1. Introduction to Secure Messaging Issues Russ Chung, American Eagle Group The Open Group Messaging Forum July 24, 2003

2. Agenda Overview of Encryption Technology Implementation Issues Secure Messaging Models

3. Encryption Overview Encryption Symmetrical keys Asymmetrical keys Encryption algorithms Digital Signatures Hash functions Certificate Optional Devices Smart Cards Biometric Devices And more…

4. Implementation Successful secure messaging implementation requires consideration of: Technical aspects Organizational aspects Inter-Organizational aspects

5. Implementation Roles Technical Aspects of Secure Messaging Established and controlled by technical managers Organizational Aspects of Secure Messaging Internal Policies, Practices, Procedures Established and controlled by Company management Inter-Organizational Aspects of Secure Messaging External Policies, Practices, Procedures Established by agreements between organizations Often involves senior management, boards, legal counsel

6. Technical Aspects Key generation Key management Distribution and exchange of certificate and private key Key separation Archiving of the certificate, and if necessary, the private key Change and validation of certificate and if necessary, the private key Manage the access to and representative use of the certificate and private key Freezing and destruction of certificates

7. Non-Technical Aspects The non-technical aspects are often overlooked or underestimated Organizational Usage Policies, Procedures and Standards Training Inter-Organizational Certificate Policy Certification Practice Statement Relying Party Agreement

8. Secure Messaging Models Transport Layer Encryption -or- Message Encryption -or- Both

9. Secure Messaging Models Model #1 - End to end encryption Model #2 - Gateway to gateway encryption Model #3 - Secure web mail

10. Secure Messaging Models Model #1 - End to end encryption Examples: S/MIME, PGP Asymmetrical key pairs generated for each user Pro Message is encrypted at all times Nearly impossible for anyone except the intended recipient to read the message Con Nearly impossible to check for viruses, check content of the encrypted message Key management is an administrative burden

11. Secure Messaging Models Model #2 - Gateway to gateway encryption Example: Domsec One asymmetrical key pair generated per domain Pro Fewer keys to manage Permits scanning for viruses, content Con Messages are not encrypted when in transit between the user and the gateway (unless transport layer encryption is used) Messages are not encrypted in storage

12. Secure Messaging Models Model #3 - Secure Web Mail Examples: Authentica Net Recall, Tumbleweed IME Keys may be generated per user or per message Pro Recipient does not require special software - only needs a web browser Con Must prevent unauthorized personnel from obtaining the key

13. Secure Messaging Models Model #4 - Hybrid model Some or all of the above How do we interoperate?

14. Conclusion Successful secure messaging implementation involves Technical Activities Organizational Activities Inter-Organizational Activities The organizational and inter-organizational activities are the larger and the more critical part. There are multiple secure messaging models

15. Introduction to Secure Messaging Issues Russ Chung, American Eagle Group russ.chung@ameagle.com