PKI and Killer applications

Transcription

1 PKI and Killer applications Egypt Trust and PKI Vision. Security functions enabled by PKI. Egypt Trust successful projects Middle east successful implementations. PKI as an enabling technology Conclusion.

2 Egypt Trust Established in May One of three CSPs in Egypt. VeriSign Affiliate since % owned by Government entities. Middle east specially gulf area market. ISO certification. Issue VeriSign commercial certificates and legally binding digital certificates. PKI and Security consultation.

3 Our Mission to provide integrated solutions that will facilitate speedy and verifiable e-transactions boost the pace of executing business in Egypt, Africa, and the Middle East in a secured manner. We secure, verify & validate e-transactions We provide security assessments We simplify validation & verifications of e-transactions We deliver cost effective security solutions

4 PKI Vision The origins of PKI have been around since shortly after 1976 when Whitfield Diffie and Martin Hellman published their foundational paper on public key infrastructure entitled New Directions in Cryptology. The RSA Public key infrastructure cryptosystem was the earliest implementation At last, they thought, we have a technology that the world can use to resolve the identity of the intangible person on the other side of the Internet. Encrypt sensitive data for transmission over the wire. Ensure transaction integrity with a personal signature mechanism.

5 Security functions enabled by PKI. Validating user and server authentication credentials. Signing and validating electronic forms in an Internet-based process. Verifying posted credentials of web-based components. Encrypting documents and data files containing sensitive and confidential Information. Authenticating users through a single sign on portal to a protected environment.

6 PKI in Egypt 2004 digital signature law Egypt Root CA is ready All CSP ready to present PKI is used in IT security but no single killer application. Future: building managed and centralized digital trust services.

7 Egypt Trust successful projects Egyptian Tax Authority for online tax payer application. (300,000 users) Securing stock exchange online trade with brokerage companies. (100,000 users) Internet Banking for consumer and corporate. SSL and PKI consultation (Kuwait and Saudia). Authentication services for enterprises. Mobile Signing pilot project. Smart health pilot project

8 What Is A Killer Application? How do we measure the success of PKI: Number of people using PKI? Number of applications using PKI? Number of organizations using PKI? Amount of money protected by PKI systems? Amount of money made by PKI providers?

9 Middle east successful implementations. Building PKI Infrastructure (Root CA, CAs and RAs) Implementation for Gov online services using PKI Building Centralized and managed Digital Trust services. Digital signature and electronic transactions laws. Digital Identity and Smart passport. Tunisia, Egypt, Saudia Arabia, Kuwait, Oman, Qatar and UAE.

10 Middle east successful implementations.

11 Middle east successful implementations. Tax Authority, Smart health and other online Gov services. Internet Banking. Authentication services (VPN, Domain,..). Securing s and other files. Document Management System and other Apps. E-archiving and mobile signing coming in near future.

12 Conclusion There is no single killer application for PKI. Considerations The security assurance of PKI is needed. The cost of PKI is justifiable. The overhead of PKI is justifiable. Easy to use and operate. Easy to deploy regardless of system platform and architecture. Easy to integrate with different application and end user interfaces.

13 Thank You