SPD1 Improving Security and Access to Network with Smart Badge Eril Pasaribu CISA,CISSP Security Consultant

SPD2 AGENDA Background Core Technologies Schlumberger Solutions Questions & Answers

SPD3 Market facts (CSI/FBI)

SPD4 How Does One Authenticate? One Factor - What you know – Password Two Factors - What you have – Smart card Three Factors - What you are – Biometric => Balance between convenience, privacy, and security

SPD5 A Corporate Smart Badge? Passwords are expensive and provide poor security Many different standards increase management complexity and help desk support Increasing network fraud, poor security around transactions and messaging Hard drive based security can be improved =>One single ID card for both secure physical and logical access

SPD6 Smart Cards for Corporate Login Million Units Dataquest/Card Technology 5/01 By YE ‘04 33% of W2K/XP users will login via smart card ( Gartner Group)

SPD7 CORE TECHNOLOGIES Public Key Infrastructure Smart Cards Proximity Cards

SPD8 PKI Symmetric Model

SPD9 PKI Asymmetric Model

SPD10 PKI Public Key Cryptography Fundamentals Two keys, one you keep secret (private) and one you let everyone else know (public) Important property: –If data is encrypted with a public key, the only way to decrypt is by having the private key –If data is encrypted with a private key, the only way to decrypt is by having the public key Combined with secret key algorithms provides: authentication, bulk encryption, and integrity

SPD11 Digital Certificates Public Keys are distributed in the form of Certificates. –Binding between “identity” and a public key –Digital equivalent of employee badge, drivers license – universal –Issued by Certificate Authorities (CAs) to clients, servers, objects –Trust and accreditation of CA is a major component of Public Key Infrastructure: to what extent can you be sure a certificate truly binds a public key to an entity A Digital Certificate contains the sender’s public key, and also the trusted authority’s digital signature.

SPD12 What’s in a Digital Certificate? Defined by ITU standard X.509 –supported by Netscape,iPlanet, Entrust, MS IE, MS IIS, Lotus Domino 5, … Certificate typically contain: –Name of owner and their public key –Name and signature of Certificate Authority –Expiration date, serial number –Algorithms used for encryption & signing X.509 v3 permits arbitrary attribute-value pairs (e.g. credit card #, access control information, certificate policies….)

SPD13 Smart Card Overview Total sales of 1.5B units in 2000 –GSM requires smart card (SIM) –Credit cards, AMEX blue, DoD. Already a proven, secure technology Almost unanimous agreement among analysts and experts that smart cards are an ideal token for storage of important digital credentials, such as private keys, biometrics, etc.

SPD14 Reflex 72Reflex 20 CARD READERS Middleware CRYPTO CARD Cryptoflex 4K, 8K, 16K JAVA CRYPTO CARDS Cyberflex Palmera Protect 16K, 32K Cyberflex Access II 16K, 32K SLB Smart Card Products

SPD15 e-Gate: the next generation e-Business Smart Card: Access e-Gate –32K Access II card with embedded USB driver. –Simple, inexpensive reader plugs directly into USB port –e-Gate Card+Reader vs. ISO Card+Reader: 30% less –Electron d’or award, 2000

SPD16 Smart Card Kits

SPD17 Proximity Cards HID Proximity Card –125 kHz proximity antenna and chip –Popular in the US –Personalize by HID MIFARE Contactless Smart Card –13.56 MHz contactless antenna –Popular outside of the US –Personalize by our CIS

SPD18 Schlumberger Smart Badge Integration Network access Secure log in Digital signatures Web authentication Password storage Public key infrastructure Payment loyalty programs Physica l access Corporate identity E-commerce entitlement control authentication authorization accounting

SPD19 Single Sign-On (SSO) Enable authentication to be managed consistently across the enterprise Allow a user to log in just once Transparent access to a variety of permitted information systems Integration of stronger authentication services to support SSO using the Corporate Badge

SPD20 Smart Login Smart Card based password store for Windows, enabling reduced Sign On. Support IE, Netscape, and any Windows Login dialog. Windows 2000/NT/9x. Automatic Login.

SPD21 Demo Demonstrate Smart Card Login on Windows 2000 And secure screen lock

SPD22 Demo 1-2 After Windows boot, SLB GINA dialog is displayed On card insertion, user is prompted for PIN verification If successful, access is granted to desktop and related networks

SPD23 Demo 2-2 On card removal (typically when the user walks away from his computer), the computer locks itself automatically It is unlocked using the same process as initial logon (PIN verification

SPD24 SC & Reader Card Software DirectoryCA Policy Server CMS Physical Access Technical Consulting Custom Applications E- Commerce VPN Loyalty Design & Integration Project Management Deployment Training 24x7 Help Desk Schlumberger’s total solution

SPD25 Smart Badge Movie

SPD26 Q & As Questions and Answers