You could have a look at Kerberos. That’s what Microsoft took as base for AD afaik.