signed data has been changed during
transit and rejects any requests
that have been modified.
uExcellent
method of establishing the authenticity of users and the integrity of messages.
ØMay
not be usable in all system architectures.
ØEach user of the web service must have a digital
certificate and the means to
add a signature.
ØThe web service must know in advance which digital
certificates it can trust.