15
PKI interoperability PKI interoperability and policy in the and policy in the wireless world wireless world

PKI interoperability and policy in the wireless world

Embed Size (px)

Citation preview

  • PKI interoperability and policy in the wireless world

  • AgendaWireless Trust ServicesWireless PKI TechnologiesWireless Security Deployments TodayInteroperability testing experienceCertificate issuance policiesUse of certificates by other parties

  • Trust in The Wireless WorldAuthenticationPaymentValidationWho are you?Can you pay?Can you prove it?

  • Wireless PKI TechnologiesDevice independent solutionsSIM Toolkit application (GSM)WAPWTLS class 2 todayWTLS class 3 2001I Mode SolutionsSSL from fall 2000Client Certificates in 2001?Future wireless standardsWAP Next Generation3G Wireless

  • SIM Toolkit ApplicationSIM ManagerSMSGatewayPhoneApplication ServerPrivatekeyAvailable today

  • Device Independent SolutionSMSGatewayPhoneSigning PortalApplication ServerAvailable today

  • WAP Gateway ArchitectureWTLSHTTP/SSLHTTP/SSLWirelessGatewayApplicationServers

  • WAP Gateway/Server CertificatesWAPWAP Server/GatewayWTLS certificateserviceCA Processing CenterPrivatekeyRootpublickeyAvailable today

  • WAP Client CertificatesWTLSWirelessGatewayApplicationServerMobileClientVeriSign OnSiteX.509 client certificatesPrivatekeyCA Processing CenterWTLS client authentication

  • OnLine-Issued WAP Client CertificatesWirelessGatewayApplicationServerPhone/WIMPrivatekeyCA Processing CenterX.509client certsCertificateIssuance(Carrier cert) PKI PortalWireless Client Certificate Issuing Capability in Trial 4Q00

  • Interoperability testing experienceTesting of WAP server certificates successfulProblems encountered:User interface issuesCertificate memory allocation issues

  • Certificate Issuance PolicyNeed a published policyValue of certificate depends on level of authenticationCertificate status needs to be publicly available

  • Use of Certificates by other partiesRevenue opportunity for wireless carriersProvide on line status of certificatesUse carrier issued certificate for mCommerce authenticationRequires a high level of trust in certificate issuer

  • SummaryInteroperability essentialSuccessful testing of WAP server certsRevenue opportunity for wireless carriers with wireless client certificates

    Interoperability essential for widespread adoption

  • Enabling Trust on the Wireless Internet