Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Trust in real time for secure digital certificates

28.07.2006
Every day in the global electronic marketplace millions of transactions take place. Understandably all parties depend on the validity of digital certificates that underpin such transactions. Now a new service promises real-time certificate validation and revocation, a major step forward in terms of trust and security.

CertiVeR, a European research project under the eTEN programme, developed and launched a complete and decentralised service for certification authorities (CAs) and other users. The technology – a secure online certificate status information system – has resulted in a high performance, flexible service available 24/7 that validates and revokes digital certificates in real time.

“Now, users can be sure that the digital credential is secure and valid,“ explains Oscar Manso. “A digital certificate is like a passport. If it is stolen, it can be reported and cancelled, or revoked.”

CertiVeR offers a certificate validation and revocation service with the corresponding Online Certificate Status Protocol (OCSP) publication. This enables the user to verify the state of a specific certificate before executing any operation or transaction upon it. The system is available to any certificate authority in the world, but the consortium is focusing on Europe where the e-Signature Directive requires the provision of this service across all EU Member States.

The use of electronic signatures requires the verification of the signature policy, which includes the validation of all the certificates in the signer’s certification path. However, as Manso explains, the time between when a certificate may have been revoked and the time the new Certificate Revocation List (CRL) is released, could be significant.

A CRL is a list of certificates and their serial numbers that have been revoked, are no longer valid and should not be relied upon by any system user. For example, a certificate is revoked if the CA had improperly issued a certificate or if a private key is believed to be compromised. In the past, CAs did not use an online validation service, resulting in delays of up to one week.

“Because CertiVeR operates in real time, this security barrier is overcome,” he says. “CertiVeR can be connected to all CAs in Europe to refresh the status of certificates. Users can now have a single access point. Certificate revocation is easier and safer, which increases transaction confidence, and there is now a single phone number to revoke all certificates.”

CAs, both private and public, would profit from CertiVeR’s real time information. This level of service is far too complex and expensive to be run individually. Cost savings are realised as a result of the technical, managerial and R&D economies of scale.

CertiVeR establishes secure connection interfaces with the CAs to obtain identification information about a user. Several identification systems can be used to identify CA users, including voice biometrics. When a user wants to revoke a certificate, a call is made to the central revocation number. The automated call centre system tries to verify the identity of the caller through voice recognition technologies.

If the automated system is unable to verify the call, it is transferred to an operator who tries to determine the user’s identity by means of secret questions and general information stored. Once a user is validated into the certificate revocation system, the user can suspend or activate any certificates in real time.

CertiVeR’s online certification status information system was originally developed to fill the needs of the financial sector. A secure central repository for certificate revocation information creates and manages revocation documents and authenticates requests following the requirements of the ISO 10779 standard.

Twelve pilots at European and global level include three currently running that, according to Manso, are performing “very well”. A significant pilot ran with TERENA (Trans European Research and Education Networking Association) in The Netherlands. In this instance, the consortium created TACAR, TERENA’s Academic CA Repository, and worked on getting the appropriate root CA certificates needed by users’ browsers in a practical and cost-effective manner.

CertiVeR also participated in the production of open source tools and demo environments to promote the adoption of real-time validation environments at global level. The consortium is now targeting software developers to simplify the validation so they can create applications with a single point of access.

“Other end users can take advantage of CertiVeR’s infrastructure to validate and use their digital signatures for activities such as electronic bills and online transactions,” he adds. “The potential for B2B and B2C applications is huge.”

Manso expects a full-scale marketing effort to be launched this October.

Jernett Karensen | alfa
Further information:
http://istresults.cordis.lu/

More articles from Information Technology:

nachricht 'Building up' stretchable electronics to be as multipurpose as your smartphone
14.08.2018 | University of California - San Diego

nachricht New interactive machine learning tool makes car designs more aerodynamic
14.08.2018 | Institute of Science and Technology Austria

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: Unraveling the nature of 'whistlers' from space in the lab

A new study sheds light on how ultralow frequency radio waves and plasmas interact

Scientists at the University of California, Los Angeles present new research on a curious cosmic phenomenon known as "whistlers" -- very low frequency packets...

Im Focus: New interactive machine learning tool makes car designs more aerodynamic

Scientists develop first tool to use machine learning methods to compute flow around interactively designable 3D objects. Tool will be presented at this year’s prestigious SIGGRAPH conference.

When engineers or designers want to test the aerodynamic properties of the newly designed shape of a car, airplane, or other object, they would normally model...

Im Focus: Robots as 'pump attendants': TU Graz develops robot-controlled rapid charging system for e-vehicles

Researchers from TU Graz and their industry partners have unveiled a world first: the prototype of a robot-controlled, high-speed combined charging system (CCS) for electric vehicles that enables series charging of cars in various parking positions.

Global demand for electric vehicles is forecast to rise sharply: by 2025, the number of new vehicle registrations is expected to reach 25 million per year....

Im Focus: The “TRiC” to folding actin

Proteins must be folded correctly to fulfill their molecular functions in cells. Molecular assistants called chaperones help proteins exploit their inbuilt folding potential and reach the correct three-dimensional structure. Researchers at the Max Planck Institute of Biochemistry (MPIB) have demonstrated that actin, the most abundant protein in higher developed cells, does not have the inbuilt potential to fold and instead requires special assistance to fold into its active state. The chaperone TRiC uses a previously undescribed mechanism to perform actin folding. The study was recently published in the journal Cell.

Actin is the most abundant protein in highly developed cells and has diverse functions in processes like cell stabilization, cell division and muscle...

Im Focus: Lining up surprising behaviors of superconductor with one of the world's strongest magnets

Scientists have discovered that the electrical resistance of a copper-oxide compound depends on the magnetic field in a very unusual way -- a finding that could help direct the search for materials that can perfectly conduct electricity at room temperatur

What happens when really powerful magnets--capable of producing magnetic fields nearly two million times stronger than Earth's--are applied to materials that...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

Within reach of the Universe

08.08.2018 | Event News

A journey through the history of microscopy – new exhibition opens at the MDC

27.07.2018 | Event News

2018 Work Research Conference

25.07.2018 | Event News

 
Latest News

Unraveling the nature of 'whistlers' from space in the lab

15.08.2018 | Physics and Astronomy

Diving robots find Antarctic winter seas exhale surprising amounts of carbon dioxide

15.08.2018 | Earth Sciences

Early opaque universe linked to galaxy scarcity

15.08.2018 | Physics and Astronomy

VideoLinks
Science & Research
Overview of more VideoLinks >>>