|
By offering self-service and online processing, the Internet helps
governments and citizens interact with unprecedented efficiency.
Most government departments offer information over the Internet
on departmental issues, voting procedures, constituent office information,
etc. to make citizens better informed and more responsible for their
government. The Internet is used to collect vast amounts of personal
information. For example, government agencies collect data to provide
demographic and statistical reports. However, governments must consider
the risk of exposing sensitive data over open networks to protect
the privacy of its citizens, and the government’s integrity. Providing
security to ensure that citizens can conduct personal transactions
such as tax submissions and social security applications, over the
Internet, is crucial.
Recent legislations such as the e-Sign Bill, the Government Paperwork
Elimination Act (GPEA) and the Agreement on Internal Trade ensure
that security is the underlying component in any effort to move
services online. A range of consumer protection legislation is in
place in Canada, USA and in Europe that addresses protection of
citizens‘ electronic transactions. These government strategies exist
for business and consumer protection, but often are not implemented
in a timely manner due to the complexities of interfacing with legacy
government systems. But this does not have to be the case.
Kyberpass can expedite these legislative implementations by providing
a common framework for identity verification by efficiently bridging
security across disparate systems. Legacy and current systems can
be quickly linked to government departments and infrastructures
without lengthy delays. Kyberpass allows the best possible security
to be implemented at a fraction of the costs and resources normally
associated with strong PKI-based security. Kyberpass software implements
fine-grained access control, authentication and non-repudiation.
Our success in solving e-security for online government has led
us to pinpoint the most common e-security pains associated with
doing secure business over open networks. Our ability to hone in
on the most current government online legislation developments has
given us the insight and know-how to be a leading provider of Internet
security for online government services. Government agencies, such
as the Ontario Ministry of Health, have backed-up industry-specific
Kyberpass solutions. We have delivered fast, cost effective access
control and protection of data for government-to-employee, government-to-consumer,
and government-to-government agency transactions.
In summary, Kyberpass offers fast, cost-effective solutions to
make PKI work:
|
Pain
|
Solution
|
|
e-Transactions in G2E, G2C and G2G
Exchanges
|
For e-commerce applications, the Kyberpass
e-Transaction TrustPlatform enables institutions involved
in government-to-business electronic commerce to build a cost-effective
secure environment for high-value transactions.
|
|
•
|
I have been given all the identities of the parties within
my exchanges, but how do I know who is accessing my network
remotely?
|
|
•
|
I am unable to validate transactions with others that do
not use the same CA vendor.
|
|
•
|
Now that I am part of an exchange, it is inevitable that
a number of CA vendors will come into play, but how can other
parties using a different CA vendor than me receive my transactions
problem-free?
|
|
•
|
The nature of any exchange is that you will work with a number
of different PKIs, but how can I harness the power of all
of them and correlate their security policies?
|
|
Pain
|
Solution
|
|
Secure Extranets and Web Portals
|
For applications operating within an
enterprise extranet, web portal or exchange, the Kyberpass
Web Access TrustPlatform is a comprehensive trust
infrastructure providing security policy management and validation
services, allowing trusted sessions between users and the
applications they’re accessing over the Internet.
|
|
•
|
I am having difficulty providing user authorization and authentication
to my Web sites.
|
|
•
|
What do I need to take advantage of digital certificate functionality
to secure my web application?
|
|
•
|
Are toolkits the only way to PKI-enable my web applications?
I don’t want to have to rewrite code?
|
|
Pain
|
Solution
|
|
PKI-enabling Government Agencies
|
The Kyberpass
Enterprise TrustPlatform is an e-security middleware
solution for securing every web and legacy application within
a government agencies in days rather than months or years.
It offers rapid and transparent integration of security functions
without custom software development, PKI toolkits or network
modifications.
|
|
•
|
Integrating a vendor’s toolkit is too expensive. Are
there any other options that are faster and cheaper?
|
|
•
|
I am ready to PKI-enable my legacy applications, but my PKI
vendor says they are too old and a toolkit does not exist
for my old technology.
|
|
•
|
A proposed VPN solution does not provide strong user application
and granular access control to specific applications.
|
|
•
|
I hear single sign-on will eliminate the hassle of having
to log-in to each application with different passwords, but
what alternatives are there to the expensive toolkit approaches
to getting SSL?
|
|
•
|
I require a single sign-on to all my government applications
using certificates to leverage the investment I have made
in PKI.
|
|
Pain
|
Solution
|
|
Digital Certificate and Signature
Validation
|
For enterprises and governments operating
a trusted certificate authority, the Kyberpass
Validation TrustPlatform verifies the validity of
digital certificates and digital signatures thereby providing
users with a legal trust guarantee that they can conduct secure
transactions and communications over the Internet.
|
|
•
|
How do I know for certain that the identity of the other
person I am doing business with is not false? How can I ensure
what I send over the Internet is not tampered with?
|
|
