PKI will grow, but policy problems remain
602631
(InfoWorld) - Public key infrastructure is poised for a resurgence, with associated identity technologies increasingly underpinning applications as organizations look to securely share information, vendors said Tuesday at a standards conference in London. While it was a hot buzzword during the peak of the technology boom, PKI fell out of favor as IT projects were increasingly seen as bloated and without sufficient focus. "PKI still has a lot of perception problems," said Stijn Bijnens, senior vice president of identity management for Cybertrust. Bijnens was one of several participants in a conference by the Organization for the Advancement of Structured Information Standards (Oasis), a consortium that developments standards for business applications. PKI uses certificates that have been verified by a certification authority and allows other organizations or people to exchange trusted information. PKI simplifies e-government and e-commerce by letting a person identify themselves once to a certification authority that vouches for the person's identity when they interact with other organizations in the infrastructure. Several changes in IT should spur growth of PKI. Microsoft Corp.'s release of its next generation OS, Windows Vista, contains technology to help users manage identities, called CardSpace, Bijnens said. CardSpace will allow users going to compatible Web sites to have greater control over how their personal information is released. While it's unknown how CardSpace will work with other identity technologies, it should help grow the market for certificate accreditation and procedures around identity verification, Bijnens said. "Microsoft just enables the market for everyone," Bijnens said. Governments are undertaking electronic-identity projects that should also foster interest in PKI technology, Bijnens said. But PKI technology faces hurdles, too. The technology is growing increasingly complex even for those familiar with it, said Arshad Noor, of StrongAuth Inc. Noor said he was once involved with a PKI implementation at one of the largest pharmaceutical companies for its 120,000 employees worldwide. The chief executive officer (CEO) expected the rollout could be done in about five weeks. The rollout eventually finished, but not on the CEO's time scale, he said. "It was absolutely crazy," Noor said. "I think management needs to understand they are implementing more and more complex technology." Also key are the policies built around identity sharing. However, those policies often must rapidly be adjusted as businesses acquire other ones or business processes change, Noor said. Another problem with exchanging identities using PKI is establishing one authority that can vouch for identities, something that so far hasn't happened. "The framework doesn't exist yet," Noor said. Â
588219
Despite the return of its founder, improvement will take time.
380834
Gregory Garcia, the newly appointed assistant secretary for cybersecurity and telecommunications at the Department of Homeland Security, says there are a lot of cybersecurity plans afloat in Washington, but the latest one "is going to stick."
447369
A new key acquisition will bolster its RSA division.
680558
Jon Oltsik says the explosion in broadband use forces a rethinking of Internet security. But a lethargic vendor response is not a promising harbinger.
239141
As the world shrinks, international cybercrime is growing in scope and sophistication.
240485
Even as the Big Four push to remove antipiracy software from digital downloads, larger issues remain. Don't expect a DRM-free world anytime soon.
480643
As personal advisers proliferate, credentialing varies.
575164
The Bush administration continues to have a hard time selling its plan to turn more federal work over to the private sector.
105605
A DIRECTOR of technology for security outfit RSA Security has warned online customers are not &quot;authenticated enough&quot; and there needs to be moves towards toward a mandated identity policy.
386296
The facts of web servers don't necessarily match the myths when it comes to security.
729053
Even site keys aren't good enough if clever hackers take over a transaction via emerging techniques such as 'man-in-the-browser' attacks.
640269
For more than a year, officials who run Social Security and Medicare have struggled to mesh their computer systems.
292831
The ability of terrorists and other dark elements to engage in covert communications online remains a daunting security problem, and one that may prove impossible to solve.
568981
The office in charge of cyber-security in the Department of Homeland Security is planning to continue moving ahead on the agenda the agency has already set.
80509
Companies, government agencies, schools and other institutions are spending more to protect ever-increasing volumes of personal data such as credit card and Social Security numbers with more sophisticated firewalls and encryption, but the investment often is too little, too late.
263128
Remember PKI, public key infrastructure? The standard fell out of fashion at the end of the last tech boom, but experts at a recent conference on standards for business applications see a resurgence in the works.