The PKI Lab at Dartmouth

Dartmouth PKI Lab R&D to make PKI a practical component of a campus network Multi-campus collaboration sponsored by the Mellon Foundation Dual objectives: –Deploy existing PKI technology to improve network applications (both at Dartmouth and elsewhere). –Improve the current state of the art. Identify security issues in current products. Develop solutions to the problems.

Production PKI Applications at Dartmouth Dartmouth certificate authority Authentication for: –Library Electronic Journals (including OVID) –Banner Student Information System –Tuck School of Business Portal –VPN Concentrator S/MIME USB token authentication for ISTS “LiveWire” online exercise simulating a national cyber attack (300 participants from many companies and agencies, 200 USB tokens, multi-day exercise)

Development PKI Applications at Dartmouth Authentication for: –Wireless network –Blackboard Course Management System Hardware tokens Digital signatures on documents and forms

Dartmouth’s Certificate Authority Dartmouth operates our own CA –Self-signed root –Requires our root certificate installed in applications –Online registration using LDAP username/password –Token registration will add picture ID check by authorized employee –Sun iPlanet CA software –Publish certificates to LDAP –Revocation information via HTML CRLs, LDAP CRLs, and OCSP

Blatant Advertisement Please check out our outreach web at: (still growing, but already has a lot of useful information) We seek a few schools that we can assist as you deploy PKI credentials and applications for end users! It is an explicit part of our mission to directly assist as you in the planning/justification, implementation, and deployment phases. Mark Franklin and others from the PKI Lab can work directly and extensively with your team.

For More Information Outreach web: Dartmouth PKI Lab PKI Lab information: Dartmouth user information, getting a certificate: