Local switch NIC FC4 NIC Main switch Win-XP IIS Domain-controller Internet SIS Network Topology And IP assignments

The Testbed A 4-machine testbed has been built. It contains the following: –Windows server 2003 with AD (The Domain Controller). –Windows server 2003 with IIS 6.0 (The web server). –Windows XP (a client). –Fedora Core 4 with IPtables-based firewall (A Gateway).

The SIS Admin Tool An admin tool is being developed to provide an easy-to-use GUI for setting up the SIS environment. C# (C# Express 2005 IDE) has been used. The main three components that we have so far are: –Public Key Infrastructure (PKI) setup. –Privilege Management Infrastructure (PMI) setup. –Certificates Management.

PKI PMI Features: –Creating new Certificate Authorities(CAs). –Loading an existing CAs. –Issuing a single digital cert (DC) and storing it in the AD, based on a GUI form. –Issuing a bunch of DCs and storing them in the AD, based on a simple text file. Features: –Creating new Attribute Authorities (AAs). –Loading an existing AA. –Issuing a single attribute cert (AC) and storing it in the AD, based on a GUI form. –Issuing a bunch of ACs and storing them in the AD, based on a simple text file.

Certificates Management Check & validate a digital certificate. Revoke a digital certificate. Check & validate an attribute certificate. Revoke an attribute certificate.

Packages & techniques OpenSSL [ A wrapper compiled in binaries (exe file) has been used to implement the PKI part. JCE-IAIK [ A set of java APIs and implementations of cryptographic functionality that has been used to implement the PMI part. IKVM.NET [ an implementation of Java for the Microsoft.NET Framework that has been used to allow us using the IAIK java-based package in the.NET. CryptLib [ or [ a security toolkit that allows adding encryption and authentication services. * (We faced problems with it [files format & AC errors], therefore, we replaced it with the OpenSSL solution).