Benutzerfreundlich, tiefe Betriebskosten und hohe Sicherheit. Warum sich diese Ziele nicht widersprechen müssen

Transcription

1 Benutzerfreundlich, tiefe Betriebskosten und hohe Sicherheit. Warum sich diese Ziele nicht widersprechen müssen Jean Paul Kölbl CEO IT-Secure.com AG Total access security

2 Heutige Situation Kostendruck auf neue Investitionen und Betriebskosten Neue Projekte müssen Effizienzsteigerung ausweisen können Benutzerfreundlichkeit muss gegeben sein, ansonsten Betriebskosten steigen. Zu viele inkompatible Produkte am Markt Abzudeckende Bereiche der sicheren Identifikation: Wireless LAN Boot-Protection für Labtops Remote Access über VPN Sichere Identifizierung für Logon und Applikationen Single Sign on, und, und. Zuverlässigkeit muss absolut gewährleistet sein Sind Sie Beta-Tester von Security Software?

3 Das wird geboten! Wireless Security Secure Single Sign On VPN Remote Access Secure Digital ID Smart Card Boot Protection Labtop SSL Client & Server Authentication MS Terminal Services & Citrix Metaframe

4 Und so sieht es aus!

5 Digital ID s (Certificates) Replacing all current user identifications by one certificate Based on private and public key pair signed by an authority From public provider SwissCERT Different vendors for your own PKI Entrust, RSA Keon, Microsoft CA You have to manage only ONE user identity Separation of authentication and authorization Digital ID

6 Smart Cards (Schlumberger) Take your Certificate with you Generates keys in a highly secure environment (FIPS140-1 L3) Protects keys even if Smart Card is stolen or lost Can be used to carry other credentials (building access, time control) USB-Interface implemented on chip reduces costs for reader Table or Token Model Either plug and play version or 32k Java enabled

7 Labtop Boot Protection Protects even before the system boots User is required to plug in token with digital ID Based on Smart Cards or Soft Token, encrypted with your digital certificate Additional disk encryption protects all of your data based on your digital certificate

8 Secure Single Sign On MS Login based on your certificate with Smart Card No more clear text passwords Possible through standard interfaces Needs active directory services All behaviour (token removal, forgotten token, etc.) can be centrally managed by policies Checks validity, revocation status, trust relation ship

9 Active Directory Integration ADS is ready to take on digital certificates Is accessible via LDAP Can be used to integrate 3rd party applications Acts as central repository for all MS applications

10 Secure with Outlook Digital certificate automatically published in the global address book Certificate ready application Check validity, integrity, revocation Encryption / Signing Policy centrally managed Virus Scanner compatible

11 MS Terminal Services or Citrix Metaframe USB-Port made available remotely Logon via Smart Card Fully encrypted Certificate is matched to a individual or groups

12 And what are the costs? SwissCERT digital certificate (opt) CHF Smart Card with Reader CHF Middleware COVE CHF Citrix Thin Client Authentication (opt) CHF Laptop Boot Protection (opt) CHF

13 Operating Costs reduction Your user will have only one password to access most of Your applications Reduction of forgotten Passwords One Security Service fits all (future Applications can relay on digital ID as Authentication-Service) Centrally managed credentials minimizes costs and risk! As per a survey of PricewaterhouseCooper/META each month 15% of the user base required a password reset.

14 Live demonstration; Q/A s

15 Fragen / Antworten Besten Dank für Ihre Aufmerksamkeit!