Mediated Authentication

• A trusted third party mediates the authentication process

• Called the Key Distribution Center (KDC)

• Each user and service shares a secret key with the KDC

• KDC generates a session key, and securely distributes it to communicating parties

• Communicating parties prove to each other that they know the session key