Kerberos
Applicant sends the Service Ticket plus a Authenticator to the Verifier
- Authenticator contains information encrypted with Key AV
- Guarantees that the service ticket came from the applicant, which alone knows Key AV
- Service ticket has a time stamp to prevent replay
(Contains Key AV) + Authenticator