94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Section Slide DO NOT place photos or additional text boxes on this slide. Section Title Format Font: Arial Regular Size: 18 points Line Spacing: 24 points Before/After ¶ Space: 0 Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP Label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity OPACITY – secure and private contactless identity for the cloud Philip Hoyer – Senior Architect CTO Office 24 th September 2010
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Table of Content Privacy and the cloud, strongly proving identity with privacy –Business problem –Privacy problem –The cloud identity assurance trust chain Provide a high-level introduction into OPACITY –What is OPACITY –Use cases, what can we do with OPACITY –OPACITY modes of operation –Status and where can you find OPACITY Conclusion
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Business Problem User convenience is driving the increase in contactless applications –Tap and authenticate, tap & sign, leverage existing issued credentials from new service access terminals (e.g. iPad, mobile phones, etc)
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Business Problem For cloud services to encompass high security OMB LoA 4 services we need to be able to leverage strong credentials via the contactless interface –Potential to leverage existing estate of strong credentials such as PIV / CAC cards to access cloud services Convergence of all access (Cloud, Logical, Physical) from one credential set Market currently lack protocols (either commercial or via existing standards) which provide for cryptographically stronger, faster and more private contactless communication
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Privacy Problem Current contactless protocols leak Personally Identifiable Information (PIIs) Current contactless protocols do NOT authenticate that reader is genuine party Current contactless protocols are not cryptographically strong to last the next years
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. The cloud identity assurance trust chain Strong identity assurance is based on a strong security anchor (LoA 4) –Proof of identity happens based on at least 2 factors: –Something you have (Keys held in secure key store – FIPS certified) –Something you know (PIN to access keys) Identity transfer into the cloud via federation standards –SAML requiring holder of key assertion (need to access keys – see above) Cloud service requires non repudiation proof of identity – going back to security anchor –Signature of transaction approval or data using keys All via an unknown number of intermediaries and contact and potentially contactless interfaces
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. The cloud identity assurance trust chain – weakest link Security is only as strong as the weakest link: Currently the contactless interface!
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. What is OPACITY? Open Protocol for Access Control Identification and Ticketing with privacY A initiative to allow secure transactions over the Air OPACITY is designed to allow the removal of usage restrictions on contactless transactions. With OPACITY high performance security and privacy enhancements, sensitive or privileged information can now be exchanged over the air with assurance. A protocol suite of standard, open and generic protocols –NIST A compliant (FIPS enabled) and NSA suite B based (ECC, AES, etc) –Constitute a stable target (20/30 years) in terms of security –Covered by an Apache 2.0 license. Provided royalty free
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. OPACITY protocol technological breakthroughs 2 modes of operation: Forward Secrecy (FS) & Zero Key Management (ZKM) –FS: Full privacy, the response emitted by OPACITY recipient appears as ever changing, anonymous and random information over the air. The identity of the cardholder is never compromised with End-to-end protection even after the transaction or the session is completed –ZKM: Does not require storage of secret keys in terminals The protocol includes technological breakthroughs allowing: –Full privacy (no open usage if unique identifiers) and no identity leaks. –Speed and optimizations (persistent binding) –Security (Forward Secrecy). –Full mutual authentication between credential carrier and terminal –Simplicity of integration (one command/one response) –Simplicity of the Key Life Cycle management ( on chip key generation no secret key distribution, full PKI based)
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Use Cases – what can we do with OPACITY Strong authentication to cloud services via trusted terminals (desktops, laptops, tablets, phones and kiosks) –Use of secure messaging to provide an end-to-end protected path for identity proofing and cloud service transaction signing Strong authentication to desktops, laptops and kiosks for logical access –Use of secure messaging to provide an end-to-end protected path for document or transaction decryption and signature using a secure element or a smart card Strong authentication to the door or door controller for physical access –Return encrypted code in one fast contactless transaction –Use of end-to-end secure messaging to transport PIN or biometrics or PACS credential via a contactless communication Strong authentication and ticketing for transit applications
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Status and where can you find OPACITY Standardization : –Reviewed by NIST cryptography technology group A compliance –Contributed to ANSI GICS (INCITS B10.12) –ISO registered Published to SCA contributions-opacityhttp:// contributions-opacity Reference Implementation and specification – ( ): –Includes applet code and a SAM integrated within the terminal/client –All cryptography is implemented in the FIPS boundary of the SAM reference (as per NIST guidelines) facilitating and accelerating integration
94/156/174 sRGB Color Palette Values 227/114/34 68/105/125 94/156/ /166/ /198/ /179/ /158/94 108/136/ /198/ /191/ /225/ /204/158 Chart Accent Colors 1 – 6 Chart Accent Colors 7 – 12 (For charts, use colors in order of appearance. Colors will apply automatically.) Title Color 86/90/92 Body Text Color Add IP Classification Label to all Slides (See IP slide for more info.): 1.Go to the View menu, select Header and Footer. 2.In the Header and Footer options window, select the Slide tab, type the IP classification label required in the Footer field (see list at right), click Apply to All. Change an IP Label on a Slide Other Than the Slide or Title Master: 1.Go to the slide on which you want to change the IP label. 2.Go to the View menu, select Header and Footer. 3.In the Header and Footer options window, select the Slide tab, type the IP classification label required (see list at right) in the Footer field, click Apply. IP Classification Labels Confidential © 2009 ActivIdentity Confidential Restricted © 2009 ActivIdentity Confidential Restricted | (Modifier [See IP Classification slide for more instructions.] ) © 2009 ActivIdentity External Use © 2009 ActivIdentity DO NOT place slide content below this dotted line. All slide content should go below this dotted line. DO NOT use clip art. Slide Title Format Two lines max. Font: Arial Regular Size: 24 points Line Spacing: 26 points Before/After ¶ Space: 0 Body Text Format Font: Arial Regular Size: 18 points Line Spacing for basic body style: 24 points NOTE: Body, Bulleted, Table, and Graph text size may vary depending upon the amount of text on the slide, e.g., reduce font size if there is a large amount of text. Conclusion OPACITY allows for the first time a complete strong end-to-end (credential to cloud) trust chain over contact and contactless interfaces OPACITY allows secure contactless transactions without leaking personally identifiable information OPACITY is built from PKI cryptography approved for the next years OPACITY is contributed by Actividentity but is open source and free to use. For more information please contact Enjoy OPACITY to finally secure your sensitive transactions over the air!