PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... –...
Transcript of PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... –...
![Page 1: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/1.jpg)
SETCCETadej Puklhead of marketing and sales
PKI PKI –– related technologiesrelated technologies
![Page 2: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/2.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
AgendaAgenda
SETCCE – short company introduction
Results and partners
SETCCE’s products and services
SETCCE’s products in business practice
eKeeper – trusted archive service
![Page 3: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/3.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
SEcurity Technology Competence CEntre
Ljubljana, Slovenia, EU
15 peopleYoung teamHighly educated, experienced and motivated
Over 10 years experience in PKI
![Page 4: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/4.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
![Page 5: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/5.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
![Page 6: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/6.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
![Page 7: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/7.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
Software development through research projects
Research: EU-projects in telecommunications security and privacy protection
Software: Introduction of digital signature in business and governmental processes – Objecticve: fully de-materialized business processes– A wide range of technologies and components
Mission: bridging the gap technology transfer from research projects into industry / commercial sector
![Page 8: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/8.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
Legislative environment
– Act on electronic commerce and electronic signature (+ revisions).
– Act on value added tax
– Accounting standards
– (Slovenian) archiving act
![Page 9: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/9.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
Act on electronic commerce and electronic signature (+ revisions):– In force since 2000– Based on European directives (1999/93/EC,
2000/31/EC)– Framework for equalisation of paper and electronic
format of documents– (Qualified) Digital signature– Management of digitally signed electronic
documents
![Page 10: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/10.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
SETCCE’s products:
– Compliant with EU’s and local legislation– Compliant with global standards– Highest level of security
– Related to Public Key Infrastructure
– Introduction of digital signature (and supporting technologies) in current business practice
![Page 11: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/11.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Company introductionCompany introduction
SETCCE’s products:
– Specialized components intended for system integrators and developers...
– Upgrades / add-ons to existing applications and information systems
– Recognized and used worldwide
![Page 12: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/12.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s reference listSETCCE’s reference list
Some of our partners:nCipherH&S Software AGS&TSRC.SIZZiInstitute Jozef StefanUniversity of Ljubljana, Faculty of electrical engineeringUniveristy of StuttgartIAIK, AustriaT-SystemsTelenor, NorwaySlovenian Chamber of Commerce etc.
...and still looking for fruitful long-term partnerships...
![Page 13: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/13.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s reference listSETCCE’s reference list
Most important users of SETCCE’s technology:– VeriSign, Inc.– Halcom ( Slovenian banks)– SiOL d.o.o.– Datalab tehnologije d.d.– Valmesa Property&Asset Valuations– Slovenian Ministry of Defense– Dafolo S/A– H&S Software AG– Chinese gov’t: tax authority, ZhuHai– Sella bank, Italy– Italian Chamber of Commerce (Infocamere)– Simobil Vodafone, etc.
![Page 14: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/14.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products and services
![Page 15: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/15.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
proXSign product range
![Page 16: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/16.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (www.(www.proXSignproXSign.com).com)
Components and software development kits for:
– Digital signing (W3C XMLDSig standard, XADES and PKCS7) + verification of signatures
– Encryption (asymmetric - W3C XMLEnc),– Timestamping (RFC3161 and XML by Entrust)
– Instant integration!
– Widely used in the banking sector, ERP systems, real-estate companies, telecomm operators, governments, etc.
![Page 17: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/17.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (www.(www.proXSignproXSign.com).com)
Practical examples:– Integration into ERP systems for digital signing of
single electronic invoices or any other documents (one by one)
– In ERP systems: verification of incoming digitally signed electronic invoices
– Integration into workflows (non-disputalbe audit-trail)– Digital signing of payment orders in e-banking– Pharmaceutical industry (tracing drugs from the
production plant to the end-user)
– Timestamp client, encryption tool, W3C-recognized
![Page 18: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/18.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
WebSign
![Page 19: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/19.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (WebSign)(WebSign)
Workflow systems:
– Instant generation of XML electronic forms (based on pre-set templates)
– Secure exchange between involved parties– In the process each party can fill in the e-forms and
apply digital signatures
– Based on web-browser technology– Fully configurable (no limits)– Output = digitally signed XML document (optional
stylesheet). No paper!– Used in governmentnal processes (MoD),
employment agencies, telecomm operators
![Page 20: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/20.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (WebSign)(WebSign)
Practical examples:
– Signing of electronic contracts (ISPs) over the internet, signing of annexes, self-provisioning, etc.
– Student employment agencies (filling in, signing and exchange of work reports)
– Ministry of defense (requests for working tools for newly employeed, ...)
![Page 21: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/21.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
eBiller
![Page 22: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/22.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (eBiller)(eBiller)
Electronic mass-“invocing” systems:
– Automated generation of documents (XML, TXT,..., e-invoices or any other documents)
– Multiple controls and checkpoints are integrated– Automated digital signing of generated documents– Automated generation of messages (S/MIME,
SOAP, HTTP)– Automated distribution
– Used by ISPs, telecomms, banking industry
![Page 23: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/23.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (eBiller)(eBiller)
Practical examples:
– Mass generation and distribution of monthly invoices for users of mobile telephony and internet services
– Monthly banking acount statements
![Page 24: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/24.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
eKeeper
![Page 25: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/25.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (eKeeper)(eKeeper)
Trusted electronic archive service:
– Storage of digitally signed and non-signed electronic content
– According to the legislation– Not really an archive, but rather en electronic
notary– An upgrade for existing DMSs, or as an independent
instance on top of a FS or existing e-archive– Also available as a DMS-bundle
– Used in governmental processes, telecomm operators, ISPs, banking sector
![Page 26: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/26.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s products SETCCE’s products (eKeeper)(eKeeper)
Practical examples:
...to be continued later
![Page 27: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/27.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
Certification authorities:
WWW.SI-CA.ORG
– Set-up of the first CA in Slovenia in 1995– Part of EuroPKI– Still functioning
– No business case in Slovenia
– Experimental and demonstration purposes
![Page 28: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/28.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCE’s productsSETCCE’s products
Custom-projects:
– For large end-customers
– Integration of SETCCE’s technologies into cusomers’ applications
– Custom development of new applications
– Consultancy and educational projects
![Page 29: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/29.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
BottomBottom--lineline
Conclusion: output/result is always adigitally signed document!
Total elimination of paper documents from a business process!
Questions:– how do we store/archive the output?– how do we manage the output?
...electronic documents have “some” limitations!
![Page 30: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/30.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
BottomBottom--lineline
Answer = ... eKeeper
![Page 31: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/31.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
SETCCESETCCE eKeepereKeeper
– General definitions– Formal requirements (integrated in eKeeper)– Functional requirements– What is eKeeper?– What does eKeeper do?– How eKeeper works– Infrastructure / implementation– Extra features– Technology
![Page 32: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/32.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
General definitionsGeneral definitions
Archiving is a set of procedures of submission, retrieval, preservation, maintenance, professional management and usage of documentary and archival material, which is not used for current businessanymore. Such procedures need to be performed over periods defined by formal and legislative requirements.(i.e. archiving is much more than storage)
An archive is a collection of records and documents that have historical, cultural, scientific or business value and are stored on physical media.
![Page 33: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/33.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
FormalFormal requirementsrequirements for eKeeperfor eKeeper
Electronic records must be kept so that:
– Data or content is accessible and usable at any time, – Archived content is preserved in its original form or
in any other form that undeniably represents the original data,
– The origin, time, location and the “owner” of anelectronic record or message are undeniably identifiable
– ...see next page
![Page 34: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/34.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
FormalFormal requirementsrequirements for eKeeperfor eKeeper
Electronic records must be kept so that:
– Technology and procedures used must prevent any sort of modification, alteration or deletion of record,data or content – integrity is guaranteed at any time,
– Complementary data and means for security attributes (e.g. digital signatures) are preserved for the same archiving period as records
– Procedures and means for extending the validity of electronic attributes are accordingly implemented.
![Page 35: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/35.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
FunctionalFunctional requirementsrequirements for eKeeperfor eKeeper
Trusted archive service must have the following basic operations:– Submit data objects to archive– Retrieve archived data objects– Delete archived data objects– Specify an archive period for submitted data objects– Extend or shorten the archive period for an archived
data object– Specify metadata associated with an archived data
object– Specify an archive policy under which the submitted
data should be handled
![Page 36: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/36.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
FunctionalFunctional requirementsrequirements for eKeeperfor eKeeper
Trusted archive service accepts– Raw data– Digitally signed data– Time stamped data– Encrypted data
![Page 37: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/37.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
What is What is eKeepereKeeper??
A solution for long-term electronic archivingA replacement for costly hardware solutions (Centera)
– Based on national and international legislation and directives for long term documents preservation
– Based on global technical directions and standardization initiatives (IETF LTAP Protocol, encryption and hashing algorithms...)
– An upgrade of existing DMSs
– Provides long term stability of• Documents• Digital signatures
– Designed for critical and heavy loaded environments
![Page 38: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/38.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
What does eKeeper do?What does eKeeper do?
It provides evidence that an archived document:
– existed at a certain (clearly defined) time in the past– has not been compromised since it was digitally signed (or
since it was submitted to the archive if it was not signed)– is still legally valid and will remain so for the whole archival
period– still bears a valid digital signature (if applied). Validity of the
signature will be maintained throughout the whole archival period!
In other words: eKeeper can demonstrate inegrity and legal validity of archived digital content for the complete archival period
![Page 39: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/39.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
How eKeeper worksHow eKeeper works
Arc
hiva
l per
iod
(tim
e)
C.A.=conservation attributes!
![Page 40: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/40.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
How eKeeper worksHow eKeeper works
Archived documents are left intact!Conservation Attributes are created upon entryConservation Attributes are used to demonstrate documents’ validity and integrityConservation Attributes are refreshed periodicallyTimestamping is used (DSE!)
Documents’ validity is assured
![Page 41: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/41.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
InfrastructureInfrastructure
Supporting infrastructure of trusted archive service– Communication network (and PKI)– Security mechanisms– Time stamping service– Data storage or document management system– Application systems and services
![Page 42: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/42.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
InfrastructureInfrastructure
Certification authorities
DMS / Data storage
nCipher DSE(internal or outsourced)
![Page 43: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/43.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Extra features (competitive advantage)!Extra features (competitive advantage)!
Grouping of archived documents to minimize the cost of timestamping!
De-grouping without re-timestamping
Privacy protection upon verification of documents
eKeeper is a substitute for dedicated hardware archiving solutions
![Page 44: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/44.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
PlatformPlatform
eKeeper Client– C++ / Java based– Integrated LTAP (long-term archive protocol)– Supported modes
• Conservation attributes generation and storage• Conservation attributes generation and storage + document
storage
– Application programming interface included
![Page 45: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/45.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
PlatformPlatform
eKeeper Server– Java based– Integrated LTAP– Supported modes
• Conservation attributes generation and storage• Conservation attributes generation and storage + document
storage
– Interfaces• DB interface (Oracle, mySQL, MSSQL…)• HSM interface (nCipher)• TCP/IP or SOAP interface
![Page 46: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/46.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
Operation requirementsOperation requirements
Platforms– Microsoft Windows, Linux, Solaris, HP-UX, AIX…
Databases (conservation attributes)– Oracle, mySQL, MSSQL, DB2…
Supported document management systems/environments– IBM Lotus Domino/Notes, EMC Documentum, H&S
PAM Storage…– SAP R/3, Navision…
![Page 47: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/47.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
StandardsStandards
Implemented standards– Data structures
• W3C XML– Interaction
• IETF LTAP• W3C SOAP
– Integrity evidence• SHA1, SHA256, SHA384, SHA512• RIPEMD160
– Signatures• RSA PKCS#7• W3C XMLDSig• ETSI/W3C XAdES
– Evidence record• IETF RFC3161• Entrust XMLTS
![Page 48: PKI related technologiesC. ompetence . CE. ntre Ljubljana, Slovenia, EU 15 people Young team ... – C++ / Java based – Integrated LTAP (long-term archive protocol) – Supported](https://reader036.fdocuments.in/reader036/viewer/2022081517/5fe917f091f92a7da020438c/html5/thumbnails/48.jpg)
Copyright SETCCE SETC
CE
deliv
erin
g tr
ust i
n e-
busi
ness
ContactContact
SETCCE
Jamova 391000 LjubljanaSlovenia, EU
++386 (0)1 477 [email protected]
www.setcce.org