e-security Task Group Hong Kong Post e-cert: Enabling Secure Electronic Transactions

Transcription

1 E Hong Kong Post e-cert: Enabling Secure Electronic Transactions Doc no: telwg29/ ESTG/09 Agenda item: 7 e-security Task Group Submitted by: Hong Kong, China Hong Kong Post e-cert: Enabling Secure Electronic Transactions Contact: Y C Lam yc_lam@hkpo.gov.hk APEC Telecommunications and Information Working Group 29th Meeting March 2004 Hong Kong, China Please note: This document is not an official APEC document until approved by the Telecommunications and Information Working Group. This version is a draft provided for discussion purposes only.

2 About Hongkong Post Hongkong Post e-cert : Enabling Secure Electronic Transactions Y. C. LAM Senior Manager, CA Special Projects Hongkong Post APEC TEL 29 March 2004 Providing postal services in HK for > 160 years Handling > 1.2 billion mail items per year (>3.3M items / day) Operating the First Recognized Certification Authority in HK since Jan 2000 Chairman of the Hong Kong PKI Forum since 2002 Hongkong Post Certification Authority Hongkong Post e-certe Personal Users Corporate Users e-cert (Personal) e-cert (Organisational) e-cert (Encipherment) Bank-Cert (Personal) Bank-Cert (Corporate) e-cert (Server) First recognized CA in HK under the Electronic Transactions Ordinance since Jan 2000 Mobile e-cert (Personal) Global e-cert (Personal) Mobile e-cert (Organisational) Global e-cert (Organisational) Mobile e-cert (Server) Has issued >410K e-certs to individuals and organisations Electronic ID Electronic Business Card Business Unit Server ID Has issued >210K e-certs on Smart ID Cards Digital Signatures (under the Electronic Transactions Ordinance) Enciphered Communications (e.g. SSL) Storage Media of HK Post e-cert e-banking Floppy Disk Smart Card e-banking Other secure media (e.g. USB token) (Coming soon)

3 Online Securities Trading Online Data Transmission Online Securities Trading Online Data Transmission Authenticate using e-cert Authenticate using e-cert Other Applications Smart ID Card Secure communication Software Applications Online Betting E-government e-cert (incl. Private Keys) Other Applications Online Access to Personal Credit Report Online Shopping Other nonimmigration applications Electronic Trading Services Online Postal Service Application Online Auction Replacement Period : Mid 2003 Mid 2007 Smart ID Card Free e-cert e Program Option of first-year-free use of e-cert embedded to Smart ID Card Smart ID Card Free e-cert e Program Objectives: From 15 Mar 04, citizen born in 1962 & 1963 start to get smart ID card All citizen are welcome to register in advance To educate the general public the advantages and usages of e-cert To encourage the adoption of e-cert enabled applications in different industries To build up a critical mass of e-cert users in the market Embedded e- Cert Library Card Driving Licence (Yr 05-06)

4 Promotion Promotion Campaign: Commercial on TV and buses Promotion on radios Marketing collaterals including posters, banners, leaflets, online and print advertisements, etc. Ways to Register Citizens may apply for embedding One-Year-Free e- Cert into smart ID card via Online application Post office e-cert Service Counters at Smart ID Card Centres Smart Card Reader Mass Consumers can access public smart card readers: Smart Card Reader Mass consumers can also buy their own smart card readers: The Government equips public computer facilities with smart card readers for public use Business Opportunities Hong Kong s Current Population: 6.8 million Critical Mass of ready users to be capitalized for e-businesses!!!! Business Values To e-service providers : Enhanced security, reduced risk of fraud Non-repudiation, minimize dispute and financial loss Enhanced customer confidence, service image Provide additional value added services through Internet Marketing exposure through Smart ID free e-cert joint promotional campaigns to reach out to right target audience

5 Business Values To customers : Enhanced user experience with a universal security token Easy to use with ATM-like service experience Enjoy trusted services without being expose to the risk of spoofing attack etc Enjoy additional value added services online Support for Business Partners Support for e-cert enabling technology: Hongkong Post provides free trial/use of a development tool : DSVS and e-as A simple and easy to implement PKI module Easy migration from username/password to e-cert Successful cases : Go2HK, Layoyo.com, Tai Fook Securities... Support for Business Partners Joint Promotion Channels for Partners: Welcome Kit for Smart ID e-cert Roving Shows Seminars and Exhibitions Promotion Campaigns Hongkong Post e-cert Newsletter Support for Business Partners Promotion Channels for Partners: Marketing materials and advertisements Press interviews demo on partners applications Editorial in newspaper and magazines Partner web Looking Ahead Looking Ahead Continuous support to e-services Hong Kong has already developed a firm infrastructure for e-business e-community is created with Smart ID Card e-cert as Universal Security Token Low cost of implementation with DSVS and e-as free toolkits New e-business opportunities are derived Banking and Financial Services Home Education and Entertainment Enterprise Appl ns Buying and Selling Medical & Health Hongkong Post CA / PKI Supply Chain Support Gov t Services Critical Mass of e-certs e on Smart ID Cards

6 Thank You