[KongchangAI]
Concept凭证代理

Credential Broker

A security architecture component that acts as a trusted intermediary holding long-term keys. Agents do not directly touch the original credentials and can only obtain short-term tokens re-issued by the broker on a per-task basis. All issuance operations are recorded in audit logs.

Timeline (last 90 days)

Oct 15

Credential management can be implemented through short-term credentials (such as dynamic issuance via STS), a Credential Broker holding long-term keys, and network-layer outbound policies, with the core logic being to move credentials out of the Agent process.

Unverified50%
Oct 15

As a trusted intermediary, the Credential Broker holds long-term keys, and Agents can only obtain short-term tokens exchanged by the broker, with all exchange activities recorded in audit logs.

Unverified50%

All Facts (2)

Source Articles