European Electronic Signature Standardization Initiative Meeting

1
(No Transcript)
2
European Electronic Signature Standardization
Initiative Meeting
3
GlobalSign

• GlobalSign is a certification network
• GlobalSign has Certification and Registration
  Authorities in Austria, Belgium, Greece, Ireland,
  Italy, Lebanon, Luxembourg, Turkey and the United
  Kingdom
• GlobalSign is a privately owned company,
  shareholders are NetVision, KBC, GIMV, Technicom,
  Bruficom and National Federation of Belgian
  Chambers of Commerce and Industry

4
Products Services

• Personal Digital Certificates
• GlobalSign Class 1 Demo Certificates
• Demonstration purposes
• No liability
• Free!
• GlobalSign Class 2 Certificates
• Transactions involving limited value
• Liability up to 2500 EURO
• 19 EURO/year
• GlobalSign Class 3 Certificates
• Transactions involving high/legal value
• Liability up to 37500 EURO (higher upon demand)
• 60 EURO/year

5
Products Services

• Secure Server Certificates
• Authentication organisation servers
• Liability up to 37500 EURO (higher upon demand)
• 210 EURO/year
• Object Publishing Certificates
• Authentication digital objects (software, etc.)
• Liability up to 37500 EURO (higher upon demand)
• 305 EURO/year
• Enterprise Suite
• Virtual Certificate Authority for organisations
• GlobalSign Registration Authority for
  organisations

6
Applications

• All PKI client applications supporting x509v3!
• Electronic signatures specifically
• Mail
• Netscape Messenger, Outlook Express, Outlook 98,
  Lotus Notes v5, Utimaco SignCrypt, SSE
  TrustedMIME, Baltimore MailSecure, Celocom Mail,
  
• Transaction
• Netscape Form signing, Celocom Web, UWI Forms,
  SET, SSL/TLS (Internet Explorer, Netscape
  Navigator, Opera, ), ...
• Authentication
• Netscape Object Signing, Microsoft Authenticode,
  Adobe PDF Signing, SSL/TLS (Internet Explorer,
  Netscape Navigator, Opera, ), ...

7
Obstacles

• Legal
• Absence of common global ground rules (Liability
  for Cas? Legal value of certificates? Legal value
  of digital signatures? Legal acceptance of
  encryption?)
• Technological
• Underlying technological complexity
• Absence of globally accepted quality/security
  standards (Client applications, Server
  applications, Cryptographic hardware,
  Registration/Certification Authorities, etc.)
• Marketing
• Awareness/understanding certificates digital
  signatures

8
Standardisation requirements

• Globally accepted quality/security standards
• Protocols/Formats (SSL/TLS, SMIME, etc.)
• Industry standards (RFC, PKIX, PKCS, etc.)
• Cryptographic hardware
• Client applications
• Server applications
• Registration/Certification Authorities

9
International/Bilateral recognition

• International/Bilateral accepted legal base
  framework
• International/Bilateral accepted quality/security
  standards