Por™cznie Cyfrowej To¼samo›ci Przegl…d rozwi…za„

  • View
    23

  • Download
    1

Embed Size (px)

DESCRIPTION

Poręcznie Cyfrowej Tożsamości Przegląd rozwiązań. Piotr Kluczwajd. Evolution of the digital identity. Level of legislative compliance. Voluntary and mandatory regulations. The digital divide. Companies’ level of compliance. Time toward binding eCommerce. ... a co z tożsamością ?. - PowerPoint PPT Presentation

Text of Por™cznie Cyfrowej To¼samo›ci Przegl…d rozwi…za„

No Slide Title»
»
»
Przegld rozwiza
Piotr Kluczwajd
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Evolution of the digital identity
Voluntary and mandatory regulations
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
... a co z tosamoci ?
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Typowe bolczki wspóczesnej Korporacji
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity - Referencje
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity
Over 2,000 customers
350 employees worldwide
Major achievements
Largest SSO deployment and eSSO market share leader
Largest deployment of tokens for consumer banking
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Our Vision for the Enterprise Market
What does this mean for our enterprise customers?
ActivIdentity brings strong authentication to any device (smart cards, tokens, password)
ActivIdentity solutions can be introduced into enterprises at any stage of the technology adoption, extending to both Windows as well as Solaris environments
ActivIdentity solution delivers optimum deployment flexibility by integrating with the customers’ existing infrastructure, including: directory, application, provisioning, and authentication method
To enable businesses to leverage a multi-function employee ID smart card as a single digital identity platform with scalable post-issuance credential and application updates
Vision
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Agenda
Kolejne kroki?
Kluczowe zagadnienia
Jak zarzdza?
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Znaczenie Cyfrowej Tosamoci - single „you” many „who are you?”
Logowanie
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Cyfrowa Tosamo - Wyzwania
Brak egzekucji polityk zmiany hase
Coraz wiksza liczba aplikacji wymagajcych uwierzytelnienia
Obnienie ufnoci w tosamo osób
Zwikszone koszty Helpdesk
Niemono przeprowadzania prawomocnych audytów
Obniona ze wzgldu na skal infrastruktury oraz rosnc frustracj uytkowników
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity – Rozsdny wybór
Proponowane podejcie
Jednokrotne logowanie do wielu aplikacji (SSO) z wymuszonym i zautomatyzowanym procesem zmiany hase
Dwuskadnikowe uwierzytelnienie oparte o silne algorytmy (PKI/SKI) implementowane na bezpiecznych urzdzeniach (tamperproof).
Zcentralizowane zarzdzanie oparte o usugi katalogowe oraz serwisy samoobsugowe
Integracja z komponentami infrastruktury (LDAP, RDBMS, provisioning, etc)
Szyfrowanie danych oraz podpis cyfrowy
Zgodno z regulacjami prawnymi oraz ze standardami
Ochrona dostpu zdalnego przez VPN / Web / WLAN
Prosta i szybka implementacja
Prostota i wygoda uycia
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Propozycja: integracja uprawnie (credentials)
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Poczenie dostpu logicznego i fizycznego
Logowanie
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Kluczowe elementy Zarzdzania Tosamoci (Identity Management)
Korporacja na zewntrz
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Agenda
Jak zarzdza?
Kolejne kroki?
Kluczowe zagadnienia
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity Enterprise Access Card
Secure
ActivCard Confidential
»
»
»
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Problem z zarzdzaniem hasami
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Problem z zarzdzaniem hasami - Bezpieczestwo
Bezpieczestwo jest równe ZERO
zapisywa hasa
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Problem z zarzdzaniem hasami - Koszty
Produkowanie kosztów Help Desk
Giga Research
$25 to $50 - koszt ponoszony przez organizacj na pojedyncze zgoszenie do helpdesku
zwizane z uwierzytelnieniem
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Zwielokrotnienie tosamoci
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Konsolidacja Uprawnie z SecureLogin Single Sign-On
Obszar zaufany
Wygoda
uytkowania
Redukcja
Zalegalizowany audyt
Konsolidacja uprawnie
Provisioning kont
Systemy Finansowe
Aplikacje Kadrowe
Systemy Biznesowe
Portale Korporacyjne
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
SecureLogin Single Sign-On
Uytkownik uruchamia aplikacj
System Finansowy
Wysoki poziom ufnoci identyfikacji
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
4) SecureLoginpobiera uprawnienia z LDAP
5) SecureLogin SSO otrzymuje uprawnienia (ID/pwd) z LDAP, a nastpnie przekazuje do aplikacji
2) Uruchomienie
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
Hasa s unikalne i niezsynchronizowane
Brak koniecznoci modyfikacji w aplikacji
Wsparcie dla wielkiej liczby aplikacji
Windows32
Sia rozwizania :
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
Uytkownicy nie musz zna swoich identyfikatorów i hase do poszczególnych aplikacji
Silne polityki hase konfigurowalne dla kadej aplikacji oddzielnie
Nawet jeli aplikacja nie posiada wasnej polityki!
Zapis hase na karcie kryptograficznej (4k/50)
Ochrona uprawnie uytkowników w katalogu (LDAP) z wykorzystaniem PKI
Generacja hase dynamicznych (OTP) z uyciem karty kryptograficznej
Logowanie hasem statycznym do stacji roboczej z uyciem karty kryptograficznej (non PKI)
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
Reset hasa uytkownika w LDAP blokuje dostp do danych SSO
Uytkownik musi poda passphrase eby uaktywni SSO
Kopiowanie danych SSO uytkownika na inny obiekt w LDAP powoduje blokad
Dane SSO s szyfrowane z wykorzystaniem 3DES/AES
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
Wymuszenie podania passphrase (konfigurowalne)
Moliwo zmiany hase z automatyczn synchronizacj przy kolejnym poczeniu z serwerem katalogowym
Wszystkie opcje SecureLogin s dostpne przy pracy zdalnej
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity SecureLogin SSO
Silna integracja z Active Directory, eDirectory oraz innymi serwerami LDAP pozwala na sprawne zarzdzanie SSO (Group and Policy Management)
Wsparcie dla ADAM
Sia rozwizania :
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
SecureLogin SSO – Co nas wyrónia
Bezwzgldne ROI
Zwikszone bezpieczestwo
2534.psd
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Standard Life
Increase Security of applications
Many financial applications not being properly protected due to poor password management practices
Increase User Satisfaction
RESULTS
Increased Security - Users are no longer writing passwords down and are able to use stronger, longer network passwords
Increased User Satisfaction - Users more satisfied with login experience, have seen productivity gains as well as dramatic drop in calls to the helpdesk for password resets.
Integrated into directory
Directory and provisioning integration provided substantial gains at the user provisioning level and reduced costs.
Number of password related Help Desk calls reduced from 23% to 6% for 7k users (from 11k entire population)
ActivCard Confidential
ActivCard Confidential
»
»
»
AAA Server
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Czynniki warunkujce wymagania
Zmiany w obszarze technologii silnego uwierzytelnienia:
Wygasaj patenty firm trzecich
Inicjatywa OATH pojawia si na rynku jako silna alternatywa dla rozwiza wasnych (proprietary).
Poprzez tworzenie otwartych standardów, OATH oferuje:
elastyczniejszy wybór urzdze uwierzytelniajcych
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Ja to dziaa ? — bez AAA Server
Uytkownicy potrzebuj dostpu zdalnego do zasobów korporacyjnych z domu, hotelu, kawiarni internetowych, etc.
Standardowe punkty dostpowe, takie jak firewall, oczekuj podania statycznych uprawnie (identyfikator/haso):
Sabe uwierzytelnienie
Punkt dostpowy
Zasoby Korporacyjne
Obszar chroniony
Uytkownik zdalny
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Jak to dziaa? — z AAA Server
Punkty Dostpowe (z interfejsem RADIUS lub TACACS+ interface) mog kierowa uwierzytelnianie zdalnych uytkowników do AAA Server (routing)
Zdalni uytkownicy zamiast hase statycznych uywaj hase jednorazowych (OTP) generowanych w oparciu o opatentowany algorytm ActivIdentity lub OATH
AAA Server „z pudeka” moe kontrolowa identyfikatory i hasa jednorazowe, aby w ten sposób uwierzytelnia uytkowników
AAA Server pozwala równie autoryzowa (authorization) i rozlicza (accounting) aktywno uytkowników zdalnych
Uytkownik zdalny
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity AAA Server
Autoryzacja (authorization) i rozliczanie (accounting)
Wsparcie kart kryptograficznych i tokenów
Koegzystencja kart PKI oraz kart non-PKI
Punkty integracji w przedsibiorstwie
Wykorzystanie korporacyjnego katalogu LDAP
Praca jako Proxy to serwerów firm trzecich (migracja od tokenów do kart kryptograficznych)
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Tokeny ActivIdentity
Prosty, atwy w uyciu, przeznaczony dla klientów serwisów detalicznych przy ochronie dostpu i zatwierdzaniu transakcji
One Token, KeyChain Token, Pocket Token
Przede wszystkim uywany w rodowiskach korporacji/przedsibiorstwa do ochrony dostpu do sieci, aplikacji oraz zasobów informacyjnych.
ActivIdentity Desktop Token
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
ActivIdentity AAA Server
Uwierzytelnianie Server Pool / Load Balancing
Wsparcie WiFi
Przekierowanie uwierzytelnienia
RADIUS, LDAP
Tryb uwierzytelniania
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
AAA Server - Co nas wyrónia
Tokeny nie trac wanoci
Szybka integracja z istniejc infrastruktur
atwa implementacja i administracja
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
British Telecom
“We were impressed by the richness of function, the simplicity of architecture and the total cost of ownership of the overall solution”
“This will provide our users with greater functionality and ease of use while allowing BT Exact, … , to leverage BT’s directory and RADIUS infrastructure, thus making significant cost savings on user account management.”
Ashok Patel, Strategy Manager,
Internet and Distributed Technology
Risk Management
NEEDS:
RESULTS:
DTG
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
HP
Costs – Less than previous vendor with more functionality
Scalability – Over 20 times more authentications per second
Ergonomics – Superior
Allows legacy RADIUS based apps to adopt PKI at their own rate, or not at all
PKI Problems Solved Using ActivIdentity
Shared or multiple systems – PKI credentials are on a secure, portable Smart Card
Certificates issued onto the Smart Card meet HP’s two-factor requirements.
— Alan Dundas, IT Security Architect
Cost Control
Bridge and Migrate
One infrastructure to handle both RADIUS authentication and PKI authentication
NEEDS
RESULTS
DTG
DTG
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Case Study : Alstom
"We replaced our legacy leased token deployment with ActivCard's secure remote access system… quickly reduced our administration costs by 75 percent.”
"ActivCard AAA Server quickly reduced our security infrastructure costs. It is the only system we found that plugs directly into our enterprise LDAP directory, which strengthens and centralizes the administration of identity credentials”
— Vincent Cremin,
Reduce Costs
Integrate with Identity Management
NEEDS:
RESULTS:
Expand over time
Start with remote access move to local login and PKI over time
ActivCard Confidential
ActivCard Confidential
Slide title text Lucida Sans 24pt Green Avoid running over two lines.
Slide body text Lucida Sans, Blue 22pt, 18pt, 16pt
Branding bar Keep clear for our company’s branding. Don’t add logos or graphics here.
Avoid placing content below this line.
Slide numbers are automatically generated
Agenda
Jak zarzdza?
ActivCard Confidential
»
»
»
ActivCard Confidential
Slide title text Lucida Sans 24pt…