1. What is EKMI? Enterprise Key Management Infrastructure Take the tour

2. Enterprise Key Management Infrastructure or EKMI is a collection of technology, policies, and procedures for managing all cryptographic keys in the enterprise.

3. EKMI is: A Single place to manage all keys A Standard Protocol Platform and Application Independent Scalable to millions of clients Always available, even during network failure...and of course, extremely secure

4. EKMI is comprised of: Public Key Infrastructure, or PKI This is used for digital certificate management, strong-autentication, secure storage, and transport of symmetric encryption keys Symetric Key Management System, or SKMS PKI SKS Server - for symmetric key management SKCL - for client interactions with SKS Server +SKMS=EKMI

5. Lets See How This All Works Together...

6. SKCL Application Client Client Application makes a request for a symmetric key SKCL makes a digitally signed request to the SKS Network Server SKS verifies SKCL request, generates, encrypts, digitally signs & escrows Key in the Database Application Server DB Server Crypto Module Crypto HSM provides security for RSA Signing & Encryption Keys of SKS SKS responds to SKCL with a signed and encrypted symmetric key SKCL verifies response, decrypts key and hands it to the Client Application

7. What does this mean in practical application... Since the Keys are generated and “Leased” at the application level, data remains encrypted and secure, not only at rest on the server, but also through transit.

8. The Financial Solution ATM Bank Teller Point of Sale Bank Branch Retail Network Financial Institution SKS Server Central Database Information can now be sent encrypted securely over standard lines, and be decrypted at the application level.

9. The Helthcare Solution Records Doctors Office EMT Network Hospital SKS Server ER Application and Database Patient Information can be shared securely and quickly for efficient care. Doctors Tablet EMT in Field Patient Registration ER Nurse

10. Solutions to Symmetric Key Barriers SlowMulti-Core PCs ComplexHigher Level APIs Design Standards Education Expensive Open Source Lack of Standards OASIS EKMI-TC

11. But its not too late! Securing the Core should have been Plan A from the beginning.

12. OASIS EKMI-TC is driving new key-management standards that cuts across platforms, applications and industries. Get involved!