User-Friendly Digital Signatures
0 likesā¢618 views
Digital signatures verify the identity of the sender (authentication), ensure the message is unchanged (integrity), and prevent the sender from denying they sent it (non-repudiation). Traditional PKI solutions are complex, expensive, and don't allow roaming capability. The Hush Encryption Engine allows users to store their private key on Hush's servers, keeping it accessible across devices while maintaining security through encryption with a user-controlled passphrase. Hush offers digital signatures to authenticate users' online identities.
User-Friendly Digital Signatures
- 1. Page 1 User-Friendly Digital Signatures Jon Matonis, CEO, Hush Communications Digital Identity Forum October 17 & 18th 2000 Marlborough Hotel London, UK October 23, 00 Copyright 2000 Hush Communications Page 2 Overview ā¢ Digital Signatures & the Market ā¢ What are Digital Signatures ? ā¢ Signatures v. Certificates ā¢ Complex PKI Deployments ā¢ The Hush Communications Solution: Technology ā¢ The Hush Communications Solution: Trust ā¢ Contact Hush October 23, 00 Copyright 2000 Hush Communications 1
- 2. Page 3 Digital Signatures & the Market ā¢ Until recently, digital signatures were not considered legally binding within the United States; ā¢ Europe has been quicker to adopt digital signatures as a replacement for the traditional written signature; ā¢ Touted as the link between consumers and e- commerce, digital signatures are an emerging technology poised to generate significantly larger transaction sizes. October 23, 00 Copyright 2000 Hush Communications Page 4 What are Digital Signatures ? ā¢ Digital signatures verify with mathematical certainty that the message, document, or other media received originated from the anticipated sender (authentication); ā¢ Digital signatures ensure that what you send over the Internet is exactly what is received at the other end (integrity); October 23, 00 Copyright 2000 Hush Communications 2
- 3. Page 5 What are Digital Signatures ? ā¢ Digital signatures ensure that someone cannot deny that they authorized a particular transaction (non-repudiation); ā¢ There are multiple ways to create digital signatures, including biometrics, like face printing and retina scans, but the most common methods involve cryptographic algorithms and protocols. October 23, 00 Copyright 2000 Hush Communications Page 6 Signatures v. Certificates ā¢ A digital signature is created by encrypting data with a private key. ā¢ A digital certificate is a public key that is digitally signed by a Certificate Authority (CA). October 23, 00 Copyright 2000 Hush Communications 3
- 4. Page 7 Complex PKI Deployments ā¢ Issuing a digital certificate can cost anywhere from $5 to $10 per customer. ā¢ The enterprise software needed to manage the key, which decrypts and encrypts a message, can cost as much as $10 to $100 a person. ā¢ Consumers must pay a periodic fee for the use of a digital certificate. ā¢ Most signing devices are linked to a particular PC or network. October 23, 00 Copyright 2000 Hush Communications Page 8 Complex PKI Deployments ā¢ The private portion of the digital identity must be accessible exclusively to the owner and must be used to decrypt and sign data. ā¢ Most PKI solutions require that the user possess their private key, which is inherently unsafe and reliant upon properly configured hardware. October 23, 00 Copyright 2000 Hush Communications 4
- 5. Page 9 Complex PKI Deployments ā¢ PKI-based digital certificates are inefficient and cumbersome where a certificate is required to authenticate an individual user. ā¢ Traditional PKI doesnāt have roaming capability. October 23, 00 Copyright 2000 Hush Communications Page 10 The Hush Communications Solution The Hush Encryption Engine ā¢ allows end- users to store their private key on a Hush server. The user doesnāt have to carry a private key, smart card, or store the key on a hard drive. However, even though Hush manages the private key, it is always encrypted and is inaccessible to anyone at Hush or elsewhere. October 23, 00 Copyright 2000 Hush Communications 5
- 6. Page 11 The Hush Communications Solution ā¢ The Hush Encryption Engine ā¢ ensures that no one but you can access your private key. ā¢ The Engine doesnāt tie you to a single computer. ā¢ The Engine is compatible with multiple online applications. ā¢ The Engine works with the Java ā¢ technology in most common Web browsers. October 23, 00 Copyright 2000 Hush Communications Page 12 Hush Technology ā¢ Hush users generate their private key on their own computer first, during signup of installation, and encrypt it with a passphrase. October 23, 00 Copyright 2000 Hush Communications 6
- 7. Page 13 Hush Technology ā¢ And then, upload the encrypted private key to one of the Hush servers. October 23, 00 Copyright 2000 Hush Communications Page 14 Hush Technology ā¢ After that, whenever a user starts a secure communications session, the private key automatically is retrieved from the server. October 23, 00 Copyright 2000 Hush Communications 7
- 8. Page 15 Hush Technology ā¢ And finally, decrypted with the userās passphrase. October 23, 00 Copyright 2000 Hush Communications Page 16 IMPORTANT SECURITY NOTE ā¢ When the private key resides on a Hush key server, it is encrypted with a passphrase. That passphrase NEVER leaves the userās computer. At no point is the private key or any private data accessible to anyone at Hush. Even if Hush were to be subpoenaed, we would not be able to learn or reveal your private key. October 23, 00 Copyright 2000 Hush Communications 8
- 9. Page 17 Hush Digital Signatures ā¢ Hush offers its users the option to digitally sign their email and attachments. ā¢ Hushās digital signature feature is a method for the individual user to authenticate their online identity. October 23, 00 Copyright 2000 Hush Communications Page 18 October 23, 00 Copyright 2000 Hush Communications 9
- 10. Page 19 October 23, 00 Copyright 2000 Hush Communications Page 20 October 23, 00 Copyright 2000 Hush Communications 10
- 11. Page 21 Sending a Digitally Signed Message ā¢ First, the data is signed with the userās private key, which the user retrieved at the start of the session, when the user logs in with their passphrase. October 23, 00 Copyright 2000 Hush Communications Page 22 Signed Message is Transmitted ā¢ Then, the signed data is sent on to its final destination. October 23, 00 Copyright 2000 Hush Communications 11
- 12. Page 23 Verifying a Digitally Signed Message ā¢ First, the signed data arrives at the recipientās computer. October 23, 00 Copyright 2000 Hush Communications Page 24 Verifying a Digitally Signed Message ā¢ Then, the senderās public key is automatically retrieved from a Hush key server. October 23, 00 Copyright 2000 Hush Communications 12
- 13. Page 25 Verifying a Digitally Signed Message ā¢ Finally, the public key is used to verify the authenticity and integrity of the data. October 23, 00 Copyright 2000 Hush Communications Page 26 The Hush Communications Solution ā¢ Hush offers Private Label services as a way for leading companies to brand their secure messaging. ā¢ Trusted Private Label partners control the registration and revocation process. ā¢ Digital signatures are enforced and backed up by the policies of the Private Label partner. October 23, 00 Copyright 2000 Hush Communications 13
- 14. Page 27 Contact Hush Communications Worldwide Sales & Business Headquarters Development Office Hush Communications Hush Communications 22 Upper Pembroke St. 2825 E. Cottonwood Dublin 2, Ireland Parkway, Ste. 500 Phone +353-1-241-0303 Salt Lake City, UT 84121 Fax +353-1-241-0370 Phone +801-990-3490 [email protected] Fax +801-990-3111 [email protected] October 23, 00 Copyright 2000 Hush Communications 14