Kerberos
User asks “key server” for access to target system
Key server creates message, encrypts with user key, sends
User decrypts message, then encrypts with “access key” of target system
Key server sends “session key” to user and target system (both encrypted)