Quarterly Focus PKI Goes Mobile Secure Licensing
Total Page:16
File Type:pdf, Size:1020Kb
An Infineon Technologies Publication Autumn/2001 Quarterly Focus Traditional Smart Cards vs. USB Token Security – And the winner is…? PKI goes Mobile New Players – New Game. Secure Licensing Securing Intellectual Property www.silicon-trust.com from Software Piracy Impressum Editorial SECURE - The Silicon Trust Quarterly Report Welcome to the Autumn 2001 issue of the is a quarterly Silicon Trust program publication, “Secure”, the Silicon Trust Report. In the sponsored by Infineon Technologies AG. midst of the current market downturn, the High Tech Industry needs, more than ever, to SECURE - The Silicon Trust Quarterly Report is an Infineon Technologies publication take innovative, unconventional steps towards market penetration and customer retention. The Silicon Trust Program Director The decision by Infineon’s partners and cus- Veronica Preysing tomers to participate in the Silicon Trust is Email: [email protected] one of those steps. Infineon Editorial Team Veronica Preysing (Infineon Technologies) Six new Silicon Trust Partners since the last Florence Raguet (Infineon Technologies) Secure issue prove the relevance of this plat- form, which now counts players from all secu- Magazine Project Development rity areas, the steepest increase coming from Krowne Communications GmbH the most traditional of the Hardware Security Munich, Germany Sectors: the Smart Card Sector. In this issue of Creative Director/Layout Secure we are challenging the hitherto Stefan Gassner untouchable position of the Smart Card by Email – [email protected] introducing and comparing the USB Dongle as a potential alternative. Aladdin, Giesecke & Advertising & Distribution Devrient as well as Infineon are contributing Karen Brindley Email – [email protected] to this Quarterly Focus: Smart Card vs. USB Dongle. Printing: ADM Bozen Another favorite Siebeneich-Terlan,Italy focus remains to For more information, please visit Cover Illustration by Stefan Gassner © 2001 be the latest Bio- metric Solutions www.silicon-trust.com This issue of on the market SECURE - The Silicon Trust Quarterly Report and in this issue we are giving an insight into is Copyright 2001 by Infineon Technologies AG. the possibility of securing Computer Peri- pherals using Partner Solutions. No portion of this publication may be reproduced in part or in whole without the express permission, in writing, from the publisher.All product copyrights and Last but not least don’t miss out on Calumn trademarks are the property of their respective owners. Bunney’s column. Ferociously independent, he All product names, specifications, prices and other does not hold back with his humorous views information are correct at the time of going to press on what is happening in the Security Industry. but are subject to change without notice.The publisher takes no responsibility for false or misleading information or omissions.Any comments may be addressed to the To keep yourself updated, please subscribe Silicon Trust Program Coordinator – to your free copy of Secure at www.silicon- Veronica Preysing ([email protected]) trust.com or by faxing back the Subscription Form in this issue. Subscriptions of SECURE – The Silicon Trust Quarterly Report can be obtained at: www.silicon-trust.com Veronica von Preysing Contents 6 Contributors 24 Secure Mobile Commerce Who’s who 2000 was a landmark year in Ger- in this Issue man mobile communications.The number of mobile subscribers 8 Info-Box doubled, rising from approx. 23 Smart Card and Biometric million in January to almost 50 Industry News Exclusively million by year-end.This increase from Ctt and Btt clearly paves the way for the widespread introduction of new 10 Introducing the mobile services. Silicon Trust 30 PKI GOES Mobile 11 Welcome to the Trust For many years PKI has been 16 Guest Opinion seen as the next logical step in IT 13 The Silicon Trust Portal Chip Card Applications to provide a new level of applica- tion security. But, PKI has still 14 Highlights with a Secure Future not really taken off yet and to An Interview with Infineon Technologies date, the promise that everyone Welcome to Show Season would benefit from digital sign- The show season is upon us once ing has not been fulfilled. How- more.With the Silicon Trust pre- ever new players (at least in PKI sent at more shows and exhibi- time-scales) are now entering the tions than ever before, it is an game... excellent opportunity for you, the reader, to come and meet 32 Quarterly Focus with members of the Silicon Trust and discuss your security Putting their Cards needs and issues. on the Table An Interview with Giesecke&Devrient 16 Guest Opinion From banknotes to Biometrics, Chip Card Applications G&D have always been at the with a Secure Future forefront of payment, telecommu- Recently, the market research 32 Quarterly Focus nication and security products. institute Dataquest, declared that Putting their Cards With new security challenges Infineon Technologies had taken on the Table arising in the market, SECURE spoke to John Atkinson,V.P.Stra- the World’s No. 1 spot in the area An Interview with Giesecke&Devrient of Chip Card ICs.What was even tegic International Marketing at more interesting was the fact that Giesecke & Devrient about his this wasn’t the first time – but thoughts on USB Token security the third time in a row! versus Smart Card security, the SECURE spoke with the new latest Biometric developments at head of the Security and Chip G&D and why G&D joined a Card ICs group – Dr. Hermann Security Platform called the Eul, about Infineon's Chip Card SiliconTrust. products, their applications and more importantly, what the future 36 SmartUSB – The Integrated holds in store for Chip Card Solution for Personal IT products. Security Today,Smart Card products main- 20 Technofile ly provide personal IT-security. These Smart Cards give access to Bringing Biometrics and 36 Quarterly Focus corporate IT-networks and sup- PKI together SmartUSB – The port RSA-cryptography for digi- To make biometric verification Integrated Solution for tal signature purposes. Although Smart Cards are quite cheap, the secure, it is important to store Personal IT Security the biometric data in a secure final cost of ownership is much way.To be able to keep the bio- higher due to the fact that each metric information in a closed PC and workstation need to have environment, it is essential that a Smart Card reader installed to the matching be performed in communicate with the Smart the same environment as the Card. A readerless solution could data is stored. significantly reduce the cost of This document describes the ownership and at the same time Match on Card technology, and drastically increase the market why such technology is needed demand for such solutions. to gain secure biometric veri- fication.The article also discusses 38 Securing the Match on Card in combination Information Society with Smart Cards and PKI. A new European Union The “information society” and 40 Quarterly Focus the benefits to be reaped from Hardware Security it for the next generation of for e-business citizens, is the focus of a project initiated by the European Commission. The declared goal of this EC project is to bring communities closer together, to create wealth and encourage the sharing of knowledge. Contents 40 Hardware Security 54 Security that’s FUN for e-business No, there’s nothing dull or mousy In recent years the term e-com- about the new ID Mouse Pro- merce has become the accepted fessional from Siemens – neither buzzword, with huge markets pre- visually nor technically. Of course dicted for this particular segment it’s the visuals that grabs your and the added bonus of large attention first - a sophisticated opportunities for a lot of com- design for a PC mouse, with ele- panies. This growth ensures a gant lines in blue and silver. It successful future, as well as new, feels comfortable in your hand, comfortable ways, of exchanging and would look good on any information and doing business desk. And the technology? From over the net for private customers either above or below, the ID and organizations alike. However, 46 PC Peripherals Mouse Professional offers you e-business has changed. It is no Protected Storage Devices the latest in biometric and opti- longer the old view of e-com- cal technology. merce: “doing transactions on a PC”. E-business is a way to con- 56 Within the Trust duct, manage and execute busi- Management Systems and ness transactions via an electronic 2 network. Personalization from SC Most of the organizations and 44 Smart Cards vs. USB Token companies in the world protect And the winner is...? their IP (Intellectual Property) The use of credit-card size Smart by using different cryptography Cards has successfully been adop- mechanisms. These cryptogra- ted by a number of European phy mechanisms are based on companies, with a particularly high PKI (Public Key Infrastructure). level of acceptance in Germany Only in highly secured systems and France. However, high hard- are both hardware and software ware deployment costs and the used - many security solutions lack of application standards asso- include a hardware device that ciated with Smart Cards, have protects the system keys, as well 56 Within the Trust as software and hardware mech- proved to be significant barriers Management Systems to their widespread use, especial- anisms that protect the transac- ly in the US. Therefore, their and Personalization tions/communications, but a lot newly developed USB (Universal from SC2 of those solutions do not in- Serial Bus)-based counterparts clude a proper key management. (referred to as USB tokens) are 58 Successful Smart Card pro- becoming a more appealing, more grams begin with Datacard versatile option for both Ameri- Datacard Group helped trans- can and European companies form the world for consumers looking to secure their digital and card issuers 30 years ago by assets.