The Federal Bridge Certification Authority (FBCA) enables transitive trust among entities cross certified with the FBCA, to include federal government, state and local government, foreign governments, businesses, and the public. The FBCA challenge was to facilitate the interoperability of that trust and authentication system among disparate entity PKIs; thereby, enabling a user, say in one entity PKI, to verify a digital signature made by another user in a different entity PKI. Isode's M-vault X.500 was chosen for being a single COTS solution, performance, robustness, and having 24x7 support. M-vault X.500 was the right choice for the FBCA and is the right choice for any department, service, or agency needing a solution for interoperability among LDAP and X.500 repositories.
Did you find this white paper useful?
23 out of 50 users found this white paper useful
Related white papers
Exostar: Securing a Military-Grade Collaboration Platform for Aerospace and Department of Defense Partnerships
Exostar's ForumPass incorporates a comprehensive set of online groupware solutions that allow members to work together in real time and exchange information selectively and safely. The challenge for Exostar was...
Large Scale Identity Management: An International Case Study in Aviation Security
Biometric initiatives in passenger and aviation security were passenger registration and access control systems for transportation workers. Biometrics will enhance and enable new check-in processes, which can be integrated in...
Reduce the Risk of Costly Data Breaches: Three Pillars of Data Protection
There are numerous regulations that govern the protection of private, personal and confidential data regardless of whether the data resides on a secure mainframe computer, desktop PC or mobile device...
Two-Factor Authentication: A Total Cost of Ownership Viewpoint
Enterprises have traditionally used strong authentication to secure access to corporate resources remotely. Today OTP-based solutions are the most widely deployed by enterprises. In addition to remote access solutions, more and...
Using Public Key Cryptography in Mobile Phones
As mobile networks expand their bandwidth, mobile phones, as with any other Internet device, become substantially exposed to Internet security vulnerabilities. Public key cryptography is a primary concept in implementing wireless device security....
PKI and VPNs: Enabling Security in an Increasingly Networked World
This paper explores PKI technology, building a PKI, the business case for PKI. It also examines VPNs as the killer application for PKI. The IPSec protocol provides many of these...
MiniPASS: Authentication and Digital Signatures in a Constrained Environment
We describe an implementation of the PASS polynomial authentication and signature scheme that is suitable for use in highly constrained environments such as SmartCards and Wireless Applications. The algorithm underlying...
