Technical Presentation AIAC 2010-2011 Group 11. System Rationale System Architecture Secure Channel Establishment Username/Password Cartão Cidadão Digital.

Slides:

Advertisements

Similar presentations

Chapter 10 Encryption: A Matter of Trust. Awad –Electronic Commerce 1/e © 2002 Prentice Hall 2 OBJECTIVES What is Encryption? Basic Cryptographic Algorithm.

Advertisements

PKI Introduction Ravi Sandhu 2 © Ravi Sandhu 2002 CRYPTOGRAPHIC TECHNOLOGY PROS AND CONS SECRET KEY SYMMETRIC KEY Faster Not scalable No digital signatures.

Public Key Infrastructure and Applications

Confidential 1 Phoenix Security Architecture and DevID July 2005 Karen Zelenko Phoenix Technologies.

L8. Reviews Rocky K. C. Chang, May Foci of this course 2 Rocky K. C. Chang  Understand the 3 fundamental cryptographic functions and how they are.

Off-the-Record Communication, or, Why Not To Use PGP

Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown.

MAC Raushan. DES simple fiestel network 3131 PlainText Blocks 2*4=8bits 31 f f =0011 xor 0011=0000 = 0 f(r,k)=(2*r+k^2)%8 f(1,5)=(2*1+5^2)%8=3 xor 3 3.

ECE454/CS594 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2011.

Spring 2012: CS419 Computer Security Vinod Ganapathy SSL, etc.

CS470, A.SelcukCryptographic Authentication1 Cryptographic Authentication Protocols CS 470 Introduction to Applied Cryptography Instructor: Ali Aydin Selcuk.

Spring 2000CS 4611 Security Outline Encryption Algorithms Authentication Protocols Message Integrity Protocols Key Distribution Firewalls.

Internet and Intranet Protocols and Applications Lecture 9a: Secure Sockets Layer (SSL) March, 2004 Arthur Goldberg Computer Science Department New York.

1 Network Security Outline Encryption Algorithms Authentication Protocols Message Integrity Protocols Key Distribution Firewalls.

SECURITY IN E-COMMERCE VARNA FREE UNIVERSITY Prof. Teodora Bakardjieva.

Environmental Council of States Network Authentication and Authorization Services The Shared Security Component February 28, 2005.

Lesson Title: Introduction to Cryptography Dale R. Thompson Computer Science and Computer Engineering Dept. University of Arkansas

Introduction to PKI Seminar What is PKI? Robert Brentrup July 13, 2004.

Cryptography Basic (cont)

Spring 2002CS 4611 Security Outline Encryption Algorithms Authentication Protocols Message Integrity Protocols Key Distribution Firewalls.

BY MUKTADIUR RAHMAN MAY 06, 2010 INTERODUCTION TO CRYPTOGRAPHY.

Apr 22, 2003Mårten Trolin1 Agenda Course high-lights – Symmetric and asymmetric cryptography – Digital signatures and MACs – Certificates – Protocols Interactive.

Symmetric Key Distribution Protocol with Hybrid Crypto Systems Tony Nguyen.

Spring 2003CS 4611 Security Outline Encryption Algorithms Authentication Protocols Message Integrity Protocols Key Distribution Firewalls.

Laboratory for Reliable Computing Department of Electrical Engineering National Tsing Hua University Hsinchu, Taiwan Security Processor: A Review Chih-Pin.

Tanenbaum & Van Steen, Distributed Systems: Principles and Paradigms, 2e, (c) 2007 Prentice-Hall, Inc. All rights reserved DISTRIBUTED SYSTEMS.

Web services security I

Overview of Digital Signatures Introduction To Networks and Communications (CS 555) Presented by Bharath Kongara.

Announcement Final exam: Wed, June 9, 9:30-11:18 Scope: materials after RSA (but you need to know RSA) Open books, open notes. Calculators allowed. 1.

Chapter 3 Mohammad Fozlul Haque Bhuiyan Assistant Professor CITI Jahangirnagar University.

Secure Socket Layer (SSL)

E-Commerce Security Technologies : Theft of credit card numbers Denial of service attacks (System not availability ) Consumer privacy (Confidentiality.

每时每刻可信安全 1The DES algorithm is an example of what type of cryptography? A Secret Key B Two-key C Asymmetric Key D Public Key A.

Practices in Security Bruhadeshwar Bezawada. Key Management Set of techniques and procedures supporting the establishment and maintenance of keying relationships.

Cryptography Encryption/Decryption Franci Tajnik CISA Franci Tajnik.

Cryptography, Authentication and Digital Signatures

Introduction to Secure Sockets Layer (SSL) Protocol Based on:

© Oxford University Press 2011 DISTRIBUTED COMPUTING Sunita Mahajan Sunita Mahajan, Principal, Institute of Computer Science, MET League of Colleges, Mumbai.

Certificate-Based Operations. Module Objectives By the end of this module participants will be able to: Define how cryptography is used to secure information.

1 © 2005 Cisco Systems, Inc. All rights reserved. 111 © 2004, Cisco Systems, Inc. All rights reserved. CNIT 221 Security 2 Module 3 City College of San.

Security in Skype Prepared by Prithula Dhungel. Security in Skype2 The Skype Service P2P based VoIP software Founded by the founders of Kazaa Can be downloaded.

Middleware for Secure Environments Presented by Kemal Altıntaş Hümeyra Topcu-Altıntaş Osman Şen.

Tanenbaum & Van Steen, Distributed Systems: Principles and Paradigms, 2e, (c) 2007 Prentice-Hall, Inc. All rights reserved DISTRIBUTED.

Security Many secure IT systems are like a house with a locked front door but with a side window open -somebody.

1 CMPT 471 Networking II Authentication and Encryption © Janice Regan,

1 Thuy, Le Huu | Pentalog VN Web Services Security.

Secure Messenger Protocol using AES (Rijndael) Sang won, Lee

© Copyright 2009 SSLPost 01. © Copyright 2009 SSLPost 02 a recipient is sent an encrypted that contains data specific to that recipient the data.

SSL(HandShake) Protocol By J.STEPHY GRAFF IIM.SC(C.S)

1 Certification Issue : how do we confidently know the public key of a given user? Authentication : a process for confirming or refuting a claim of identity.

1 Chapter 7 WEB Security. 2 Outline Web Security Considerations Secure Socket Layer (SSL) and Transport Layer Security (TLS) Secure Electronic Transaction.

Secure Instant Messenger in Android Name: Shamik Roy Chowdhury.

IP Security (IPSec) Matt Hermanson. What is IPSec? It is an extension to the Internet Protocol (IP) suite that creates an encrypted and secure conversation.

Database Management Systems, 3ed, R. Ramakrishnan and J. Gehrke1 Database architecture and security Workshop 4.

Tanenbaum & Van Steen, Distributed Systems: Principles and Paradigms, 2e, (c) 2007 Prentice-Hall, Inc. All rights reserved DISTRIBUTED SYSTEMS.

The Secure Sockets Layer (SSL) Protocol

Key management issues in PGP

Security Outline Encryption Algorithms Authentication Protocols

Secure Sockets Layer (SSL)

e-Health Platform End 2 End encryption

Module 8: Securing Network Traffic by Using IPSec and Certificates

Security in Network Communications

The Secure Sockets Layer (SSL) Protocol

Public Key Infrastructure

Module 8: Securing Network Traffic by Using IPSec and Certificates

Lecture 10: Network Security.

Presentation transcript:

Technical Presentation AIAC Group 11

System Rationale System Architecture Secure Channel Establishment Username/Password Cartão Cidadão Digital Certificate Secure Functionalities Competence Verification Document Signature and Validation System Security Analysis AIAC Group 12

Client asked for a system who was able to: Verify a title or competency of a subject; Digitally Sign a document with a given Competency of a subject. All the communication and processes performed in a secure fashion CERTCOP was developed to address these (and more…) requisites AIAC Group 13

4

5 3 Modes Used: Username/Password Cartão Cidadão Digital Certificates Used with a slight modification in Web Server All modes based on EKE (Encrypted Key Exchange) At the end each entity has: Public/Private Key; Symmetric Session Key; Mutual Authentication Guarantees.

AIAC Group 16

7

8

9 One signature is generated for every message Provides Integrity, Freshness and Non-Repudiation The original message, along with the Signature, is ciphered with the Symmetric Session Key Providing Confidentiality and Authentication

AIAC Group 110 Competence Verification Document Signature and Validation

AIAC Group 111

AIAC Group 112

AIAC Group 113 To each signed document is generated the following signature: If the Document has a higher priority it is stored and verified by another system VERICOP This additional service can be billed at a higher price

AIAC Group 114 State of the art cryptographic algorithms and protocols used: AES (with 128 bits key and 10 encryption rounds) SHA-2 (256 bits) RSA (with 2048 bits key for certificate, 1024 for the transient key pairs) Adapted EKE Protocol Quite few practical attacks reported on those algorithms

AIAC Group 115 System Security is an important issue: Database Servers Isolation Credentials Management Firewall Configuration Users and Administrators security awareness is vital to the Security Neither Users nor Administrators should ever release their passwords to anybody

AIAC Group 116 Web Interface will be available in a future release; System design based on state of the art security technologies Great overall System Security Level Special care must be taken to the maintenance and operation procedures of the system