1 / 18

Introduction to Secure Messaging

Introduction to Secure Messaging. The Open Group Messaging Forum April 30, 2003. Agenda. Components of a Public Key Infrastructure (PKI) Roles and Responsibilities Certificate Authority Registration Authority Other Implementation Technical Activities Organizational Activities

Télécharger la présentation

Introduction to Secure Messaging

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Introduction to Secure Messaging The Open Group Messaging Forum April 30, 2003

  2. Agenda • Components of a Public Key Infrastructure (PKI) • Roles and Responsibilities • Certificate Authority • Registration Authority • Other • Implementation • Technical Activities • Organizational Activities • Inter-Organizational Activities

  3. Components of a PKI • Encryption: keys, algorithms and hash functions • Secure public key infrastructure (PKI), which supports key exchange • Software which supports secure messaging functionality (e.g. email-clients or plug-ins) • Policies, procedures and agreements to establish and maintain trust in the system • Optional: special devices e.g. a smart card and a smart card reader or an USB token

  4. Components of a PKI • Encryption • Symmetrical keys • Asymmetrical keys • Encryption algorithms • Digital Signatures • Hash functions • Optional Devices • Smart Cards • Biometric Devices • And more….

  5. Components of a PKI • Certificates • Certificate Policy • Certification Practice Statement • Relying Party Agreement

  6. Components of a PKI • Certificate Authority (CA) • Registration Authority (RA) - or - Local Registration Authorities (LRA) • Directory Service • Time Stamping (as an additional service)

  7. Certificate Authority Tasks • A CA has to generate the certificate based on a public key. • It links the certificate to a particular user. • It manages published certificates. • Lastly, a CA is part of cross certification with other CAs

  8. Registration Authority Tasks • A RA has two main functions: • To verify the identity and the statements of the claimant • To issue and handle the certificate for the claimant

  9. Directory Services • The directory service has two main functions: • To publish certificates • To publish a Certificate Revocation List (CRL) or to make an online certificate available via the Online Certificate Status Protocol (OCSP)

  10. Notary / Time Stamping • Time Stamping is a special service. • Time Stamping confirms the receipt of digital data at a specific point in time. • Time Stamping is used for contracts or other important documents where a receipt needs to be confirmed.

  11. Implementation • Successful PKI implementation requires: • Technical activities • Organizational activities • Inter-Organizational activities

  12. Technical Activities • Gather the technical requirements for a PKI solution and secure messaging software • Decide on whether to buy or develop • Select the hardware and software for the PKI solution and secure messaging solution • Install and test the system • Upgrade the network infrastructure and implement the selected solutions

  13. Technical Activities • Compile the requirements and come up with a concept of how to operate with and utilize keys: • Key generation • Key management • Distribution and exchange of certificate and private key • Key separation • Archiving of the certificate, and if necessary, the private key • Change and validation of certificate and if necessary, the private key • Manage the access to and representative use of the certificate and private key • Freezing and destruction of certificates

  14. Summary of Technical Activities

  15. Organizational Activities • Definition of Certification Practice Statement (CPS) • Development of a security concept for the CA and security policies • Actions in case of suspected or recognized compromise of the Private CA Key • Responsibility, representative regulation, storage, validity of Private CA Signing Key

  16. Inter-Organizational Activities • Relying Party Agreements • Policy Mapping • Establishing Trust Relationships • Exchange Root Certificates • Cross Certification • CA Bridging

  17. Conclusion • Successful PKI Implementation involves • Technical Activities • Organizational Activities • Inter-Organizational Activities The organizational and inter-organizational activities are the larger and the more critical part.

  18. Introduction to Secure Messaging The Open Group Messaging Forum April 30, 2003

More Related