Kyberpass Launches Next Generation TrustPlatform

Kyberpass first to combine Web Services and Secure SSL VPNs for global B2B integration and offers complementary plug-ins for secure e-mail, digital signatures and extranet

OTTAWA, September 30, 2002 – Kyberpass® Corporation, a leading provider of business integration software for trusted e-commerce today announced the next release of the Kyberpass TrustPlatform™, the first network-centric, B2B integration platform for securing both XML Web Services and SSL Virtual Private Networks (VPNs). The Kyberpass TrustPlatform makes it easy and affordable for enterprises to engage in e-commerce activities with customers and business partners, regardless of their back-office platforms or applications. Kyberpass TrustPlatform is designed to provide flexibility to an enterprise’s IT architecture by extending the life of an enterprise’s existing systems and applications.

With a unique network-centric approach that eliminates the requirement to do back-office integration, the Kyberpass TrustPlatform is deployed at the perimeter of the network to securely connect customers and business partners. It combines a Security Server, Browser/Desktop Plug-ins and a Developer Toolkit and addresses a number of business and technology needs including application integration and extranet VPNs for anytime, anywhere access. Kyberpass is offering the Desktop Plug-ins at no extra charge.

"Organizations around the globe are faced with the challenges of securing the Virtual Enterprise,” said David Kosiur, senior analyst Network and Telecom Strategies for the Burton Group. “Enterprises have been turned inside out and the need for security now spans business partners, B2B exchanges and managed service providers. Kyberpass has a strong record of success in both SSL VPN and XML web services security and they continue to lead the way in solving complex B2B integration challenges."

The Kyberpass Security Server
The Kyberpass Security Server is the cornerstone of the Kyberpass TrustPlatform. It acts as a business partner broker that is deployed at the edge of an organization’s network to control customer and business partner access to sensitive applications and to ensure the correct handling and routing of business transactions. The Security Server supports the following functions essential to trusted e-commerce: strong user identification and authentication, data confidentiality, data integrity verification, non-repudiation and tamper-proof logging.

The Security Server is built upon a foundation set of system and security services that are common to all business partner integration solutions, plus additional services that can be loaded to meet specific functionality requirements. These services include:

• Common Services are the Security Server libraries, configuration files and system services that are common to all deployments including cryptographic libraries, configuration files, failsafe services, audit logging services, secure transport service, proxy service, and application programming interfaces.
• Extranet Services can be installed on the Security Server to provide features and functionality to support client-less, SSL-based Extranet VPN solutions. Extranet Services include Intranet extension services, Microsoft networking services, back-office single sign-on services, advanced application logging and policy services, and firewall tunneling services.
• B2B Integration Services can be installed on the Security Server to provide features and functionality to support XML web services solutions. B2B Integration Services include the handling, security processing, logging, and routing of XML-based business transactions.
• PKI Validation Services can be installed on the Security Server to provide features and functions to support the use of digital certificates and digital signatures for both XML web services and Extranet VPNs implementations. Support is provided for all major PKIs including Baltimore, Entrust, Identrus, Microsoft, Netscape, RSA and VeriSign.
• Marketplace Extensions can be installed on the Security Server to enable additional features, functionality, services, or specific operating rules to follow when the Security Server is deployed within a specific marketplace or B2B exchange such as Identrus, SWIFT or the Canadian Payments Association.

Desktop Plug-ins
The Kyberpass TrustPlatform also includes a set of optional plug-ins at no additional cost that can be pre-configured and downloaded from a central web site and installed on Windows-based workstations to interact with the Security Server for providing additional business integration capabilities.

• Extranet Plug-in provides secure SSL-based access for any application on any platform including legacy applications, commercial off-the-shelf (COTS) applications, remote file systems and e-mail servers.
• Signing Plug-in allows end users to digitally sign e-business transactions that can be later be validated downstream by back-office applications using the PKI Validation Services of the Security Server.
• Secure E-mail Plug-in for Microsoft Outlook allows messages to be digitally signed and/or encrypted prior to being sent. It also decrypts the message and validates the digital signature in real-time using the PKI Validation Services of the Security Server.

Developer Toolkit
The Developer Toolkit provides a comprehensive developer environment for further extending the capability of the Kyberpass TrustPlatform. It provides a developer with the documentation, libraries, application programmer interfaces, and sample code to develop custom extensions to the Security Server and/or Plug-ins to meet unique customer security and business requirements. APIs offers the ability to extend the Kyberpass TrustPlatform in several ways including:

• Traffic Analysis Procedures: The Security Server includes a Traffic Analysis Procedure (TAP) API that allows a TAP data stream filter to be attached to a proxy definition for interaction with the data stream of an application session. When a TAP is applied, each TCP/IP data packet is passed to it for analysis and processing prior to sending the packet to its final destination. Both client request and server response packets are sent to the TAP.
• Service Handlers: The Security Server includes a Service Handler Interface (SHI) that can be used to develop service handlers for processing XML web service transactions and integrating back-office applications. Service handlers can be written in any language and do not require any knowledge of cryptography. They are simple to implement with web and legacy application servers using CGI scripts, Java applets/servlets and ISAPI DLLs.

Platforms Supported
The Kyberpass Security Server is available on Windows 2000 Advanced Server, Sun Solaris and IBM AIX. Linux support is planned for a future release.

Availability
The Kyberpass TrustPlatform v5.4 is currently in beta. Commercial availability is planned for January 2003.

About Kyberpass
Kyberpass is a leading provider of B2B integration software for trusted e-commerce. Global enterprises, Identrus banks, managed service providers and governments use the Kyberpass solution to trust enable payment systems, XML web services, VPNs and e-mail. Our unique middleware architecture accelerates implementation and reduces integration costs, while creating new revenue opportunities and streamlined business processes. With integration partners like IBM, Unisys, Logica and TRW, Kyberpass provides the best platform for secure, scaleable and manageable e-commerce architecture. For more information about Kyberpass Corporation, please visit www.kyberpass.com.

For more information, please contact:

Robert Lendvai
Kyberpass Corporation
613.727.6556 x303
rlendvai@Kyberpass.com

Maggie O’Lett-Patterson
High Road Communications
(613) 236.0909
MOlett@HighRoad.com

Copyright © 2001 Kyberpass Corporation
Legal Notices