I-D Action: draft-wei-aic-identity-cert-00.txt
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178715529124.749420.16293469106255852556@dt-datatracker-7c6ddbc678-86d5j> |
Internet-Draft draft-wei-aic-identity-cert-00.txt is now available. Title: AI Agent Identity Certificate (AIC) Extension for X.509 v3 Author: Jijie Wei Name: draft-wei-aic-identity-cert-00.txt Pages: 42 Dates: 2026-08-19 Abstract: This document defines the AI Agent Identity Certificate (AIC) Extension for X.509 v3 certificates. The AIC extension enables binding of an AI Agent's cryptographic identity to a natural person (principal), providing cryptographic evidence that can support attribution of AI-autonomous actions to a principal. This specification intentionally separates cryptographic delegation from authorization semantics: AIC defines the cryptographic binding between agent and principal, while all capability and policy semantics are defined externally by vendors, industries, or regulators. The extension is identified by the IANA Private Enterprise Number 66257 assigned to the document author's organization. The AIC extension carries agent identity fields (agentId, delegationMode), a principal identifier (principalUid) linking the agent to the authorizing principal, a container-based capability declaration, authorization boundary constraints, and delegation authorization evidence with replay protection. A companion PrincipalAuthorization extension anchors Principal-side grant declarations and delegation policies. An authorizationConstraints container provides offline-verifiable execution boundaries (IP range, window). An extensibility framework allows vendor-specific and user- specific metadata. This document specifies the ASN.1 module, OID registration, field semantics, delegation model, and extensibility framework. Security considerations for deployment in regulated enterprise environments are discussed. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-wei-aic-identity-cert/ There is also an HTMLized version available at: https://datatracker.ietf.org/doc/html/draft-wei-aic-identity-cert-00 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]