GeoTrust Continues Delivering Solutions to Establish On-line Trust.Business Editors PORTLAND, Ore.--(BUSINESS WIRE)--March 28, 2001 TrustWatch Will Provide Real-Time, User-Friendly, On-line Validation and Revocation The recall of some power or authority that has been granted. Revocation by the act of a party is intentional and voluntary, such as when a person cancels a Power of Attorney that he has given or a will that he has written. Services to Authenticate (1) To verify (guarantee) the identity of a person or company. To ensure that the individual or organization is really who it says it is. See authentication and digital certificate. (2) To verify (guarantee) that data has not been altered. Digital Certificates Prior to Acceptance GeoTrust, Inc. (www.geotrust.com), solving the problem of identity, authenticity, and risk assessment in business-to-business trading, today announced that the patent-pending technology in TrustWatch(TM) is fully integrated as part of GeoTrust's Safe Market(TM) trust services platform. TrustWatch enables participants in a digital marketplace to reliably identify the creator of Web content, assuring that it originated with the expected source. Without having an easy way to check the validity of a digital certificate, users are open to a myriad of risks including fraud or downloading a virus. TrustWatch will help solve this current problem in the eMarketplace -- the inability to easily check the status or validity of a digital certificate. TrustWatch will prevent the situation recently brought to light in statements from Microsoft, Inc. that two code signing A method of ensuring that an executable program has come from a valid software publisher and has not been altered by anyone in between. Also known as "object signing," an EXE, CAB, driver or other executable file is digitally signed and transmitted along with a digital certificate from a digital certificates were mistakenly issued in its name. "One of the major inhibiting factors inhibiting factors inhibiting hormones secreted by hypothalamic neurosecretory cells. to establishing identity in b-to-b transactions resides in the fact that there is no user-friendly way in a browser application A Browser Application is a computer software application that is coded in a browser-supported language (such as HTML, ASP, PHP, Perl, etc.) and reliant on a common web browser to render the application executable. to do real-time status checking to see if a digital certificate has been revoked or if it is still valid before the foundation of on-line trust can be created," said GeoTrust vice president Neal Creighton. Certification authorities (CAs) revoke To annul or make void by recalling or taking back; to cancel, rescind, repeal, or reverse. revoke v. to annul or cancel an act, particularly a statement, document, or promise, as if it no longer existed. their digital certificates in a timely manner when they are compromised but most browsers do not have an adequate way to view the certificate revocation list In the operation of some cryptosystems, usually public key infrastructures (PKIs), a certificate revocation list (CRL) is a list of certificates (more accurately: their serial numbers) which have been revoked, are no longer valid, and should not be relied on by any system user. (CRL CRL - Carnegie Representation Language. Carnegie Group, Inc. Frame language derived from SRL. Written in Common LISP. Used in the product Knowledge Craft. ). Typically, most browsers accept the certificate and allow an on-line transaction or session to proceed as long as the certificate offered by a party has been signed by a recognized certification authority. If a mistake was made in issuing the certificate and the certificate is later revoked as a result, the viewer will not find out without independently checking the CRL, which is seldom done in practice. GeoTrust is in discussions with the leading CAs in the marketplace to put its technology in place to solve the revocation status-checking problem for consumers and businesses. TrustWatch is a free, user-friendly, downloadable application that sits in the Windows(R) taskbar An on-screen toolbar that displays the active applications (tasks). Clicking on a taskbar button restores the application to its previous appearance. Windows 95 popularized this feature. See Win Taskbar. tray of a user's desktop and integrates with leading browser applications such as Internet Explorer Microsoft's Web browser, which comes with Windows starting with Windows 98. Commonly called "IE," versions for Mac and Unix are also available. Internet Explorer is the most widely used Web browser on the market. It has also been the browser engine in AOL's Internet access software. (R) and Netscape(R). While normal browser activities proceed uninterrupted, TrustWatch will connect in the background to the site's SSL certificate Refers to the digital certificate used with the most popular security protocol on the Internet. When you make a purchase on the Web and notice the closed lock icon at the top or bottom of your browser or the HTTPS:// prefix in the URL, it means you have established a secure SSL connection. and simultaneously communicate in real time with www.geotrust.com to offer the user a self-service mechanism for obtaining more information about the entity with which they are about to transact. Once modifications are complete, TrustWatch will specifically show users the revocation status of the digital certificates they are about to accept. TrustWatch will also be able to provide the revocation status of Code Signing and S/mime certificates. In the event the certificate has been revoked, the viewer will be alerted and can reject the transaction. Digital certificates that are vulnerable to inadequate revocation checks include: o Secure Socket Layer (SSL (Secure Sockets Layer) The leading security protocol on the Internet. Developed by Netscape, SSL is widely used to do two things: to validate the identity of a Web site and to create an encrypted connection for sending credit card and other personal data. ) - certificates used during transactions to secure information from the browser to the web server to verify that the https connection is from the proper source. o Code Signing - certificates used by the publisher to sign mobile code so users know the downloadable software has come from the intended source and has not been altered. o Secure Email (S/mime) - certificates that are used to sign and encrypt e-mail messages. In addition to being able to verify the revocation status of digital certificates, TrustWatch will permit the user to explore various facets of the site's trust profile by viewing the site owner's True Credentials(TM). Some tabs on the TrustWatch interface connect to third party data, while others address the content, listing site credentials, endorsements, seals, and authorship information. Other functional areas allow the user to easily manage and view the policies, credentials, certificate validity, and business practices of a given eBusiness transaction or entity to know for certain they have established online business trust. As an expert in the field of on-line risk management services, GeoTrust continues working with its partners to build the supporting infrastructure for determining the identity and trustworthiness of trading partners to promote and facilitate secure Web-based b-to-b transactions. GeoTrust's Safe Market platform is comprised of several key elements, each helping solve critical issues related to on-line trust: TrustWatch, True Credentials, True Identity(TM), True Record(TM), and TrustAdvisor(TM). In combination, this suite of products and services enables participants in a digital marketplace to establish site verification, buyer and seller authentication (1) Verifying the integrity of a transmitted message. See message integrity, e-mail authentication and MAC. (2) Verifying the identity of a user logging into a network. , and site content confirmation. GeoTrust was one of the 15 companies showcased at the Forrester Research Forrester Research is an independent technology and market research company that provides its clients with advice about technology's impact on business and consumers. Corporate facts
Please [ improve this article] or discuss the issue on the talk page. Outlook conference in July. It is one of the most widely respected financial service industry events. About GeoTrust, Inc. GeoTrust Inc. is a leader in the emerging field of on-line trust. With its suite of services and strategic alliance partnerships, the company reduces the risk within b-to-b digital marketplaces by providing buyers and sellers with instant access to a participant's online identity in b-to-b transactions. Built upon a comprehensive collection of participant-disclosed data, third-party and transaction feedback data that encompasses business policies, practices and performance history, these True Credentials value the risk of entering an on-line transaction for trading partners. |
|
||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion