There could exist one or more PAAs within the U.S. and non-U.S. KMIs. To permit communication between users of different PAA domains, a common certification path must exist. Cross certification will be based on the existence of accepted policies and standard certification criteria. PAAs from each KMI could then cross ...