A set of communicating entities that employ cryptographic services and need cryptographic keying relationships to enable cryptographically protected communications.
Sources:
NIST SP 800-57 Part 2 Rev.1