Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Application for a Simple Device Authentication Framework: Device Authentication Middleware Using Novel Smart Card Software2006-10-26 Nara Institute of Science and Technology
  The proposed simple device authentication framework aims to provide device-oriented authentication and authorization mechanisms for non-PC Internet-ready information appliances. The purpose of the framework is to prevent device spoofing, and to restrict unauthorized access to the device in a future ubiquitous network. The author has developed the novel smart card software to achieve peer to peer device-oriented PKI authentication and authorization on the secure tamper-resistant smart card. The paper assumes that the smart card will be attached to a device such as an information appliance. This paper shows the prototype implementation of authentication middleware using the novel smart card software and the IKEv1 program. The IKEv1 program cooperates with our novel smart card software to achieve peer to peer production-level identity authentication for devices.

Tags: Software Development Tools		   
whitepaper Card Management System Integration Made Easy: Tools for Enrollment and Management of Certificates2006-09-01 Entrust
  Many organizations are turning to two-factor authentication solutions to verify the identities of users on their networks. A significant number of Entrust customers use Card Management Systems (CMS) to enroll users with certificates that are stored on smart cards or tokens. (Note that throughout this paper references to smart cards include both smart cards and other cryptographic tokens, such as USB tokens.) Using Entrust Authority Toolkits, CMS products can enroll users for managed or unmanaged certificates thereby helping to address a broad range of government and commercial enrollment requirements. This paper outlines tools developed within the Entrust Authority portfolio to facilitate easier smart card management system integration with Entrust products for both managed and unmanaged certificate solutions.

Tags: LAN - WAN		   
whitepaper Securing E-Mails With S/MIME and Smartcards in Exchange 20032006-07-11 TechGenix
  This paper will give a high level overview of the necessary steps to secure E-Mails with Outlook 2003 and Smartcards. The paper will explain how to implement secure e-mail messaging with Outlook 2003 and smartcards for the Exchange 2003 users. S/MIME deployment with smartcards and S/MIME Deployment via Soft Token (key and certificate stored on hard disk) are very similar. For both deployments certificates and keys will be used for e-mail encryption and e-mail signing. The main difference is where private keys are stored. If the person is using smartcards, the private key is stored on the smartcard and can only be accessed through the smartcard's PIN.

Tags: Authentication - Encryption, Office Suites		   
whitepaper TechNet Webcast: Implementing Multifactor Authentication Using Smart Cards (Level 300)0000-00-00 Microsoft
  User name and password combinations have typically been used to provide authentication and authorization to network resources. However, many users favor convenience to security, so they choose passwords that can be easily compromised. To address this issue, multifactor authentication uses a combination of components to provide secure access to network resources. These components include a device that the user has, such as a biometric characteristic or hardware token, and something the user knows, such as a Personal Identification Number (PIN). Smart cards are an increasingly popular form of multifactor authentication, and this webcast explains what one should consider when planning and implementing a smart card solution.

Tags: Security Administration, Authentication - Encryption		   
whitepaper The REAL ID Act: Why Real ID Cards Should Be Based on Smart Card Technology2006-07-01 Smart Card Alliance
  The Smart Card Alliance strongly recommends that smart card technology be adopted as the underlying infrastructure for state driver's licenses issued to comply with the requirements of the REAL ID Act of 2005 Smart cards have been proven to be the most cost effective and secure identity authentication and verification technology. They are already widely used for secure identification in both the public and private sectors, are based on international standards, can provide all of the features required to meet the security requirements of the REAL ID Act, and can deliver strong privacy protection for the cardholder's personal information.

Tags: Authentication - Encryption		   
whitepaper Smart Cards0000-00-00 Microsoft
  Smart cards are a key component of the public-key infrastructure that Microsoft is integrating into the Windows platform because smart cards enhance software-only solutions, such as client authentication, logon, and secure e-mail. The Microsoft Windows operating system platform is smart card - enabled and is the best and most cost-effective computing platform for developing and deploying smart-card solutions. Smart-card requirements have been incorporated into the PC98 and NetPC design specifications and into future releases of the Microsoft Windows operating system.

Tags: Server Platforms - OS, Authentication - Encryption		   
whitepaper On Similarities Between SOA-Based Web Service and Smart Card Application for Ease of Understanding and Securing the Former2006-04-25 Shijiazhuang Railway Institute
  This paper is to leverage familiarity with smart card application, i.e. understanding and practical experiences of implementing trustworthy smart card application, to uncover secret veil surrounding the SOA-Based Web Services, and further develop and implement effective strategies for achieving trustworthy Web Services. Aspects being compared, of smart card application and SOA-Based Web Services, include architectures, transmission models, needed security services, and essentials of achieving trustworthy applications. At last, the contemporary strategy, i.e. WS-Security, are introduced and explained for achieving trustworthy SOA-Based Web Services. Especially, its token services for attestation & authorization, and its cryptographic services for data confidentiality & integrity are detailed.

Tags: Authentication - Encryption, Internet and Web		   
whitepaper wHospital: A Web-Based Application With Digital Signature for Drugs Dispensing Management2006-04-23 Politecnico di Milano
  wHospital is the result of an information technology research project, based on the utilization of a web based application for managing the hospital drugs dispensing. Part of wHospital back bone and its key distinguishing characteristic is the adoption of the digital signature system, initially deployed by the Government of Lombardia, a Northern Italy Region, throughout the distribution of smart cards to all the healthcare and hospital staffs. The developed system is a web-based application with a proposed Health Records Digital Signature (HReDS) handshake to comply with the national law and with the Joint Commission International Standards. The prototype application, for a single hospital Operative Unit (OU), has focused on data and process management, related to drug therapy.

Tags: Authentication - Encryption, Software Development Tools		   
whitepaper Stealth MXP: Comprehensive Digital Identities in One Device2006-04-06 MXI Security
  Security tokens have been used for strong authentication of individuals to systems. They have traditionally come in many forms including smart cards, USB keys, biometric readers, and one-time-password devices. Despite the multitude of capabilities and form factors of tokens that have appeared in the market they have all been limited in capacity, application and portability, which poses serious obstacles when facing today's new digital identity requirements. MXP is the first technology of its kind that has the manifold identities, strong authentication, large capacity, flexibility, security and portability to meet the needs of existing systems and the rapidly evolving demands of the identity management and information security industry.

Tags: Authentication - Encryption, Authentication - Encryption		   
whitepaper RFID: Security, Privacy, and Good Public Policy - Part 2 of a 2 Part Analysis2006-02-01 American Electronics Association
  Radio Frequency IDentification (RFID) is an emerging technology that is often misunderstood. Critics often downplay the benefits of RFID while exaggerating its risks to personal privacy and security. The tech industry is as concerned as anyone about securing the integrity of personal information. Without a secure system, RFID technology garners mistrust, and that is bad for business. RFID already meets the stringent requirements of securing personal information, and in many ways can do so much more efficiently than other technologies. This paper delves into the specific security, privacy, and policy concerns associated with widespread usage of RFID.

Tags: Authentication - Encryption, Mobile and Wireless