The first generation of security allowed network operators to specify a MAIL-FROM attribute, requiring that updates be sent from a specific email address. Next, (B)CRYPT-PW / MD5-PW password hash authentication was added, and finally a PGP-KEY attribute was added, allowing users to cryptographically sign submitted edits. Subsequent work by the  Regional Internet Registries created additional IRRs which strictly tied permission to advertise IP blocks to RIR allocation data.
The initial security protocol allowed network operators to specify a MAIL-FROM attribute, requiring updates to come from a specific email address. This was then supplemented with (B)CRYPT-PW / MD5-PW password hash authentication and a PGP-KEY attribute, which enabled users to securely authenticate submitted edits. Furthermore, subsequent efforts by Regional Internet Registries resulted in additional IRRs that strictly tied permission to advertise IP blocks to RIR allocation data.