CoreStreet Launches Newest Version of Its Real Time Credential Validation Authority.Business Editors CAMBRIDGE, Mass.--(BUSINESS WIRE)--April 26, 2004 Newest Version Will be the Only Distributed OCSP OCSP Online Certificate Status Protocol OCSP Off-Campus Study Program Solution to Meet Strict Common Criteria (Common Criteria for Information Technology Security) An international standard process for defining security objectives and for evaluating compliance with those objectives. The Common Criteria have largely replaced the Trusted Computer Security Evaluation Criteria (TCSEC), the Canadian Certification Standards CoreStreet, a leading provider of validation solutions for identity management and access control, today announced the immediate availability of the new Real Time Credential Validation Authority (RTC See real time clock. VA) 3.0, the industry's most secure, massively scalable and cost-effective Online Certificate Status Protocol The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 2560 and is on the Internet standards track. (OCSP) system for validating digital certificates. RTC VA 3.0 enables security administrators to revoke an individual's access rights in real time, in any environment, connected or disconnected. RTC VA 3.0 is ideal for government agencies and financial services The examples and perspective in this article or section may not represent a worldwide view of the subject. Please [ improve this article] or discuss the issue on the talk page. institutions looking to bridge the gap between logical and physical environments. RTC VA 3.0 is the only distributed OCSP solution that will meet Common Criteria EAL EAL English as an Additional Language EAL Evaluation Assurance Level EAL Eastern Airlines EAL Emergency Action Level EAL Environmental Analysis Laboratory EAL Evidence Analysis Library (American Dietetic Association) 3 certification once the standard evaluation is completed in Q2, 2004. RTC VA 3.0 includes improved security features, such as enhanced audit logging with digital signatures, enabling an auditor to securely track actions performed in the management interface. In addition, support for Delta CRL's allows administrators to update just new revocations in real time, which can reduce revocation time to a fraction of a second even for large certificate deployments. "RTC VA remains the industry's only secure, massively scalable and cost-effective solution for government agencies, financial services companies and the Global 1000 where mission-critical data in the digital world or buildings in the physical world need to remain secure," according to Phil Libin, president of CoreStreet. "The enhanced security features and significant upgrades in administrative features, add additional benefits to companies looking to buy the only OCSP product of its kind on the market." The RTC VA works by publishing certificate status information in the form of small, digitally signed OCSP responses. These responses can be used to determine the validity of a digital certificate or establish individual privileges or access rights. Unlike previous public key infrastructure (PKI (Public Key Infrastructure) A framework for creating a secure method for exchanging information based on public key cryptography. The foundation of a PKI is the certificate authority (CA), which issues digital certificates that authenticate the identity of ) implementations, the RTC VA does not require securely vaulted responders. By reducing the need for costly security measures such as hardware security modules, server protection and secure communication lines, the RTC VA greatly reduces implementation and maintenance costs for PKI security. RTC VA 3.0 offers the following features and benefits: -- Common Criteria Certification--RTC VA 3.0 is in evaluation at National Information Assurance Partnership (NIAP See Common Criteria. ), a U.S. Government initiative originated to meet the security testing needs of both information technology (IT) consumers and producers. Certification will be completed in Q2, 2004. When completed, RTC VA 3.0 will be the only distributed OCSP EAL3 certified solution on the market. RTC VA 3.0 will be certified at assurance level 3, augmented with ALC (Assembly Language Coding) A generic term for IBM mainframe assembly languages. 1. ALC - Assembly Language Compiler. 2. ALC - Airline Line Control. _FLR FLR Floor FLR Florence, Italy (Airport Code) FLR Flare FLR Florida Lambda Rail FLR Forest Land Reserve FLR Forward-Looking Radar FLR Female Led Relationship FLR Force of Lower Readiness .1. -- Security Enhancements--RTC VA 3.0 features more robust security for accessing and managing the master authority. In addition, RTC VA can support digital signatures for all logging of administrator activity. By digitally signing all audit records, administrators will be able to view who initiated changes and when. -- Support for Delta CRLs--RTC VA 3.0 allows administrators to make new revocations available in real time, allowing an administrator to update just the new revocations. This can reduce the time for revocation publication from minutes to seconds. -- New Database Functionality--The RTC VA 3.0 includes Microsoft's embedded MSDE MSDE Maryland State Department of Education MSDE Microsoft Data Engine MSDE Microsoft SQL Desktop Edition MSDE Microsoft Development Environment MSDE Military Scenario Development Environment MSDE Microsoft Sql Server Desktop Engine MSDE Microsoft Database Engine database engine, without additional licensing requirements. This eases the installation process and further meets the needs of customers. CoreStreet Product Certifications Common Criteria- officially in evaluation DoD JITC JITC Joint Interoperability Test Command (formerly Joint Interoperability Test Center) JITC Joint Interoperability Test Center (obsolete; now Joint Interoperability Test Command) Certified FIPS (Federal Information Processing Standards) A series of publications issed by the U.S. National Institute of Standards and Technology (NIST) that specifies information security guidelines for federal government departments and agencies. 140-2 Availability The RTC VA 3.0 is shipping today and is available worldwide. For more information, contact CoreStreet at 617-661-3554 or visit www.corestreet.com. About CoreStreet CoreStreet is the only provider of massively scalable validation products for identity management and access control. With CoreStreet's Real Time Credentials(TM), organizations can control physical and logical access to buildings, computer networks, applications and devices. Real Time Credentials solutions can be deployed anywhere in the world - in connected and disconnected environments - without having to set up costly and vulnerable infrastructure. CoreStreet's products are designed to secure large, mission-critical applications for military, civilian government, financial services and healthcare customers. The company, headquartered in Cambridge, Mass., holds 14 patents with more pending. For more information, visit www.CoreStreet.com. |
|
||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion