Dutch Burn Information System Secured With Keyware's Central Authentication Server; Web-Based System Uses Biometrics, Smart Cards and Digital Certificates.

Business/Technology Editors

WOBURN, Mass. & ZAVENTEM, Belgium--(BUSINESS WIRE)--April 24, 2001

Keyware (NASDAQ EUROPE: KEYW), one of the world's leading providers of biometric and centralized authentication solutions, announced today that it sold a highly secure identification system to the Dutch Burn Information System (DBIS). The Keyware system precisely verifies the identity of each user and achieves the highest level of security possible through the use of layered biometrics, smart cards, PKI and digital certificates of a Trusted Third Party through Keyware's Central Authentication Server (CAS) with Layered Biometric Verification (LBV).

DBIS is a project initiated by the "Nederlands Brandwonden Stichting" (Dutch Burn Foundation), a non-profit organization that conducts research about burn injuries. DBIS is a Web-based central database containing medical records of burn patients throughout the Netherlands. Only burn specialists who have been originally registered and authorized by a public notary can access the database with an Internet browser.

Keyware develops central authentication solutions that allow organizations to manage all their biometric and non-biometric authentication methods (PKI, smart cards, PINs, passwords, etc.) from one server. According to European legal guidelines regarding the processing of personal data, DBIS must follow strict authentication procedures before granting any user access to the system. Keyware's ability to combine multiple biometric methods such as voice and fingerprints, in conjunction with digital certificates and smart cards, offered the foundation an ideal solution to provide total protection of sensitive patient information while still making the data widely available over the Web.

Luc Taal, DBIS project manager: "Due to privacy regulations we were only allowed by government to implement the DBIS project if we used a highly secure authentication and encryption system. Since we are using the Internet to transport data and present reports, there is a need for a secure infrastructure that addresses assurance, confidence, and confidentiality. We found in Keyware the ideal partner to provide us with that kind of security technology and to get the system up and running."

The Dutch Burn Foundation entrusted DigiNotar, a digital public notary, as Trusted Third Party (TTP) with the information security for the DBIS project. DigiNotar registers the DBIS end-users (surgeons, nurses, psychologists) and issues digital certificates. The DBIS database and Keyware servers are physically stored in the protected buildings of DigiNotar. Personnel, physical and administrative security procedures are in place to protect the DBIS computers, disks, backup tapes, computer rooms, buildings and stored data.

"We think this project perfectly illustrates the need for centralized authentication solutions and enhanced security over the Internet," said Peter Beirlaen, business development manager for Keyware. "The benefits of having a Web-based system that contains medical records, financial data, or other important personal information is clear, but that system must be absolutely safe from unauthorized use. Keyware is proud to provide a solution that meets that need."

How DBIS Access Control Works

Users that are legally registered by DigiNotar and allowed to access the DBIS database are given a smart card that contains their digital certificates and bio-templates. A digital certificate is literally a chunk of binary data that creates a binding between an entity's public key and one or more attributes relating to its identity. The identity can be a person, a hardware device, or a software process. The digital certificate provides assurance that the public key belongs to the identified entity and that the identity possesses the corresponding private key. Thus, two distinct keys are used, one public and one private. A key is a mathematical value that determines how a plain text message is encrypted to produce a cyphertext, and its possession is required to decrypt the cyphertext and recover the original message. The digital certificate protocol has a secret cryptographic value as a private key while the authenticating system uses the public key corresponding to the private key.

A bio-template contains digitized voiceprint and fingerprint data for the user. To verify a user's identity, the authorized smart card user must speak a password and deliver a fingerprint during login. Those are compared with the voice and fingerprint stored on the card. Keyware's Layered Biometric Verification provides assurance that the card user is in fact the registered and authorized cardholder. Keyware verifies that a DBIS user is really who he or she claims to be. If the verification is positive, the system unlocks the private key stored on the smart card. This process finally enables the registered user to access the DBIS database through a firewall and exchange the information via an advanced encryption system.

About DigiNotar B.V.

DigiNotar is a cooperative currently involving 76 connected notaries offices (approximately 200 notaries), who operate together to facilitate 'trust' between parties in relation to internet-based E-commerce transactions. Notaries act as Trusted Third Parties, legalizing (electronic) signatures and supplying organizations with digital identities for secure E-commerce applications. Additionally, DigiNotar offers a service involving "time-stamping" and storing of electronic messages. DigiNotar's coverage of Holland is expected to extend as contacts with professional notarial associations in Belgium, Germany, France, Italy and Great Britain are further developed.

About Dutch Burn Information System

The Dutch Burns Foundation was established on July 16, 1971 with the declared aim to support scientific research relevant to the treatment of burn injury. The Dutch Burns Foundation has contributed to the establishment of the three Dutch burn centers: Beverwijk in 1973, Groningen in 1979 and Rotterdam in 1986. In Rotterdam a burn facility has been in existence since 1974. The Dutch Burns Foundation maintains a staff of approximately 30 persons in the office, including 15 full-time employees. The fundraising staff (14 part-time members) is responsible for the organization of the annual door -to -door collect, carried out by approximately 50,000 volunteers.

About Keyware

Founded in 1996 and quoted on NASDAQ Europe (NASDAQ EUROPE: KEYW), Keyware is one of the world's leading providers of a broad range of authentication solutions for real-world business applications, and a pioneer in the field of biometrics, the technology of verifying an individual by means of personal characteristics such as voice, face and fingerprints. Keyware's Centralized Authentication Server (CAS) with LBV-technology allows companies to manage multiple authentication techniques, including biometrics, from one central server. CAS optimizes security and convenience for physical locations, e-commerce, network, smart cards and telecommunications applications. Keyware's award-winning technology is sold globally through an extended network of OEMs, system integrators and VARs. Co-headquartered in Brussels (Belgium) and Woburn (Mass., USA), you can find more information about Keyware at www.keyware.com.

Keyware plus the Keyware logo, and LBV - Layered Biometric Verification are all trademarks of Keyware. All other company, brand or product names contained in this document may be trademarks or registered trademarks of their respective holders.