Hosting News
Entrust EAC ePassport PKI Operates 'Flawlessly' at Prague, Leveraging Slovenia and UK Infrastructure
September 18, 2008 |
|
Entrust demonstrates perfect PKI certificate exchange for EAC
interoperability test across multiple countries and vendors
DALLAS, Sept. 18 /PRNewswire-FirstCall/ -- At a key interoperability test
for second-generation ePassports in Prague last week, Entrust, Inc. (NASDAQ:
ENTU) demonstrated a successful public key infrastructure (PKI) certificate
exchange using United Kingdom and Slovenia systems in a multi-country test
environment. Showcasing a "point-and-click" PKI system, Entrust confirmed that
the security infrastructure for second-generation ePassports, based on Extended
Access Control (EAC), is truly ready for global deployment.
"We didn't go to the Prague tests to get the PKI certificate exchange mostly
right. We went with the goal of achieving a perfect score; and that's what we
did," said Entrust Chairman, President and CEO Bill Conner. "As only two of four
countries that signed up for all four PKI tests, we were extremely proud of our
customers -- Slovenia and UK -- for stepping up to the plate and helping us
demonstrate a flawless execution of our EAC PKI offering. That they had the
level of confidence in our PKI to execute the tests for the world to see is a
testament to our team and EAC."
Taking place over five days, one of the key objectives of the Prague tests was
for European countries to prove the standards conformance of their ePassports
containing fingerprint biometric data protected by EAC functions. A second
objective was to verify crossover interoperability between EAC inspection
systems and ePassports from different countries.
"We are pleased to have been able to team with Entrust to provide 'end-to-end'
second-generation ePassport capability for Slovenia," said Bob LaPenta, founder
and chief executive officer of L-1 Identity Solutions. "This is a critical step
in the evolution and testing of government credentials utilizing more secure
biometric and certificate capabilities. Our integration and interoperability
results speak for themselves."
In addition to standard conformance and crossover interoperability, the tests
were the first organized attempt to verify EAC PKI operation in accordance with
the European Union Certificate Policy, including bilateral exchange of EAC
certificates. Twelve of the 27 participating countries completed the first PKI
test round, and four countries participated in all four phases of the PKI
testing, demonstrating a complete end-to-end system.
While all twelve countries demonstrated certificate exchanges with multiple
country certificate authorities, United Kingdom and Slovenia completed the four
PKI test phases, as well as targeted exchanges with all 12 countries. As part of
the event, Entrust also demonstrated integration with leading ePassport
equipment vendors, including L-1, 3M and G.E.T.
"Participating in the Prague event helped us demonstrate our leadership by
moving to second-generation ePassports," said Bojan Trnovsek, general director
of the Internal Affairs Direktorate at the Slovenian Ministry of Interior.
"Entrust is a leader in the public key infrastructure (PKI) technology that
helps strengthen and secure the foundation of our ePassport environment, and
we're eager to realize the capabilities of this second-generation ePassport
standard."
Facilitated by a consortium of the European Commission, Brussels
Interoperability Group (BIG) and the European Commission Joint Research Centre,
the Prague tests allowed European countries to verify conformance of their
second-generation ePassports containing fingerprint biometric data protected by
Extended Access Control functions, commonly referred to as EAC. Additional
testing included verification of crossover interoperability between EAC
inspection systems and ePassports from different countries.
"The rigorous testing in Prague was a critical step in the European deployment
of second-generation ePassports," said Chairman of the Brussels Interoperability
Group, Bob Carter, who also represents the United Kingdom Identity and Passport
Service. "All countries that participated in this first test of the Extended
Access Control PKI infrastructure successfully completed the tests, and with
that success, the vision for an EAC-enabled ePassport deployment is becoming a
reality. Entrust's PKI operated flawlessly last week, and it will serve as a
strong security foundation for our deployment of EAC- enabled ePassports."
Countries are beginning to evolve their ePassport programs to the second
generation, which includes enhanced security and privacy capabilities. European
Union (EU) member countries are required to add advanced biometric data to their
machine-readable travel documents (MRTDs) by June 2009.
"Getting any security implementation right takes the concerted effort from many
dedicated experts, and that was amply demonstrated by the unprecedented
cross-jurisdiction trust management at the heart of the EAC standard," said
Conner. "Stringing together a few open-source components without extremely
careful consideration can result in a dangerous implementation. We are in our
eighth generation of our core PKI offering. As a result, our EAC PKI product has
evolved to point-and-click usability and is ready for prime time."
The terrorists of 9/11 modified paper passports to cross borders while traveling
into the United States. This highlighted the need for a more secure passport. In
moving to electronic passports, the International Civil Aviation Organization (ICAO)
touted two primary goals: to ensure a forged or modified passport could not be
used to cross borders and to prevent a criminal from impersonating the holder of
a genuine passport.
Created to mitigate passport forgery, first-generation ePassports place a simple
biometric (typically a facial photo) along with a duplicate of the identity
information contained in the paper document on an RFID chip and protect it using
Basic Access Control (BAC). Entrust provides the digital signatures on BAC
ePassports that prevent a modified passport from being used to successfully
cross a border if properly processed.
The second-generation of ePassports, based on Extended Access Control, allows
governments to leverage a stronger biometric (typically a fingerprint or iris
scan) that is more difficult to impersonate. They require the passport reader to
authenticate itself to the chip, thereby preventing 'skimming', the practice of
an unauthorized reader interrogating the chip and extracting sensitive personal
information. EAC ePassports also strengthen the encryption of the communication
between the chip and the reader; thereby preventing eavesdropping of the
biometric data.
Because of the requirement for the chip to authenticate the reader, the PKI
requirements are much higher, demanding a vendor that can provide scalability,
reliability and unprecedented performance. It is this PKI foundation that allows
ePassports to be read at border stations, but not by criminals who may seek
access to the data for purposes of manipulation or impersonation.
Entrust has a long history of providing security software and services to
government agencies across the world. Entrust provides security solutions for
e-government and national security initiatives in more than 30 countries
worldwide. Government agencies are leveraging the flexible and scalable
solutions that Entrust offers to secure transactions and information internally
and with citizens, businesses, suppliers and contractors.
The top e-governments in the world rely on Entrust. As ranked by Accenture, the
top seven e-governments in the world, including Singapore, Canada, the United
Kingdom, the United States, Denmark, Sweden and Norway, use Entrust solutions to
protect sensitive information and enable secure online services.
About Entrust
Entrust [NASDAQ: ENTU] secures digital identities and information for consumers,
enterprises and governments in more than 1,700 organizations spanning 60
countries. Leveraging a layered security approach to address growing risks,
Entrust solutions help secure the most common digital identity and information
protection pain points in an organization. These include SSL, authentication,
fraud detection, shared data protection and e-mail security. For information,
call 888-690-2424, e-mail
entrust@entrust.com or visit
http://www.entrust.com/.
Entrust is a registered trademark of Entrust, Inc. in the United States and
certain other countries. In Canada, Entrust is a registered trademark of Entrust
Limited. All Entrust product names are trademarks or registered trademarks of
Entrust, Inc. or Entrust Limited. All other company and product names are
trademarks or registered trademarks of their respective owners.
Photo: NewsCom:
http://www.newscom.com/cgi-bin/prnh/20060720/NYTH074LOGO
AP Archive: http://photoarchive.ap.org/
PRN Photo Desk,
photodesk@prnewswire.com
SOURCE: Entrust, Inc.
CONTACT: Michelle Metzger of Entrust, Inc., +1-972-713-5866, mobile,
+1-214-682-7559, michelle.metzger@entrust.com
|
Click here for more information |
ASP Hosting Companies
 | EnergizedHosting offers reliable Dedicated hosting!
No Set UP Fees or Hidden Charges
Our Dedicated Servers Are the Best In the Industry
Affordable Prices – Starting only $99 a month
Top notch support with all plans
Limited Time receive 1st month half off! |  |  | GalaxyVisions
• Tier1 Bandwith Providers
• Fedora, CentOS, Windows OS
• CPANEL/WHM, Plesk Control Panels
• Personalized MRTG Graphs and RPC Reboot
• Managed Server
• 24x7 Phone Support Monitoring
Visit www.GalaxyVisions.comFor more Specials
| |  | Windows Dedicated Servers
Full Line of Windows Dedicated Servers!
FAST Windows Virtual Servers using Virtual Server 2005!
Both Loaded with over $2,000 in Software!
Fully Secured and Configured!
Call us today at (800) 317-8552!
| |  | 3 MO. FREE/NO SETUP FEES – ASP/.NET Hosting w/ ASP.NET 3.5!
Award Winning ASP/.NET Hosting now offering ASP.NET 3.5. Classic ASP & ASP.NET (all versions) w/ real time ASP.NET Version Chooser. ASP.NET AJAX, LINQ, & Silverlight Ready. Scheduled Tasks, MS SQL 2005 w/ Real Time Back up Tool, FREE MS SQL Management Tool Suite & More!! | |  | 1000MB disk space. US$7.65 per month. ASP ASP.net PHP.
Exa-Bytes specialize in quality Web Hosting solutions at affordable prices, along with the best technical support and customer service in the industry, Exa-Bytes provides custom solutions for your personal and business Internet needs. | |  | 3SHost.com
3SHost provides Unmetered Bandwidth ,Lowest prices, CentOS & Windows
2003,CGI,PHP,PERL,SSI,MYSQL, SQL 2005,ASP,.NET
2 ,DotNetNuke4,Frontpage 2003 ,CPANEL10(Linux)& Inspanel(Windows),24/7
Technical Support, No setup fee. | |  | Nevidia Hosting is now offering $3.50 Windows hosting that includes FREE setup. With a 30-day unconditional money-back guarantee, 24/7 technical support, and a 99.9% uptime guarantee, it has never been easier to put your website online. :::Featuring :: ASP, PHP, ASP.NET, FrontPage, Webtrends Live! Statistics, webmail, control panel, MS Access, mailing lists, dedicated IP, daily backups, and much much more! | |  | Since 1996 ActiveHost has been dedicated to offering advanced ASP and ASP.NET hosting services. With a proven track record of surpassing client expectations time and time again, ActiveHost has grown to a world leader in advanced Microsoft based hosting. Because we are focused on the developer in leveraging state-of-the-art technology and superior customer service, we provide one of the best values available in the hosting industry. Being a Microsoft Certified Partner and a Microsoft Web Presence Provider we fully support all of Microsoft e-business technologies. We like what we do and it shows! Plans start at $14.95. | |  | Switch to SingleHop's Windows Dedicated Servers and get $200 Cash
Back!
SingleHop Dedicated Servers - Get $100 For Signing Up, $200 for
Switching From ANY Competitor | |  | Hostway Virtual Private Servers (VPS) - Dedicated server hosting at a fraction of the cost. For Developers, Resellers and Systems administrators, it delivers performance, security and flexibility. Ideal for processor intensive applications or hosting multiple domains. Root and managed options. Full administrator access through Plesk Control Panel. Linux, Suse or Fedora Platforms, open source tools and software, 10Gb Disk, 50Gb Traffic. From £49.95 a month. 300,000 satisfied customers worldwide, Hostway - hosting the way you want it.
Simple, reliable, cost-effective ASP hosting.
Hostway’s ASP driven solutions include support for ASP3 & ASP.NET v.1.1, with MSSQL, MS Access, Advanced Website Tools & Analytics (Urchin), STM1 connectivity, Daily Data Backup and 99.9% Network uptime. All this and the most functional control panel around. Shared solutions from £8.95/mth, see our website for dedicated pricing. The No.1 Global Hosting Provider. | |  | Being the choice of the best web hosting review sites 100mostdynamic.com stands to prove that our wow-fast 24/7 helpful customer support, the variety of features and the flexibility in custom hosting plans makes us one of the most reliable and user-friendly hosting solutions.
Features: ASP with great variety of components, ASP.NET, PHP, Perl, FrontPage, HELM control panel, Advanced Statistics, MS Access, MS SQL, MySQL, webmail, mailing lists, daily&weekly backups, and much more..
30-day money-back guarantee, standard plans start at $6.95. You can also design your own custom hosting plans. | |  | World class servers at world beating prices!
eSecureData.com, a leading data center in the industry, offers super-servers and generous amount of bandwidth in the industry US$149/month with no setup fee. Choose from Windows OR Linux OS.
| |
|
Feature Host
SingleHop
We Manage IT Differently
|
