Web Security Vendors Unite to Develop Unified XML-Based Interoperability Standard for Securing Internet Transactions.

Business/High-Tech Editors

SANTA CLARA, Calif.--(BUSINESS WIRE)--Dec. 20, 2000

Entrust Technologies (Nasdaq:ENTU)

Vendors Work Within OASIS Technical Committee to

Create a Single Standard

Marking a significant step towards the establishment of a unified XML-based approach for securing Web transactions, 10 leading Web access management vendors today announced that they would work together to develop a common industry standard for sharing security information.

The group of vendors will work together towards this common goal in the recently announced OASIS XML-Based Security Services Technical Committee (TC) where they plan to discuss existing standard initiatives. The vendors participating in this OASIS Technical Committee include, Baltimore Technologies, Entegrity Solutions, Entrust Technologies, Hewlett Packard, IBM's Tivoli Systems, iPlanet(TM) E-Commerce Solutions, a Sun-Netscape Alliance, Oblix, OpenNetwork Technologies, Securant Technologies, and TransIndigo.

The goal of the committee is to develop an XML-based standard that allows proprietary Web security systems to seamlessly exchange transaction and session details across multiple sites. The announcement of this effort is a major milestone that will pave the way for creating a single interoperability standard for sharing Web security information. This rare show of vendor cooperation will simplify the implementation of Web security systems and enable interoperability between Web security systems.

"It is only through the emergence of a single XML-based security standard that Web and transactional access management systems can realize their promise to form the foundation for secure e-business on the Internet. Such a standard will dramatically simplify the interface between Web and transactional applications, and the underlying authentication and authorization services. It also creates the foundation for Web services to securely interface with other Web services, while preserving the context of authenticated identity and a single user sign-on," said Phil Schacter, Director, Network Strategy Service, The Burton Group. "The collaborative effort of this group of vendors is a major advance towards achieving interoperable security both within and between communities of companies on the Internet."

The first meeting of the OASIS XML-Based Security Services Technical Committee is scheduled for January 9th, 2001.

For information about OASIS and details on how to participate in the Technical Committee visit www.oasis-open.org.

Entrust is a registered trademark of Entrust Technologies Inc. in the United States and other countries. In Canada, Entrust is a registered trademark of Entrust Technologies Limited. All Entrust product names are trademarks of Entrust Technologies. All other company and product names are trademarks or registered trademarks of their respective owners.

Quotes From Participants

Baltimore Technologies (NASDAQ: BALT) John O'Sullivan, Executive Vice President of Engineering

"XML presents an excellent platform for e-security companies to develop standards that will benefit all customers into the future. The OASIS committee is a much needed initiative to ensure vendors are building products based on uniform standards such as S2ML and AuthXML. Baltimore are excited to be involved at the beginning of this initiative, continuing to drive standards and industry first solutions."

Media contact: Erin McNamara, 781-455-5724, [e-mail]

Entegrity Solutions Len Halio, EVP and Co-COO for Product Operations:

"With over a decade of experience providing mission-critical enterprise level application security for e-business, Entegrity is well positioned to provide expertise to advance this effort toward achieving interoperability. Cross vendor security interoperability is the "holy grail" of application security, and it is becoming increasingly necessary in the distributed, multi-application e-commerce world. Interoperability initiatives like the OASIS XML Based Security Services Technical Committee are key to secure global e-commerce across technologies, vendors, and applications."

Media contact: Bradley Palmer, 408-487-8600 x104, [e-mail]

Entrust Technologies (NASDAQ: ENTU) Alex Berson, Vice President and CTO, Portal Technology and Applications:

"Bringing the existing XML-based security standards efforts to an open forum such as OASIS is in the best interest of all vendors and particularly valuable to our customers. We are pleased to be able to drive the unification of the industry's standards efforts and are committed to supporting open standards in our products. OASIS has the unique opportunity to take the best from the previous standards effort to result in XML-based security solutions that will achieve interoperability across companies looking to realize the benefits of secure e-business."

Media contact: Laura Maio, 613-270-3767, [e-mail]

Hewlett Packard (NYSE: HWP) Roberto Medrano, General Manager, Internet Security Solutions Division:

"HP is pleased to participate in the OASIS XML-Based Security Services Technical Committee. Producing a unified standard for XML-based Web security interoperability is key to moving ahead in the new e-services economy. Simpler implementation and reduced market confusion will benefit customers and consumers alike and effectively address the needs of today's demanding Internet environment."

Media contact: Sandy Tuttle, 610-408-6454, [e-mail]

IBM's Tivoli Systems Inc. (NASDAQ: IBM) Bob Blakley, Chief Security Scientist

"Today's announcement has the backing of major players in the security industry, and we are hopeful that this effort will unify the vendor community around a single standard for XML-based secure interoperability. Tivoli supports this effort to unify the vendor community around a single standard because it will help our customers to safely accelerate their e-commerce initiatives."

Media contact: Cas Purdy, 512-436-1211, [e-mail]

Oblix Nand Mulchandani, Vice President of Product Management

"Oblix's customers require the sharing of security information across disparate applications as well as across business partners. We believe that to satisfy the real customer need for true interoperability a single standard has to emerge for securing Web transactions. As a leader in developing e-business infrastructure software, we are pleased to be working with these vendors toward a common standard and look forward to its success."

Media contact: Ann Nash, [phone], [e-mail]

OpenNetwork Technologies Bob Worner, Vice President of Product Management

"OpenNetwork Technologies has a longstanding history of supporting open standards within the industry and we're pleased to be joining this effort. This will reinforce our ability to provide fastest time to market for our customers, as it will allow us to expand DirectorySmart's support to include a wider range of applications based on the approved standard. OpenNetwork is eager to provide support to the OASIS effort rather than see the market fragment over multiple standards."

Media contact: Candice Crain, 727.561.9500 x208, [e-mail]

Securant Technologies Eric Olden, Chief Technology Officer

"Our goal in creating the AuthXML specification has always been to move the industry towards one open interoperability standard for securing Web transactions. We are pleased that the vendor community is joining forces to put the needs of customers and the industry first by creating a single standard that unifies other initiatives with AuthXML. We look forward to working with our peers to quickly define a unified standard."

Media contact: Marc Gendron, Marc Gendron Public Relations, 781-237-0341, [e-mail]

TransIndigo John Weinschenk, CEO, TransIndigo

"This is a major win for the customer, The participating vendors through cooperation and good will are breaking down proprietary standards driving toward open standards and interoperability."

Media contact: John Field, 212-422-1117, [e-mail]