?????????? -SafeNet iKey

1
?????????? -SafeNet iKey

• SafeNet China

2
??

• a. ?????/???????????
• b. ????????????
• c. USB????iKey??
• d. iKey?????????
• e. ????iKey???????

3
????????
4
???????

• 2003???,InfoSec?????Waterloo??????????????
  ??????

• 90 ??????????????????????!!
• 66 ?????????????
• 75 ?????????
• 66 ??????????????,??????????

5
????
?

• ????
• ????
• ????

????
???? ????
????
??
?
??
??
????
6
????????
?
??????, 64?IT??????????????? ??8 ???????????
?????
????
???? ????
????
???? ???? ????
??
?
??
??
????
7
?????????!!!
8
??

• a. ?????/???????????
• b. ????????????
• c. USB????iKey??
• d. iKey?????????
• e. ????iKey???????

9
?????????

• ??????????????????????????????????,????????????,
  ?????????
• ?? ?ATM??????????PIN?????????
• USB ???????iKey
• ????? iKey
• ????? iKey?PIN?

10
???????????

• ????????????????????,???????????????
• ??????????PIN????????????????????????
• ??????????????,???????????????????????????????????
  ????????,??????????????,?????????????????,????????
  
• ??????????????????,?? keystroke monitoring,
  social engineering, man-in-the-middle attacks,
  network monitoring, password cracking, key under
  the mat and IT staff abuse??.

11
??

• a. ?????/???????????
• b. ????????????
• c. USB????iKey??
• d. iKey?????????
• e. ????iKey???????

12
USB???? iKey1000/1032

• ???????????
• 8K (iKey1000) / 32K (iKey1032) ?????
• MD5 hashing ?? (??)
• X.509 ????
• 1024-bit RSA ?? (??)
• 64-bit ???????
• ??PIN???????
• ??????????? 
• ??????
• PKCS11 and Microsoft CAPI ???

13
USB???? iKey2032

• PKI?????????
• 32K ?????
• ASIC???????
• FIPS 140-1 level 2 ??
• ??PIN???????
• X.509 ????
• ????1024/2048-bit RSA??
• ?????????????
• ??????????
• PKCS11 and Microsoft CAPI ???

14
??? USB ????

• SafeNet SamrtCard M330
• 100 ?? iKey2032
• ?iKey2032 ??????????
• ????? API and Library
• ?????????

15
?????

• ?????????
• ?????
• ?????
• iKey
• ????
• ??????????????
• ????????????
• User PIN
• ?????????
• ????????????????
• ???????????????

16
??

• a. ?????/???????????
• b. ????????????
• c. USB????iKey??
• d. iKey?????????
• e. ????iKey???????

17
?????????
User ??? ????
iKey PIN
????
????
?? HMAC/MD5 ????
?? HMAC/MD5 ????
???????
?????
???
18
?????????
User ??? ??
iKey PIN
????
??
???
???? RSA??
??????
??/?? RSA??
?????
19
??iKey?????????

• ??????? MD5 / RSA ??????????????????
• ??????? (???????) ?iKey?????
• ???? (MD5??????) ????iKey?????????????????????????
  ????
• iKey????????
• iKey?PIN???????,????????????,iKey??????
• iKey???PIN??????????????

20
??iKey???
?
????
???? ????
????
???? ???? ????
??
?
??
??
????
21
??

• a. ?????/???????????
• b. ????????????
• c. USB????iKey??
• d. iKey?????????
• e. ????iKey???????

22
????

• ??iKey???????????
• ???????,??????????????iKey???
• ?????????????????
• ????????
• ???????????????

23
??PKI?????

• ?PKI?????iKey???????
• PKI???????,?????????????
• ??????(????CA)
• PKI?????????,????????????????
• ????????(????)?
• ????PKI???????(????????)?

24
???? (SSO)

• SSO ???????PKI????????PKI??
• SSO ??USB????????????????
• ????SSO????????????????????????????

??????? ????
SSO
??PKI??? ????
25
??

• iKey1000 ?? ?iGate???
• iKey2032 ???iGate???
• iKey1000?iKey2032????

26
??
???????????(Safenet?????) ?????
QQ59397770 ????13468700453 ????029-82249456
82249447 82255510 E-mail59397770_at_qq.com ????????
?62???????7D