Smart Card Forum Prague Secured Access for entreprise

Transcription

1 IIIII Smart Card Forum Prague Secured Access for entreprise Jérôme Soufflot Bus dev EMEA Channel Manager May 20, 2010

2 Agenda Gemalto Presentation Overview Gemalto IAM offer Update on Smart Card & components technology Share expertise with Use cases 2

3 Gemalto key figures 1.65 billion revenue 2009 Innovation: 11 R&D centers worldwide 1,400 engineers 103 inventions first filed in 2009 Over 4,500 patents/applications Global footprint: 18 production centers 30 personalization facilities 77 sales & marketing offices Experienced team: 10,000 employees 90 nationalities 42 countries North & South America 394m 24% of revenue Regional revenue Europe, Middle East, Africa 929m 56% of revenue Asia 331m 20% of revenue % of FY 09 revenue March

4 Gemalto s secure personal devices are in the hands of billions of individuals Producing and securely personalizing over 1.5 billion devices in 2009 Serving 450 mobile operators worldwide with some 1.8 billion SIM cards addressable by our solutions Supplying over 350 banks worldwide with banking cards in the hands of over 800 million people Supplying epassports to countries with some 600 million citizens 30 years experience in designing and producing secure personal devices March

5 Strategic alliances and partners Alliances with major industry players in all Business Units telecommunications, ID and security Joint initiatives with leading payment associations Network of 400 partners with worldwide coverage Business partners: VARs, resellers, distributors, systems integrators Solution and technology partners Increase Gemalto solutions portfolio Ensure interoperability with leading solution providers March

6 BU Security - IAM Enterprise Offer Smart Card Readers Cards, Tokens & OTP Readers Services, Fulfillment and support Operated services Drivers, applications and authentication servers 6

7 What is the Role of the Smart Card? PKI Hosts digital certificates Hosts user PIN Computes encryption / signing cryptography OTP Hosts the One-Time-Password application Hosts the OTP secret keys and (can) protect them with a PIN Computes the OTP Secure chip Tamper-proof Resistant from hardware attack Resistant from software attack

8 Example of Smart Card Use in Enterprise Entreprise Data Physical Access Controls Secure access to buildings PKI Certificates Secure access to Entreprise networks Secure access to Entreprise applications Authenticate employees digitally and physically Passwords and OTP Barcode & Magnetic encoding Web server Data Management Applications Photos E-signer Software Verification server Digital signature

9 Strong authentication for Enterprises 2 factor authentication 3 factor authentication Security PKI Certificates + MS Base CSP Certificate based logon Digital Signature Encryption Secure Storage OATH OTP on card + Gemalto SA Server User name and password Feature set 9

10 CARDS & MIDDLEWARE 10

11 Card Families.NET TPC TOP Regional Offer: IAS, CNS, SetAccess 11

12 Differentiation & Positioning Differentiating features Core Message Target Customers.NET Minidriver PKI architecture OTP OATH onboard Bio solution.net dev. environment FIPS level 3 Microsoft integration Easy to deploy / Low TCO Versatility (form factors, OTP) Mainstream offer MS-centric F500 SMEs through Channel TPC Common Criteria EAL 4+ certification CC certified for legally binding signature Fortune 500 Direct or through SIs TOP Javacard, Global Platform Dual Interface FIPS level 3 Multiplicative Cryptographic Javacard Platform System Integrators IAS IAS ECC Compliant CC EAL4+ certification Emerging european regulatory compliance Regional (France, Europe?) Government Healthcare 12

13 Middleware, Management & Competition.NET Middleware None for Windows Libraries for Linux & MacOS TPC Classic Client V 6.0 Management systems Gemalto DAS Microsoft ILM Intercede myid Opentrust SCM Versatile vsec:cms Microsoft ILM Opentrust SCM Intercede myid TOP n/a n/a IAS Classic Client V6.0 Opentrust SCM Microsoft ILM 13

14 Features, Value Proposition & Mgmt. options Main Features PKI and OTP authentication Minidriver for Windows XP, Vista, W7 Diversity of form factors PKCS#11 libraries for Windows, Linux, Solaris and Mac Wide integration in the IAM ecosystem.net development platform Value Proposition Ease of deployment, reduced Total Cost of Ownership Versatility (2 authentication mechanisms, variety of form factors) Ease of integration (wide ecosystem integration) Management Options SME: Gemalto DAS, Versatile VSEC:CMS Large Enterprise: Microsoft ILM, Intercede myid and Opentrust SCM 14

15 CONNECTED PKI & SECURE FLASH TOKENS 15

16 Features & Value Proposition Unique feature Use USB eseal token v2 USB Shell Token v2 + NET Java Smart Card based CCID.NET based pki Classic client pki USB Shell Token v2 + TPC IM CC CC EAL4+ / PPSSCD Pki Classic client SA.NET Dual connected / non connected Mobility & security pki + OTP 16

17 Features & Value Proposition SEG Unique feature CCID.NET MS CAPI & CSP Use pki + secure storage SG HID pkcs#11 secure storage + P11 SG FIPS Fips level 3 secure storage HID =Human Interface Device 17

18 READERS Prox Product Launch May 2010 Prox-DU Prox-DU with Stand Prox-SU 18

19 SOFTWARE 19

20 What is SA Solutions? Gemalto SA Solutions is the product offer for Strong Authentication (SA) relying on One Time Password (OTP). This offer is made of A validation server and some software components: Gemalto SA Server (version 4) SA Server authentication agent software SA Server Sconnect plug-in Authentication tokens: Easy OTP Token.Net smart card or.net smart card plug-in format embedded in a GemPC Shell reader to build an USB token.net Display card.net Dual token Smart Enterprise Guardian Authentication is targeted for every company with: Mobile workers who want to access to their enterprise resources: network, mail, web pages, etc. Employees accessing to private data through the Internet, an Intranet, etc. 20

21 Token Management System Managed by End User Self Managed by Enterprise Smart TMS Remote Pin Unblock Resize partitions Update for maintenance Report Token lost for data dest. Applicative content management Token recovery Security Policy management Usage reporting Token Issuance workflows Main Use: Centralized Deployment and Token Control 21

22 SOFTWARE.NET Bio Features & Value Proposition Main Features Middleware and cards available for Window XP, Vista and 7 Up to 10 Fingerprints (FP) stored and matched on card Support of Base CSP and PKCS#11 architectures Windows 7 version Support of the Windows Biometric Framework (WBF) PKI and Non PKI version support Value Proposition Security: 2 or 3 Authentication Factors Device + PIN and / or FP No need to manage PINs or Passwords Cost saving, convenience, security Privacy, compliance to regulations Non repudiation 22

23 CUSTOMER CASE STUDIES 23

24 Axa Technology Services (France) Situation: A subsidiary of the AXA Group providing IT infrastructure services and support to most of the group s companies. Challenge: Equipped end-user hardware (6K Agents, brokers) project with a smart card-based strong authentication platform that also supports biometrics & provide convenience Solution:.NET Bio (strong authentication with a biometricsenabled smart card) Benefits Rapid solution development and implementation at customer level Multi-authentication modes (PIN only, fingerprint only, PIN & fingerprint) Converged badge solution for physical and logical access reduces data loss network attacks, password sharing and badge swapping Enhanced end-user experience, convenience and flexibility for secure network access.net solutions

25 Ministry of Defense (European country) Situation 10 K users in locations around the world Military and civilian staff Challenges: Need for Strong Remote authentication to online services Combining OTP and PKI for 2 different security clearance access levels Ecosystem Partners: Microsoft, EDS, BT, CAP Gemini Solution.NET Card with PKI & CAP OTP 20K cards delivered.

26 Telenor Hungary -Pannon (Compuworx) Situation: Population: 1500 employees. Challenge: New HQ building ; new system for authentication & access control Solution: A converged.net badge (Hybrid with Mifare technology), Applications: PC log on Ecosystem : Microsoft ILM Benefit: 1 single badge, higher security, easiest management 26

27 Petroleum Development Oman (PDO) (GBM) Situation: PDO is the main exploration company in Oman Population: 9000 employees & subcontractors working in 9 majors location across Sultanate of Oman Challenge: Unify logical & physical access in one card Implement Microsoft CA User smart cards for SSO Solution: A converged.net badge (Hybrid with HID technology), Applications: PC log on Physical Access Ecosystem : Microsoft ILM Benefit: 1 single badge for multiple accesses Cost saving:.net lowest TCO Better governance Improve control 27

28 University of Macedonia (Intec partner) Situation: Population: 7000 users (Students and staff). Challenge: Have a solution offering security, services and automation for staffs & students Solution : A multiapplication student smart badge (.Net card, GTO readers) Applications on the student smart badge solution: Identification, Access control Computer Login VPN Esignature Wifi Ecosystem Microsoft MSC as system integrator Microsoft FIM for identity management & certificate Microsoft CRM Dynamics Benefits: Simplicity & Security: With easy and secure applications access control Self service : The student takes care of the enrolment certificate himself Improved student population database management 28

29 Welcome in Gemalto Partner Network Gemalto has solid long-term relationships with its partners by focusing on customers and skills we offer solutions that are fully interoperable and configurable to meet the requirements of our customers. Gemalto partners are the leaders in their respective categories: software, communications, security products, identity management systems, data centers, logistics, 29

30 Questions? Jérôme Channel Bus dev EMEA Tel. : +33 (0)