Public Key Infrastructures and mCommerce

1
Public Key Infrastructures and mCommerce

• Baltimores offerings for wireless technologies

2
Device Revolution

• 4 Mobile Phones to every PC worldwide

• Huge growth in network ready PDAs

3
WW Internet Subscribers, 1999-2004
Source IDC, 2000
4
Whats Happening?

• Connectivity Revolution
• WCDMA, GPRS, EDGE, HSCSD, Bluetooth, WLL
• Wireless Application Protocol (WAP)
• Device Revolution
• Personal, hand devices, rather than corporate
  desktop devices
• e-pliances, Communicators, Smartphones, Pagers
• Consumer Revolution
• E-Commerce now accepted, suitable for certain
  type of shopping
• Not reaching all consumers
• Wireless Mobile Consumer systems
• New activities not previously viable (e.g. buying
  tickets)
• Very much dependent on ease-of-use and ubiquity
  of cellphones

5
What the Analysts are Saying

• There will be 21.3 million mobile data users in
  the U.S. by the end of 2001.
• Yankee Group, Dec. 1999
• About 95 percent of smart phones shipped to the
  United States and Western Europe in 2003 will be
  Wireless Application Protocol (WAP)-enabled and
  70 will have Bluetooth technology.
• Strategy Analytics, June 1999
• The number of users of browser-enabled mobile
  phones will soar from 1.1 million this year to
  79.4 million in 2003, whereas Internet-capable
  PDA users will only increase from 5.2 million to
  12 million in the same period of time.
• Jupiter Communications, Nov. 1999

6
Securing the Wireless World
Wireless esecurity will extend Public Key
Infrastructures to mobile users
7
WTLS Security is PKI based

• Encrypted Session Communications
• Digital Certificates for client/server
  authentication
• Data Integrity assured

PKI System
8
Which certificates do I use for authentication?

• WAP gateways/server need to provide WAP
  certificates for authentication
• Need to obtain WTLS certificate
• Web servers use X.509
• the same ones they use today
• Mobile users use X.509
• Wireless PKI

9
Baltimore Telepathy Product Suite

• Baltimore Telepathy WAP Security Toolkit
• Baltimore Telepathy WAP Security Gateway
• Baltimore Telepathy WAP Certificate Authority
• Baltimore Telepathy WAP Certificates
• Baltimore Telepathy PKI Registration System
• Baltimore Telepathy PKI Validation System
• Baltimore Telepathy Digital Signature Toolkit

10
Baltimore Telepathy WAP Solution
11
Conclusion

• Public Key Infrastructures can be extended to
  protect and enable mobile commerce
• A centralized security infrastructure reduces the
  cost of managing security