Free Phone + Bluetooth @T-Mobile.com
October 22, 2002 11:59 AM PDT
Encryption gets business boost
- Related Stories
-
U.S. government plans online ID gateway
July 15, 2002 -
Despite law, few people use e-signatures
April 17, 2002 -
Commentary: PKI key to security alliance
January 22, 2002
Public-key encryption is used to secure electronic transactions and to digitally sign important documents such as contracts and legal forms. Baltimore creates some of the building blocks for conducting such transactions and allows third parties to verify the identity of digital signatures--a system known as the public-key infrastructure (PKI).
Baltimore is one of the leading PKI developers, but it has seen its fortunes crumble in recent years. During the past 12 months, it has halved its work force and the value of its U.K.-traded shares has plunged.
Repackaging its PKI technology into business suites is part of a strategy to widen the appeal of PKI--and boost Baltimore's revenue.
Richard Kinsella, marketing manager for Baltimore's Global Solutions Group, acknowledged the problems that PKI has experienced. "We have seen PKI used in governments, but the technology is probably very confusing for most businesses," he said. "PKI has been a technology, but now we're trying to turn it into a business solution."
The result, Trusted Business Suite, is a set of business modules offering security for networking, messaging and document-sharing. The suite consists of modules, each of which sits on a core engine called the Baltimore Applied Solutions Engine (BASE).
"One of the unique things BASE provides is centralized management, so that administrators can control users and solution modules from one screen," Kinsella said. "It also allows administrators to delegate administration to business line managers, so a human resources manager can control the security privileges of the 20 or so people who report to them."
BASE uses Baltimore's certificate management product, Unicert, together with the company's Select Access technology, but it is not a move away from these products, Kinsella said. "It is simply to make Unicert usable for departmental work. Unicert itself still holds for large infrastructure-type projects."
Three suites are available: Trusted Networks, Trusted Messaging and Trusted Workplace. Trusted Networks covers VPN (Virtual Private Network) and trusted Web access, with single sign-on and Web-based authentication. The Messaging product provides safeguarded access to e-mail, and the Workplace product is for documents and forms.
Trusted Documents, one of the Trusted Workplace components, "allows any file to be digitally signed and encrypted, and you can add a toolbar in (Microsoft) Word, Excel or (Adobe) Acrobat to make it easy to encrypt documents," Kinsella said.
The product includes an Acrobat-like reader application. "This lets you sign and encrypt electronic documents and distribute them to third parties who can read them and verify signatures and certificates, even if they don't have their own PKI-aware applications," he said.
Baltimore's reader software could go some way toward addressing one of the major criticisms of PKI: that it is only useful when everyone else has it.
"When only a few people have it, it is not worth adopting," Whitfield Diffie, chief security officer of Sun Microsystems, said at the recent RSA security conference in Paris.
ZDNet UK's Matt Loney reported from London.
