CoreStreet RTC VA First Distributed OCSP Responder to Pass JITC Certification Testing For U.S. Department of Defense.

Business Editors/High-Tech Writers

CAMBRIDGE, Mass.--(BUSINESS WIRE)--Feb. 17, 2004

Real Time Credential Validation Authority Enables DOD to Validate

Digital Signatures for Physical and Digital Security

CoreStreet, a leading provider of validation solutions for identity management and access control, today announced the latest step in its government initiative. The Joint Interoperability Test Command (JITC) has completed the U.S. Department of Defense (DOD) Public Key Infrastructure (PKI) testing of the CoreStreet Real Time Credential Validation Authority (RTC VA) noting that the distributed Online Certificate Status Protocol (OCSP) responder fully complies with "X.509 Internet Public Key Infrastructure Online Certificate Status Protocol, Request for Comment 2560," June 1999. The RTC VA is the first and only distributed OCSP responder to achieve this status.

"The DOD is at the forefront of security with its use of both PKI and smart cards," said Phil Libin, president of CoreStreet. "The RTC VA enables the DOD to validate PKI certificates in both physical and digital environments, making it easy to deploy in any number of environments and is proven to scale to tens of millions of certificates."

With this certification, the DOD can deploy the CoreStreet RTC VA with confidence to manage its PKI deployments, be they physical, such as smart cards, or logical, like secure email. Traditional OCSP responders require a permanent, secure connection to validate certificates. CoreStreet uses Real Time Credentials(TM) embedded with information for validating and authorizing certain activities and access permissions. This makes it possible to distribute the responders to the network edge, thereby reducing cost while increasing both speed and security.

The RTC VA is fully compatible with current security standards such as X.509 digital certificates and OCSP validation protocols. An organization already using PKI products can typically plug in the RTC VA without making any changes to their existing infrastructure.

About CoreStreet

CoreStreet is the only provider of massively scalable validation products for identity management and access control. With CoreStreet's Real Time Credentials(TM), organizations can control physical and logical access to buildings, computer networks, applications and devices. Real Time Credentials solutions can be deployed anywhere in the world - in connected and disconnected environments - without having to set up costly and vulnerable infrastructure. CoreStreet's products are designed to secure large, mission-critical applications for military, civilian government, financial services and healthcare customers. The company, headquartered in Cambridge, Mass., holds 14 patents with more pending. For more information, visit www.CoreStreet.com.