Presentation is loading. Please wait.

Presentation is loading. Please wait.

1 © SURFnet 1998 Smart Access: Strong Authentication on the Web TNC Dresden 5-8 October 1998.

Published byBeverly Bradford Modified over 8 years ago

Similar presentations

Presentation on theme: "1 © SURFnet 1998 Smart Access: Strong Authentication on the Web TNC Dresden 5-8 October 1998."— Presentation transcript:

1 1 © SURFnet 1998 Smart Access: Strong Authentication on the Web Ton.Verschuren@SURFnet.NL TNC Dresden 5-8 October 1998

2 2 © SURFnet 1998 What’s the problem?

3 3 © SURFnet 1998 Authentication solutions

4 4 © SURFnet 1998 Introducing…the smartcard EEPROM ROM RAMRAM CPU I/O etc IBM MFC smartcard: 8 bit  Processor 2K ROM (OS) 10K EEPROM (Apps) <1K RAM 3,64Mhz clockspeed

5 5 © SURFnet 1998 Smartcard intro (Cont’d) EF MF EF DF EF DF EF DF EF DF MF Master File DF Dedicated File EF Elementary Files

6 6 © SURFnet 1998 Access conditions For each command on a file: ALW (Always) CHV (CardHolder Verification) PRO (Protected with key X) –Secure handshake with MAC AUT (External Authentication) ENC (Enciphered) –PRO plus encrypted data NEV (never) (triple) DES !

7 7 © SURFnet 1998 Student Smartcard College pass library pass loan/grant registration number membership data e-purse (Chipper)

8 8 © SURFnet 1998 Our model is ISI

9 9 © SURFnet 1998 ISI Protocol

10 10 © SURFnet 1998 Current applications Downloading of commercial software (Smart Server) Access to exam results database Student grants/loans system StudyNet: –registration for courses and exams –access to exam results

11 11 © SURFnet 1998 Issues Java implementations in browsers Support for smartcard readers (com port) Use of DES in public key world Scaling of DES-based two-party authentication

12 12 © SURFnet 1998 Tree-party Authentication

13 13 © SURFnet 1998 Demo time! Setup Card Reader StudyNet Faculty of Arts, Utrecht UniversityStudyNet

14 14 © SURFnet 1998 References http://www.surfnet.nl/surfnet/projects/home-office/ http://www.surfnet.nl/projecten/surf-ace/homeoffice/ (dutch) http://www.iscit.surfnet.nl/ http://www.chipcard.ibm.com/

15 15 © SURFnet 1998 Be Smart!

16 16 © SURFnet 1998

17 17 © SURFnet 1998 Offline demo

18 18 © SURFnet 1998 Offline Demo (cont’d)

19 19 © SURFnet 1998 Offline Demo (cont’d)

20 20 © SURFnet 1998 Offline Demo (cont’d)

21 21 © SURFnet 1998 Offline Demo (cont’d)

22 22 © SURFnet 1998 Offline Demo (cont’d)

Download ppt "1 © SURFnet 1998 Smart Access: Strong Authentication on the Web TNC Dresden 5-8 October 1998."

Similar presentations

Smart Card Security Xufen Gao CS 265 Spring, 2004 San Jose State University.

Smart Card Security Xufen Gao CS 265 Spring, 2004 San Jose State University.
Match On Card Technology and its use for PKI Mgr. Miroslav Valeš Sales Manager Eastern Europe May 9, 2001 CATE 2001 Security and Protection.

Match On Card Technology and its use for PKI Mgr. Miroslav Valeš Sales Manager Eastern Europe May 9, 2001 CATE 2001 Security and Protection.
Gareth Ellis Senior Solutions Consultant Session 5a Key and PIN Management.

Gareth Ellis Senior Solutions Consultant Session 5a Key and PIN Management.
Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Central Security Server In order to use Cloud Authentication and Authorization.

Cloud PIV Authentication and Authorization Demo PIV Card User Workstation Central Security Server In order to use Cloud Authentication and Authorization.
Basic Computer Vocabulary

Basic Computer Vocabulary
PKCS #15 v1.1 Magnus Nyström RSA Laboratories PKCS Workshop, 1999.

PKCS #15 v1.1 Magnus Nyström RSA Laboratories PKCS Workshop, 1999.
HCE AND BLE UNIVERSITY TOMORROWS TRANSACTIONS LONDON, 20 TH MARCH 2014.

HCE AND BLE UNIVERSITY TOMORROWS TRANSACTIONS LONDON, 20 TH MARCH 2014.
SSL CS772 Fall 2011. Secure Socket layer Design Goals: SSLv2) SSL should work well with the main web protocols such as HTTP. Confidentiality is the top.

SSL CS772 Fall Secure Socket layer Design Goals: SSLv2) SSL should work well with the main web protocols such as HTTP. Confidentiality is the top.
Cross Platform Single Sign On using client certificates Emmanuel Ormancey, Alberto Pace Internet Services group CERN, Information Technology department.

Cross Platform Single Sign On using client certificates Emmanuel Ormancey, Alberto Pace Internet Services group CERN, Information Technology department.
1 3. Smart Identification 3.1 Smart Cards 3.1.1 What Is a Smart Card?  Smart cards evolved from plastic identification and magnetic stripe cards through.

1 3. Smart Identification 3.1 Smart Cards What Is a Smart Card?  Smart cards evolved from plastic identification and magnetic stripe cards through.
Introduction CSCI 444/544 Operating Systems Fall 2008.

Introduction CSCI 444/544 Operating Systems Fall 2008.
Database Encryption. Encryption: overview Encrypting Data-in-transit As it is transmitted between client-server Encrypting Data-at-rest Storing data in.

Database Encryption. Encryption: overview Encrypting Data-in-transit As it is transmitted between client-server Encrypting Data-at-rest Storing data in.
Mobile Mobile OS and Application Team: Kwok Tak Chi Law Tsz Hin So Ting Wai.

Mobile Mobile OS and Application Team: Kwok Tak Chi Law Tsz Hin So Ting Wai.
Submitted by: Rahul Rastogi, CS Department.  Introduction  What is a smart card?  Better than magnetic stripe card.  Technology What’s in a card?

Submitted by: Rahul Rastogi, CS Department.  Introduction  What is a smart card?  Better than magnetic stripe card.  Technology What’s in a card?
About PKI Key Stores Dartmouth College PKI Lab. Key Store Defined Protected “vault” to hold user’s private key with their copy of their x.509 certificate.

About PKI Key Stores Dartmouth College PKI Lab. Key Store Defined Protected “vault” to hold user’s private key with their copy of their x.509 certificate.
Muhammad Wasim Raad1 Smart Cards Operating Systems أنظمة التشغيل للبطاقات الذكية By: Dr Muhammad Wasim Raad Computer Engineering Department.

Muhammad Wasim Raad1 Smart Cards Operating Systems أنظمة التشغيل للبطاقات الذكية By: Dr Muhammad Wasim Raad Computer Engineering Department.
Payment Card Industry (PCI) Data Security Standard

Payment Card Industry (PCI) Data Security Standard
CAMP - June 4-6, 2003 1 Copyright Statement Copyright Robert J. Brentrup and Mark J. Franklin 2003. This work is the intellectual property of the authors.

CAMP - June 4-6, Copyright Statement Copyright Robert J. Brentrup and Mark J. Franklin This work is the intellectual property of the authors.
Cutting Edge 2005 workshop, IIT Kanpur Smart Cards: Technology for Secure Management of Information Rajat Moona Computer Science and Engineering IIT Kanpur.

Cutting Edge 2005 workshop, IIT Kanpur Smart Cards: Technology for Secure Management of Information Rajat Moona Computer Science and Engineering IIT Kanpur.
SSL (Secure Socket Layer) and Secure Web Pages Rob Sodders, University of Florida CIS4930 “Advanced Web Design” Spring 2004

SSL (Secure Socket Layer) and Secure Web Pages Rob Sodders, University of Florida CIS4930 “Advanced Web Design” Spring 2004

Similar presentations

Ads by Google