将加密的会话密钥发送给服务器。
它提供了票证和会话密钥。
目标服务器将使用此会话密钥来确认客户端的身份。
This session key will be used by the target server to confirm the identity of the client.
客户端保留会话密钥，将票证按原样转发给服务器。
The client retains the session key and forward the ticket to the server as it is.
整条消息使用PTGT会话密钥加密并发送回客户端。
The whole message is encrypted using the PTGT session key and is sent back to the client.
获得包含供与身份验证服务器一同使用的会话密钥的tgt。
Get the TGT containing session key for use with the authentication services.
客户端获得响应消息，解密它，然后获得PTGT和PTGT会话密钥。
The client gets the response message, decrypts it, and obtains the PTGT and PTGT session key.
现在，客户端拥有了会话密钥，它可以使用该密钥向身份验证服务验证自身。
At this point, client has the session key that client can use for authenticating itself to the authentication service.
当收到加密的消息时，受信任方使用其私钥解密会话密钥，然后使用它解密消息。
When receiving the encrypted message, the trusted party USES its private key to decrypt the session key and then USES it to decrypt the message.
该TGT包含客户端的身份、一个随机生成的TGT会话密钥和TGT的有效期。
The TGT contains the identity of the client, a randomly generated TGT session key and the lifetime of the TGT.
身份验证服务构造一条响应消息，其中包含PSTkt和新会话密钥的一个副本。
The authentication service constructs the response message containing the PSTkt and a copy of the new session key.
如果它是来自客户端的有效请求，它使用服务器秘密密钥从STkt提取会话密钥。
If it is a valid request from client, it extracts the session key from the STkt using server secret key.
为达到完美向前和完美向后保密以及对付密码分析，需要更新组会话密钥。
In order to achieve perfect forward and perfect backward secrecy, and to counteract cryptoanalysis, the group session keys should be rekeyed.
目前基于公钥的加密和会话密钥交换方案容易受到中间人攻击且效率不高。
Most current cryptography and session key exchange schemes based on public key are vulnerable to intermediate attack and have low efficiency.
STkt请求的主要目标是获得一个新会话密钥，供客户端与安全服务器一起使用。
The main objective of STkt request is to get a new session key for the client to use with the security server.
客户端收到响应消息，解密它，获得PSTkt和与目标服务器一同使用的会话密钥。
The client receives the response, decrypts it and obtains the PSTkt and the session key to be used with the target server.
很多基本上是秘钥系统的加密软件包采用明钥加密，来传送秘密的会话密钥。
Many encryption packages that are basically secret-key systems use public-key encryption to communicate the secret session keys.
STkt响应消息包含在客户端与目标服务器之间使用的会话密钥，还包含客户端的身份。
The STkt response message includes first the session key for use between the client and targeted server and then also the identity of the client.
客户端现在向目标服务器发出一个RPC调用，向它发送包含会话密钥和PAC的PSTkt。
Client now makes an RPC call to the target server sending it the PSTkt containing session key and the PAC.
身份验证服务然后使用TGT会话密钥加密stkt和会话密钥的副本，再将消息发回给客户端。
The authentication service then encrypts the STkt and copy of the session key using the TGT session key and sends the message back to the client.
客户端现在拥有了从身份验证服务获得PSTkt所需的一切，以及PTGT和PTGT会话密钥。
The client now has everything it needs to get PSTkt from the authentication service, PTGT and PTGT session key.
身份验证服务向客户端发出一条响应消息，其中包含TGT、TGT会话密钥的一个副本和其他信息。
The authentication service make a response message to the client containing the TGT, a copy of TGT session key and other information.
第一部分包含身份验证服务及服务器，第二部分是加密的，包含票证有效期和TGT会话密钥。
The first part contains authentication service as the server and the second encrypted portion contains ticket lifetime and TGT session key.
当需要依赖时，它们最好定义成通用业务流程、函数和数据模型，而不是实现构件(比如会话密钥)。
When dependencies are required, they are best defined in terms of common business processes, functions, and data models, not implementation artifacts (like a session key).
客户端首先将一个tgt发送给授权服务，授权服务然后向客户端提供一个STkt和一个会话密钥。
The client starts with sending a TGT to the authentication service which in turn provides the client with an STkt and a session key.
在此身份验证信息交换过程中生成的会话密钥可用于客户端/服务器与KDC之间的所有未来通信。
The session keys generated during this authentication exchange can be used for all the future correspondences among client/server and KDC.
客户端向服务器发出RPC调用，并将包含会话密钥的STkt作为RPC协议的一部分传递给服务器。
The client makes an RPC call to the server, and the STkt containing the session key passed as a part of the RPC protocol.
身份验证服务的总体目标是，与客户端希望向其进行身份验证的服务器安全地交换客户端身份和会话密钥。
The whole purpose of the authentication service is to securely exchange the client identity and session key to the server to which the client wants to authenticate.
此消息的完整性通过一个校验和来保护，该校验和使用客户端与身份验证服务器之间的会话密钥进行加密。
This message's integrity is protected via an encrypted checksum using the session key between the client and authentication service.
此消息的完整性通过一个校验和来保护，该校验和使用客户端与身份验证服务器之间的会话密钥进行加密。
This message's integrity is protected via an encrypted checksum using the session key between the client and authentication service.
应用推荐