Thai Digital ID Co.,Ltd. Building Trusted National Root CA - - PowerPoint PPT Presentation

Thai Digital ID Co.,Ltd. Building Trusted National Root CA - Thailand’s Experience ISO27001 Enabling Trust and Security for Reliability of your Business

• TDID & CA Service • TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust Hierarchy • Our Customers • PKI-Enabled Applications 2

TDID Background Established in December 2000, as the first CA Service Provider. TDID Objectives : To deliver the world-class standard CA service Enterprise Personal Device SSL Computer Enterprise Personal SSL Router Enterprise User 3

CA Service Enterprise / Personal / Device Certificate • Highly secure with USB Token validated FIPS 140-1 Level2 • Onboard key generation and cryptographic processing • Asymmetric Key RSA 2048-bit for Private and Public Key • Eliminates Weak Passwords with Two-Factor Authentication • Identity-based and Role-based certificate SSL Certificate Secure Sockets Layer Certificate offers encrypted web site security to assures visitors of the web site's trustworthiness and authenticity. 4

• TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust Hierarchy • Our Customers • PKI-Enabled Applications 5

CA Software Recognized Global Primarily Centralized Leader in PKI Administration Trusted by Government, Rich Policy and User Defense, Finance and Industry Management leaders around the globe Certified Common Criteria EAL4+ Web-based distributed World-class administration Technical Support Flexible go-to- Comprehensive Audit market approaches and Monitoring 6

CA Hardware Internal K5 HSM CA Server1 High Performance with Partitions Administration SSH, SNMP* Network CA Server2 Trust Link Certified Service (NTLS) FIPS 140-2 Level 3 CA Server3 Backup Backup Token Token PED 7

CA Operation (ISO 27001 Compliance) Security Compliance Policy Business Organization Continuity of Information Management Security ACT PLAN Information Asset Security Incident Management Management ISO 27001 Information Human System Resources Acquisition, DO CHECK Security Development & MA Physical and Access Control Environment Security Communications and Operations Management 8

CA Operation (WebTrust Compliance) Assurance Assessment Web Trust Remediation Analysis 9

CA Operation Certified ISO/IEC 27001:2005 Certified WebTrust for CAs 10

• TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust Hierarchy • Our Customers • PKI-Enabled Applications 11

TDID Background Established in December 2000, as the first CA Service Provider. TDID Objectives : To deliver the world-class standard CA Hosting service Interbank Transaction Processing Center Bank of Thailand Management and Company Exchange ธนาคารแห่งประเทศไทย บริษัท เนชั่นแนล บริษัท ศูนย์ประมวลผล ไอทีเอ็มเอ๊กซ์ จ ากัด จ ากัด 12

CA Hosting Service Recognized CA TDID PKI Backend Enterprise Data User Center Personal User Backup Center 13

Imaged Cheque Clearing and Archive System (ICAS) Sending Bank Clearing House Paying Bank (BOT) Customer Data+Image Chq. Data+Image Chq. Data+Image Chq. Data BOT CA 14

Interbank Payment System Bulk & Single Payment ITMX CA User A System BPC CA Directory User B Server SPC RA Web Portal System User C IE Server User D IE User User User User A B C D 15

ATM Outsourcing Service

• TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust Hierarchy • Our Customers • PKI-Enabled Applications 17

Trust Hierarchy Thailand National Root CA Thai Digital ID CA G2 18

• TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust Hierarchy • Our Customers • PKI-Enabled Applications 19

Our Customers Applications User Electronic Financial Services (EFS) DBD e-Certificate DPA Secure e-Transactions e-Tax Invoice & e-Receipt Certificate-based VPNs Security Online e-Data Submission 20

• TDID & CA Service • Standard PKI Environment • CA Hosting Service • Trust hierarchy • Our Customers • PKI-Enabled Applications 21

PKI-Enabled Applications Applications enabled by PKI • Entity Identification • Authentication and Authorization for Web Applications • Electronic Document and Form Signing • Authentication for VPNs • S/MIME Email Signing and Encryption • Application Encryption and/or Digital Signature (non Web) • Desktop Encryption • Wireless/Mobile Security

…Thank You Please visit us Web: www.thaidigitalid.com support@thaidigitalid.com eMail: