August 2004 Providing Industry-wide Security and Identity Management Solutions

Security is a process…That requires packaged solutions… Vision

Betrusted’s Solution Approach Betrusted’s Information Security Platform

Financial Services Case Study I:  Identrus Solutions –Host 80% of all Identrus Bank Infrastructures Managed Services –Provide Technical Resources to Citigroup –Manage RBS Registration Technology –CMS and SCMS Capabilities –Non – Identrus PKI Solutions Betrusted is a leading solution provider and system integrator for financial services market:

Healthcare Case Study II:  Consortium-owed company by six major healthcare health plans and providers in the Northwest U.S.  Single point secure entity for user registration and authentication providing access to all relying party’s portals.  Provides 15,000 healthcare professionals with secure access for clinical data from providers, claim data, eligibility, and benefits information from insurers.  Applicable throughout the U.S. healthcare community for secure access to PHI  Cost reduction: single registration & authentication process  Launched in August 2003; –over 2,000 organizations –registered 25 states –Over 70,000 transactions per month

Life Sciences Case Study III:  Goals –Common Standard for eSignatures –Secure e-Submissions to FDA –Secure access to application components –Compliant Bridge  Betrusted Practice –Outsourced PKI –Identrus Deployments –CA Bridge or Accreditation –eSignatures Solutions –PKI Suite –Trust Platform CA/RA –Global Secure Hosting Facilities –Directory Services –Internal Policy and Procedures –HIPAA & CFR Part 11 Assessment

Industry IDM Practice Basics  User Registration  Application Enablement  Document Management Solutions  Certificates and Credential Issuance –Identrus, Internal, Microsoft etc…  Card Management/Common Access Cards  Secure Hosting/Managed Services  Digital Signing –PDF, Word, Excel  Global Support

Betrusted User Registration  All Electronic/Web Enabled Process accessible globally  Provides Regional (or Global) Client Administrators Registration and vetting authority  Interface provides certificate management; i.e. revocation, suspension  User administered  Solution currently in production for major U.S. Healthcare Client and Identrus Participants

Betrusted Smart ID Successful industry deployments  Large corporations –Employee cards, secure portal sites  Financial institutions and insurance companies –Inter-bank clearing, corporate customer communication, online banking  Government –Document management, secure communication  Health Care –Health Professional Card, prescription processing  Telcos –Rights management, device security

Next Steps and Questions?

 fifth largest financial institution in the UK  22 million customers, UK's largest mortgage and savings provider  PBT 2002 £ 3,06 billion Identrus compliant multi-application solution Appendix-Case Study: HBOS  Challenge (overall) –Two applications right from the start: New BACS program and iCHOBS –Identrus compliance required –Number of users  Challenge (in particular) –Smart card personalization at central site for high volume roll-out –High volume authentication –Strict SLAs for Smart card delivery OCSP validation

Appendix-Case Study: HBOS  Method of Resolution –Roll-out multifunctional, Identrus compliant smart card –Online RA interface with Identrus compliant signing –Smart card personalization at Gemplus UK site Interface to PKI hosting site in Hamburg, Germany Roll-out of client packages, i.e. smart cards, reader, software in various package formats  Benefits and Prospects –HBOS wanted strategic security platform to leverage further applications –Install TC Smartcard Manager  Deployed Products –Identrus-compliant PKI –Professional Services –Third party products

 The Italian government is globally recognised as a pioneer in developing ‘eGovernment’ services for its citizens Enable the delivery of digital certificates on all electronic identity cards issued by the Italian Government Appendix Case Study: Italian Ministry of the Interior  Challenge (overall) –Facilitate the issuance of identity cards in accordance with Italian AIPA legislation –Maintain the current seamless process of card issuance  Challenge (in particular) –Issue a digital certificate to every identity card using the current authentication process –Integrate with all aspects of Government card issuance process –Ensure conformance with country regulatory environment Appendix

Appendix Case Study: Italian Ministry of the Interior  Method of Resolution and Deployed Products –PKI powered by UniCERT –Professional Services –Third party products  Benefits and Prospects –Enable the delivery of digital certificates on all electronic identity cards issued by the Italian Government while maintaining the same seamless process of card issuance as is currently the case –Enable Italian citizens in the usage of this electronic identity when accessing on-line Government services Appendix