1. Assuring e-Trust always www.certiver.com 1 Guaranteeing Electronic Trust at all times

2. Assuring e-Trust always www.certiver.com 2 Today's Agenda  Who is CertiVeR  Solutions from CertiVeR  CertiVeR – TACAR proposal  Questions

3. Assuring e-Trust always www.certiver.com 3 CertiVeR Mission Create and maintain an environment of consistent and constant trust in the use of digital signatures to promote wider acceptance and adoption of e-signatures at a lower cost.

4. Assuring e-Trust always www.certiver.com 4 Real Time Certificate Status Checking  Uses OCSP –Checks certificate validity in real time –No need for CRLs –Reduces costs Management overheads Communications costs –Minimises likelihood of invalid certificates being accepted Reduces fraud

5. Assuring e-Trust always www.certiver.com 5 CertiVeR Services Validation  OCSP Validation via CRL or OCSP database connection in real time. –Provision of enhanced OCSP responder –High Availability –Back up –Load Sharing –Automated Revocation

6. Assuring e-Trust always www.certiver.com 6 CertiVeR Services Enhanced Validation information  Certificate Status –Active, Revoked or Suspended –Multiple CA integration  Purpose of Certificate –Use of OCSP response extensions to disclose attributes of the user certificate or the Certification Authority policy. –Used for authorisation by applications to carry out specific functions or transactions Invalid Certificate

7. Assuring e-Trust always www.certiver.com 7 CertiVeR Services: Load Sharing, Backup & High Availability  Backup of your certificates database: –Backup in case of failure with security guarantee –Lower cost than if you were to do it yourself  High Availability: –Hot standby backup in case of failure –Load sharing or balancing –Ensure high availability and reliability –Guarantee performance levels

8. Assuring e-Trust always www.certiver.com 8 CertiVeR Services Automated Revocation  Automated certificate revocation module or application via voice and speaker recognition. –High Security, Liability and Reliability Biometrics user registration Speaker and Voice recognition integrated with revocation –High Availability, 24x7 –Outsourcing of service to CertiVeR

9. Assuring e-Trust always www.certiver.com 9 CertiVeR Services Optional Manual Revocation  Common Call Center for all CAs –Economies of Scale –Lower shared costs –More user friendly –High Availability, 24x7 Automated system may transfer problematic calls –Security provided through Secret questions A similar security level could also be provided via Web

10. Assuring e-Trust always www.certiver.com 10 CertiVeR Services - Outsourcing Certificate Status Database Management  Offload management  Reduce costs  Improve service  Enhance reliability  Increase accuracy  Raise level of trust and confidence

11. Assuring e-Trust always www.certiver.com 11 CertiVeR Services CA Certification  Creation of or assistance with CPS  Audit of CA in accordance with international and national norms –Legal requirements –Required by customers –Facilitates trust chains  CertiVeR Proof of Trustworthiness

12. Assuring e-Trust always www.certiver.com 12 CertiVeR Services Common Trust with Credibility  Certificate Authority Audit.  Establishment of Cross Trust with other CAs.

13. Assuring e-Trust always www.certiver.com 13 CertiVeR Services Trust Chaining  Establish trust chains between CAs based on CertiVeR certification  Eliminates islands of PKIs.  Facilitates universal acceptance of digital certificates  Encourages wider use of certificates  Generates more revenues for CAs

14. Assuring e-Trust always www.certiver.com 14 CertiVeR Cross-Trust How do you trust other CAs?  Chaining Trust –Cross-certification –Cross-validation  No more PKI Islands –Degree of Trust –Validity Time of Trust –Validity Period of Trust

15. Assuring e-Trust always www.certiver.com 15 CertiVeR Services Ready applications for digital signature  Provide tools and services to make applications PKI ready: –Already integrating GTK 3.9.4  Single validation access point for several CA,s  Provision of access APIs  Quality Control and post development support  Facilitate the rise of applications using digital signatures –Needing more than one certificate –Needing more than just certificate validation

16. Assuring e-Trust always www.certiver.com 16 CertiVeR – TACAR 1 st Proposal Revocation Administration done by CA CRL for User Certs synch CA Users, Grid Users, etc. CAs TACAR CA’s Root List CertiVeR Sites OCSP Responder Cert Status Database Revocation Module Publish Root Certs Revoke User Certs Revoke Root Certs OCSP Validation Request for TACAR’s Repository and hierarchies

17. Assuring e-Trust always www.certiver.com 17 CertiVeR – TACAR 2 nd Proposal Revocation Administration done by CertiVeR synch CertiVeR Sites OCSP Responder Cert Status Database Revocation Module CA Users, Grid Users, etc. CAs Publish Root Certs TACAR CA’s Root List Revoke Root Certs OCSP Validation Request for TACAR’s Repository and hierarchies Revoke User Certs

18. Assuring e-Trust always www.certiver.com 18 OCSP Signature Validation We offer two options: 1. Sign OCSP responses with a certificate trusted by all parties. 2. Sign OCSP responses with a certificate issued by the same CA hierarchy as the certificates whose status is being asked for.

19. Assuring e-Trust always www.certiver.com 19 The Business case for CertiVeR Annual cost assumptions included Service DescriptionDone byCost UnivCost SME Status CheckingYourself15,000€40,000 Back upYourself2,000€10,000 High AvailabilityYourself18,000€100,000 (Automated) RevocationYourself40,000€50,000 CA Certification3rd Party15,000€15,000 Trust ChainTACAR5,000€20,000 PKI Enablement/Appl.Yourself15,000€20,000 Total€ 110,000| € 275,000 Cost cover up to 10.000 users

20. Assuring e-Trust always www.certiver.com 20 The Business case for CertiVeR Annual cost assumptions included depending on degree of Administration Service DescriptionDone byCost Enhanced Status Checking (1)CertiVeR€20,000 Back upCertiVeR€5,000 High AvailabilityCertiVeR€20,000 Automated RevocationCertiVeR€30,000 CA CertificationCertiVeR€15,000 Trust Chain (included in (1))TACAR€0€0 PKI Enablement/Appl.CertiVeR€10,000 Total€100,000 Savings of €60,000 or 120% each site!!! Cost cover up to 10.000 users (1) Status Checking + Trust chain integration Discount Univ. 50% = 50,000€

21. Assuring e-Trust always www.certiver.com 21  The most cost-effective services offered The Basic services by CertiVeR Service DescriptionBy CertiVeR(50%)By Univers.Saving Enhanced status checking10,000 €20,000 €10,000€ User Revocations15,000 €40,000 € 25,000€ High Availability10,000 €18,000 €8,000€ TOTAL35,000 €78,000 €43,000 € TOTAL saving 43.000 €/year/site 123% over CertiVeR cost 55% over University cost

22. Assuring e-Trust always www.certiver.com 22  Chargeable services to your customers. –You get CertiVeR services for nothing! The Business case for CertiVeR Revenue opportunities Service DescriptionFee per operation Times/yearSaving Validations0.1€1.500.000150.000€ Revocations (annual cost)5 €/year/user 5.000 25.000€ Certificate replacement20 € 500 10.000€ Revenues covered by 5.000 users

23. Assuring e-Trust always www.certiver.com 23 Try now our demo at: http://www.certiver.com

24. Assuring e-Trust always www.certiver.com 24 Any Questions ?