CA, WM-DATA, iD2 TECHNOLOGIES BUILD SECURITY SOLUTION FOR SWEDEN'S LARGEST CONSTRUCTION CO.

Computer Associates International Inc. (CA), WM-Data and iD2 Technologies announced joint development of a fully integrated security infrastructure for NCC, the largest construction company in Sweden. The solution, the largest of its kind in the Nordic region, will help to secure Internet access and eBusiness transactions, while providing the scalability NCC needs to adapt to an increasingly competitive business climate.

"The new infrastructure has made it possible for us to integrate our heterogeneous systems, databases and access points under extremely high security standards," says Hans Bostrom, NCC director of IT security. "The solution will also serve as a solid foundation for all of NCC's future eBusiness investments. Built entirely on existing standards, the new security environment can be easily and cost effectively enhanced, resulting in a very quick return on investment."

The solution includes X.500-based directory catalogs, advanced Secure Single Sign-on (SSO) software, Public Key Infrastructure (PKI) technology and a Virtual Private Network (VPN) service.

CA's eTrust SSO product, a core component of its CA eTrust security suite, allows authorized NCC users to enter a single password to access all appropriate Web-based applications, in- house programs, databases and ERP systems via the Internet.

CA eTrust SSO links the PKI and Smart Cards components of NCC's security infrastructure to user authorization data stored in an X.500 database, and then grants users access to the appropriate applications. Once the user logs on, the system checks to see which systems and levels are considered "accessible," and present a tailor-made user environment.

"Several different Single Sign-On solutions were evaluated, but CA's eTrust SSO provided a much higher degree of standardization," says Bostrom. "The open architecture of CA's SSO makes the solution easily adaptable to our future needs."

NCC's IT environment is vast, encompassing tens of thousands of systems and users, and myriad technologies. Windows NT and Unix serve as application platforms, while Novell NetWare 4.11 handles file and printer server functions. In total, NCC's IT enterprise incorporates nearly 5,000 LAN/WAN clients and more than 2,000 users with external access privilege.

Delivered by WM-Data, the security platform's large X.500 database stores company records and personal information for more than 12,000 employees and 3,000 business contacts at NCC Sweden alone. The information is generated automatically from existing systems around the company. The X.500 multifunctional database provides the ability to consolidate distributed information into a central repository, while leveraging eTrust's SSO's ability to effectively restrict user access.

Security is further enhanced through PKI technology delivered by iD2 Technologies. The company's iD2 Personal client software adds smart card support, 128-bit encryption and the ability to create digital signatures using any standard Internet browser. ID2 Technologies' high-end server software solution, simplifies and accelerates the verification of certificates and digital signatures throughout the NCC security enterprise.

"This far-reaching security infrastructure will provide a tremendous competitive advantage for NCC and serve as an outstanding model for companies interested in harnessing advanced SSO, PKI and X.500 technologies to exploit eBusiness opportunities," says Michael Wirstrom, president, CA Sweden.

By providing the ability to generate digital certificates and private encryption keys, the integrated solution enables NCC users to log safely on to the system via CA's eTrust SSO, write encrypted e-mails and confidently secure their network access. The system also ensures safe eBusiness transactions with subcontractors and clients, and provides a framework for effective internal administration improvement in such areas as Accounts Payable and Payroll Administration.