SETECS Copyright© SETECS Corporation Sead Muftic SETECS Corporation SETECS OnePKI March 14, 2002.

SETECS

Sead MufticSead MufticSETECS CorporationSETECS Corporation

SETECS SETECS OnePKIOnePKI

March 14, 2002March 14, 2002

SETECS

1. 1. OnePKIOnePKI – full CA infrastructure – full CA infrastructure (CA servers, clients, and APIs)(CA servers, clients, and APIs)2. 2. OneDirectory OneDirectory – X.500/LDAP system – X.500/LDAP system (X.500/LDAP servers, LDAP client, security extensions)(X.500/LDAP servers, LDAP client, security extensions)3. 3. OneCARDOneCARD – System for file/Java smart cards – System for file/Java smart cards (SC administration, SC applications, PC applications, SC APIs)(SC administration, SC applications, PC applications, SC APIs)4. 4. OneNETOneNET – Network security system – Network security system (Secure E–mail, Secure WWW – SSL and forms)(Secure E–mail, Secure WWW – SSL and forms)5. 5. OneJAVAOneJAVA – Security system for Java applications – Security system for Java applications (Security client, server and secure Java objects/methods) (Security client, server and secure Java objects/methods) 6. 6. OnePlatform OnePlatform – Security development platform – Security development platform (C/C++, Java, smart card APIs, protocols and components)(C/C++, Java, smart card APIs, protocols and components)

SETECS Security Products :SETECS Security Products :

SETECS

1.1. Collection of CA ServersCollection of CA Servers – – alternative PKIs alternative PKIs2.2. Several PKI clients – native client, thinSeveral PKI clients – native client, thin––, thick, thick––client, Java clientclient, Java client3.3. Full RFC 2459 certificate and CRL profiles (all extensions)Full RFC 2459 certificate and CRL profiles (all extensions)4.4. All certificates and CRL functions (CMS – RFC 2510)All certificates and CRL functions (CMS – RFC 2510)5.5. Creation and verification of certificate paths Creation and verification of certificate paths 6.6. Multiple policies (high, medium, basic) – compliant with Multiple policies (high, medium, basic) – compliant with FBCA Medium/High and DoD Class3 / Class 4 policies 7. Private cert profiles (VISA/MasterCard) and financial PKIs 8.8. Combined with directories and smart cardsCombined with directories and smart cards9.9. Some additional features . . .Some additional features . . .

OnePKIOnePKI

– Characteristics :– Characteristics :

SETECS

OnePKIOnePKI – Full CA Infrastructure – Full CA InfrastructureOnePKIOnePKI – Full CA Infrastructure – Full CA Infrastructure

Top CATop CA

PolicyPolicyCACA

Local CALocal CA

HierarchyHierarchyCACA

Bridge Bridge

Web and OtherWeb and Other

ServersServers

PolicyPolicyCACA

Local CALocal CA

UserUserUserUser

Single CASingle CA

UserUser UserUser

Top CATop CA

PolicyPolicyCACA

Local CALocal CA

SETECS

Top CATop CA Bridge CABridge CA

RootCertificate.der RootCertificate.der

SETECS

OtherRootCertificate.der

ForwardCertificate.der

SETECS

BackwardCertificate.der

SETECS

CrossCertificatePair.der

SETECS

OnePKIOnePKI – Full CA Infrastructure – Full CA InfrastructureOnePKIOnePKI – Full CA Infrastructure – Full CA Infrastructure

Top CATop CA

PolicyPolicyCACA

Local CALocal CA

Bridge Bridge

Web and OtherWeb and Other

ServersServers

PolicyPolicyCACA

Local CALocal CA

UserUserUserUser

Single CASingle CA

UserUser UserUser

Top CATop CA

PolicyPolicyCACA

Local CALocal CA

SETECS

TopCATopCA

OneDirectory OneDirectory – X.500 / LDAP System– X.500 / LDAP SystemOneDirectory OneDirectory – X.500 / LDAP System– X.500 / LDAP System

PolCAPolCA

LocalCALocalCA

HierCAHierCA

PolCAPolCA

LocalCALocalCA

HierCAHierCA

Servers /Servers /AdministratorsAdministratorsUsersUsers

BorderBorderInternalInternal

CRLCRLCertsCerts

SETECS

1.1. Simple and easy installation Simple and easy installation 2.2. Simple and easy customizationSimple and easy customization3.3. Encrypted classes – fully resistant against viruses/wormsEncrypted classes – fully resistant against viruses/worms4.4. Verification of completeness before activation Verification of completeness before activation 5.5. Invalid incoming messages/requests rejected Invalid incoming messages/requests rejected 6.6. All FBCA “membrane” test requirements All FBCA “membrane” test requirements 7. FBCA Medium/High and DoD Class3 / Class 4 policies 8.8. Combined with directories and smart cardsCombined with directories and smart cards

OnePKIOnePKI

– Additional Features :– Additional Features :

SETECS

1.1. Full demo Full demo 2.2. Download, install and test (SETECS Test CP) Download, install and test (SETECS Test CP) 3.3. Adopt SETECS CP and CPS (Basic CP)Adopt SETECS CP and CPS (Basic CP)4.4. Run as a small pilot (Secure E–mail, Secure Web)Run as a small pilot (Secure E–mail, Secure Web)5.5. Cross–certify with FBCA and run full scope Cross–certify with FBCA and run full scope 6.6. Extend other applications with PKIExtend other applications with PKI7. Move to Medium/High CP (SC and Directory functions)SC and Directory functions) 8.8. Scale (users), extend (applications), expand (functionality) Scale (users), extend (applications), expand (functionality)

OnePKIOnePKI

– Suggestions / Phases :– Suggestions / Phases :

SETECS

Sead MufticSead MufticSETECS CorporationSETECS Corporation

SETECS SETECS OnePKIOnePKI

E-mail: sead @ dsv.su.seE-mail: sead @ dsv.su.seCell: (301) 648-8599Cell: (301) 648-8599

Phone: (202) 994-5506Phone: (202) 994-5506

http://www.setecs.com/DL/Download.htmhttp://www.setecs.com/DL/Download.htm

March 14, 2002March 14, 2002

SETECS Copyright© SETECS Corporation Sead Muftic SETECS Corporation SETECS OnePKI March 14, 2002.

Documents

2010 METHANEX CORPORATION METHANEX CORPORATION Methanex...

MUNICIPAL CORPORATION ROHTAKMUNICIPAL CORPORATION ...

SMALL BUSINESS SMALL BUSINESS CORPORATION CORPORATION

Intech U.S. Enhanced Plus · Apple Inc. Costco Wholesale...

SAN MIGUEL CORPORATION · BDO Capital & Investment...

New Secretaria de Estado de Planejamento e Gestão | Governo...

SELECT MEDICAL HOLDINGS CORPORATION … Medical Holdings...

Republic of Palau Corporation...

SETECS System June 1999 SETECS SETECS System: Security...

SUPERVISOR: DR. ABDUL GHAFOOR COMMITTEE MEMBERS: DR. SEAD...

YTL CORPORATION BERHAD Corporation Berhad... · YTL...

Codex Corporation v. Milgo Electronic Corporation, Codex...

China Steel Corporation · China Steel Machinery...

DIRECTORS DIRECTING - GIPCA · DIRECTORS & DIRECTING ......

II t S OArt...

Harris Corporation v Federal Express Corporation