Presentation is loading. Please wait.

Presentation is loading. Please wait.

魂▪創▪通魂▪創▪通 2014. 9. 10. Digital Certificate and Beyond Sangrae Cho Authentication Research Team.

Similar presentations


Presentation on theme: "魂▪創▪通魂▪創▪通 2014. 9. 10. Digital Certificate and Beyond Sangrae Cho Authentication Research Team."— Presentation transcript:

1 魂▪創▪通魂▪創▪通 2014. 9. 10. Digital Certificate and Beyond Sangrae Cho Authentication Research Team

2 魂▪創▪通魂▪創▪通 2 Web Browser caserver.com bank.com 3. use certificate (digital signature) 2. Issue certificate 4. Verify certificate Korean banking use case 1.Public key pair is generated in the browser.

3 魂▪創▪通魂▪創▪通 ActiveX based Service 3 Certification Authority Web Browser Internet Banking ActiveX for Certificate Management

4 魂▪創▪通魂▪創▪通 ActiveX realted Issues 4  ActiveX Programs Certificate Management Keyboard protection Personal filewall and anti-virus Web secure channel  Related Issues Only works for IE Weak for malicious program attack User inconvenience Not mobile friendly

5 魂▪創▪通魂▪創▪通 Web based Digital Certificate Service 5 Storage Devices Desktop PC Smart Authentication (USIM, NFC-Credit Card) CA Issuing Certificate Relying Party (Online banking, e-Gov) e-Gov) Smartphone APP Web Server JavaScript based HTML5 Issue a certificate Use the certificate Web Browser

6 魂▪創▪通魂▪創▪通 Web based Approach 6 Web Browser Crypto Library Cert and Key Store Storage Library Storage APIWebCrypto API Cert. Manager in Java Script CMP PCKS7 Certificate Manager  WebCrypto API for Crypto fucntions  HTML5 for storage and communication  CMP for certificate issuing and PKCS7 for digital signature implemented in JavaScript

7 魂▪創▪通魂▪創▪通TouchSignTouchSign 7  Smartcard solution for Financial Services Secure storage for digital certificates Digital Signature with NFC User Authentication

8 魂▪創▪通魂▪創▪通 TouchSign Applications 8 Online BankingCredit Card Subscription Money transfer in online banking can be done with TouchSign User Authentication Digital Signature Subscription for Credit Card can be done with TouchSign Digital Signature

9 魂▪創▪通魂▪創▪通 Digital Certificate with FIDO 9 Digital Certificate issued to Authenticator

10 魂▪創▪通魂▪創▪通 Hands-Free Payment Service 10 Hands-Free Payment

11 魂▪創▪通魂▪創▪通 Requirements for standard 11  Storage management for WebCrypto.Next  Standard API for Hardware Tokens  Standard API for communications such as NFC, Bluetooth

12 魂▪創▪通魂▪創▪通 12 Thank You


Download ppt "魂▪創▪通魂▪創▪通 2014. 9. 10. Digital Certificate and Beyond Sangrae Cho Authentication Research Team."

Similar presentations


Ads by Google