The PKI Lab at Dartmouth

1
The PKI Lab at Dartmouth
2
Dartmouth PKI Lab

• RD to make PKI a practical component of a campus
  network
• Multi-campus collaboration sponsored by the
  Mellon Foundation
• Dual objectives
• Deploy existing PKI technology to improve network
  applications (both at Dartmouth and elsewhere).
• Improve the current state of the art.
• Identify security issues in current products.
• Develop solutions to the problems.

3
Production PKI Applications at Dartmouth

• Dartmouth certificate authority
• Authentication for
• Library Electronic Journals (including OVID)
• Banner Student Information System
• Tuck School of Business Portal
• VPN Concentrator
• S/MIME email
• USB token authentication for ISTS LiveWire
  online exercise simulating a national cyber
  attack (300 participants from many companies and
  agencies, 200 USB tokens, multi-day exercise)

4
Development PKI Applications at Dartmouth

• Authentication for
• Wireless network
• Blackboard Course Management System
• Hardware tokens
• Digital signatures on documents and forms

5
Dartmouths Certificate Authority

• Dartmouth operates our own CA
• Self-signed root
• Requires our root certificate installed in
  applications
• Online registration using LDAP username/password
• Token registration will add picture ID check by
  authorized employee
• Sun iPlanet CA software
• Publish certificates to LDAP
• Revocation information via HTML CRLs, LDAP CRLs,
  and OCSP

6
Blatant Advertisement

• Please check out our outreach web at
  www.dartmouth.edu/deploypki (still growing, but
  already has a lot of useful information)
• We seek a few schools that we can assist as you
  deploy PKI credentials and applications for end
  users! It is an explicit part of our mission to
  directly assist as you in the planning/justificati
  on, implementation, and deployment phases. Mark
  Franklin and others from the PKI Lab can work
  directly and extensively with your team.

7
For More Information

• Outreach web
• www.dartmouth.edu/deploypki
• Dartmouth PKI Lab
• PKI Lab information
• www.dartmouth.edu/pkilab
• Dartmouth user information, getting a
  certificate
• www.dartmouth.edu/pki
• Mark.J.Franklin_at_dartmouth.edu