RSA Data Security: Digital certificates, encryption toolkits debut An overview of new products announced at the conference By Elinor Mills

January  1998

Mail this article to a friend

• Sun Microsystems Inc. announced it is bundling its firewall, remote access, and server security applications into a package called SunScreen Secure Net that will provide security throughout the enterprise network for $9,995 for unlimited nodes, or $2,999 for 100 nodes. It will be available in March on Solaris, SPARC, or Intel and supports Microsoft Windows 95 clients and Windows NT nodes. The package includes new versions of SunScreen EFS 2.0 with a Java-based graphical user interface; SunScreen SKIP which offers client cryptography; and Sun Security Manager 4.4 host security system. Sun also announced a new global Security Consulting Practice for customers.

• Sun subsidiary JavaSoft Inc. also announced the release of its latest Java Cryptography Extension software package (JCE 1.2) which can be downloaded for free from http://java.sun.com/jdc/ by users in the U.S. and Canada. JCE 1.2 creates a set of APIs (application programming interfaces) which provide permission-based access control of Java applets and applications and include symmetric cipher technology and key agreement technology. Permission-based access control enables users to specify from which end-users, whether local or remote, Java applications will be accepted.

• IBM announced Global Sign-On for Multiplatforms version 1.5 which provides users with a single sign-on point of entry for all their network and computing resources. It features support for Tivoli's TME 10 for systems management and Lotus Notes, PeopleSoft and OS/400 applications, as well as server support for Windows NT and Sun Solaris, and client support for Windows 95. The Global Sign-On for Multiplatforms 1.5 will be available January 30 at $99 per user or $1,999 per server.

• Symantec Corp. announced Norton Your Eyes Only Version 4.1 for Windows 95 and Windows NT, which offers on-the-fly encryption which automatically decrypts files when users open them and re-encrypts them when the files are saved or closed. The software also provides users with the ability to prevent unauthorized end-users from accessing the system by booting up from a floppy or hard disk without using a valid password, and it blanks the screen and blocks access to the system after a set period of inactivity. Norton Your Eyes Only 4.1 for Windows 95 and Windows NT will be available in mid-February for $89.95.

• The International Computer Security Association (ICSA), formerly the National Computer Security Association, has awarded certification to Norton Your Eyes Only, and will use testing tools developed by TimeStep Corp. to begin certification of IPSec solutions.

• TimeStep Corp. announced that its firewall appliance is shipping. Permit 2505 or Permit 4505 is a combination of TimeStep's hardware gateway and CheckPoint Software Technologies Inc.'s FireWall-1. The appliances are priced from $4,995 to $10,995. The FireWall-1 management console is $11,995.

• Entrust Technologies Inc. has agreed to a joint development, cross-licensing and distribution agreement with Symantec that will result in secure desktop suites based on technology from both companies. Entrust will include in its Secure Enterprise Desktop Solution Symantec's Norton Your Eyes Only and Norton AntiVirus software. Symantec will license Entrust's public-key infrastructure technology for use with those products, as well as for the Norton Secure Desktop Suite. Additionally, Entrust will incorporate into its EntrustFile Toolkit Symantec's Norton AntiVirus API and Symantec will bundle Entrust/Solo digital signature software with its Norton AntiVirus Deluxe software. Meanwhile, Entrust also unveiled Entrust InSource, a new service to help corporate users operate their Entrust public key infrastructure.

• ValiCert Inc. announced that Baltimore Technologies Ltd. will incorporate ValiCert's certification validation technologies ValiCert Server into its UniCERT products, as well as integrate the ValiCert Toolkit into applications. ValiCert also announced that it has expanded its global field trials of its ValiCert Service for checking the validity of digital certificates to include Baltimore Technologies, Entegrity Solutions, Entrust Technologies, GTE CyberTrust and Xcert International Inc. Initial trials were announced last year with certificate authorities Belsign in Europe and Thawte in South Africa and the U.S.

  ---

  Advertisements

  ---

• Baltimore Technologies announced plans to use IBM's SecureWay KeyWorks toolkit to add support for key recovery technology in its MailSecure products. The firm also announced the availability of its Secure Messaging Toolkit for around $325 per developer and $70 per user.

• VeriSign Inc. introduced four new public-key infrastructure software modules as part of its suite of software and services for securing networks using digital certificates. The four modules are Automated Authentication Manager, Automated Lifecycle Manager, Secure Server Manager and Smart Card/Key Manager. Also, British Telecommunications PLC announced plans to introduce a range of digital certificate services under an agreement with VeriSign. BT will establish a certification authority in the U.K. to authenticate and manage digital certificates.

• Finjan Inc. introduced SurfinSuite which it claims is the first Java and ActiveX security software to link desktop and gateway mobile code security into an all-in-one suite. SurfinSuite allows users to control Java, ActiveX, JavaScript, Visual Basic Script and other mobile code Internet technologies that try to enter the network. It offers content inspection and smart filtering at the gateway, as well as customizable security for the entire enterprise or for each user.

• Security Dynamics Technologies Inc. announced its SecurSight family of software that includes SecurID authentication, and the SecurSight Desktop, Manager, Agents, and Agent Toolkit. The products are scheduled to roll out through 1998 in two major releases. Version 1.0 of the SecurSight Desktop, Manager, Agents, and Agent Toolkit is expected to be available in the second quarter of this year, while Version 2.0 of the integrated SecurSight product family is expected to be available in the fourth quarter of 1998.

• GTE Corp. and Hewlett-Packard Co. announced plans to collaborate on public-key infrastructure-based products and services. The combined offerings will feature the GTE CyberTrust Certificate Management System (CMS), for certifying digital certificates, running on HP-UX and HP 9000 enterprise servers. The CyberTrust CMS will be available for HP-UX in the second quarter of 1998. Meanwhile, GTE announced GTE CyberTrust Solutions which includes certification authority hardware, software and professional services.

• Phoenix Technologies Ltd. announced a preboot security technology, Phoenix Preboot System Security Technology, for original equipment manufacturers (OEMs). The company also released its Preboot Crypto API which describes how the BIOS and other preboot agents can interface with the new technology. In addition, Phoenix will work with RSA Data Security Inc. to embed industry standard crypto technologies on the motherboards of PCs from major OEMs.

• RSA Data Security Inc. unveiled plans to release a Certificate Security Suite of components and tools in the second quarter of 1998. The suite is designed to provide commercial and corporate developers with easy-to-use code modules and APIs for popular security features, such as digitally signed and encrypted data, authentication and digital certificate issuing and managing. Later in the year, RSA will offer its S/Mail software as an extension to the Certificate Security Suite. Meanwhile, RSA launched a field trial of the latest version of its BSafe toolkit and encryption engine which includes elliptic curve technology. The company also announced agreements with IBM and Security Dynamics to offer customers a range of security products and to work on joint development of technology and cross-marketing.

• Litronic Inc. announced it has received U.S. government approval to export NetSign as a 1,024-bit identification and authentication product and is enabling NetSign to provide smartcard-based security for Netscape Communicator customers worldwide. Litronic also announced the release of its NetSign Pro which features smartcard integration with desktop file encryption, remote access and secure Windows NT logon. In addition, Litronic launched Litronic Security Management Center to offer corporations the ability to create, administer and restore key pairs and certificates onto smartcards.

• Rainbow Technologies Internet Security Group announced that CryptoSwift accelerates RSA Data Security's S/Pay toolkits for Secure Electronic Transactions (SET) and the CryptoSwift accelerator board reduces processing time for SET transactions. Rainbow also announced plans to work with VeriFone Inc. so that the computationally intensive public-key SET transactions in VeriFone's vPOS point-of-sale merchant software can be offloaded to a dedicated processor.

• Atalla, a Tandem company, introduced a new hardware-based CSP (Cryptographic Service Provider) product for the Microsoft CryptoAPI environment. The Atalla TrustMaster CSP is a PCI expansion card and dedicated security engine that offloads security tasks and manages private keys for Windows NT 4.0-based applications. It will sell for $4,995 and ship in the first quarter of 1998. Meanwhile, GlobeSet Inc. announced that its SET software supports hardware cryptography by using Atalla's PayMaster/PCI Internet Security Processor to handle large volumes of concurrent transactions.

• Security-7 Software Ltd. announced UltraGate which protects enterprise networks from hostile active content downloaded from Java and ActiveX applications. It features agent detection and enforcement at the gateway, operating system hooking to restrict file and network access and the ability to specify a policy for each workstation. UltraGate 1.0 will be available in the first quarter of 1998 with pricing starting at $1,990 for 25 workstations to $8,990 for unlimited workstations. The company also released the latest version of its SafeGate software for protecting against harmful downloaded applications. SafeGate 1.2 incorporates the CheckPoint FireWall-1 software, Java 1.2 language filtering, enhanced security administration and digital signature support. SafeGate 1.2 will be available Jan. 26 for Windows 95 and Windows NT with pricing starting at $1,990 for up to 25 workstations to $8,990 for unlimited workstations.

• PostLinear Entertainment announced the incorporation of Transactor Networks, a new company to develop technologies for the electronic commerce of "digital objects," or objects that exist only in the digital realm such as component software, Java applets and services, digital coupons, tickets and music. Transactor Networks Inc. will ship its first suite of object commerce tools for developers in the first quarter of 1998.

• NCipher Inc. introduced the nFast/KM line of cryptographic accelerators which will allow the secure storage of crypto keys and boost the performance of certificate servers. The nFast/KM product manages secure access, stores crypto keys and access control lists and manages key generation, storage and renewal policies.

• LJL Enterprises Inc. announced its new line of ArmorWare Public-Key Infrastructure components which track existing and proposed standards for certification, messaging, security algorithms and tokens.

• C2Net Software Inc. announced the Stronghold Crypto Engine for Windows NT which replaces the crypto system of Microsoft Corp.'s Internet Information Server (IIS). It boosts the level of security for non-U.S. Web sites running IIS because C2Net develops its products outside the U.S. where export restrictions on encryption are among the strictest worldwide.

• CBT Systems announced the formation of the Internet Security Courseware Consortium (ISCC) to provide training for users on security technology. Companies participating in the ISCC include CheckPoint Software, Cisco Systems Inc., IBM, Intel Corp., JavaSoft, Lotus Development Corp., Netscape Communications Corp., Network Associates, RSA Data Security, Security Dynamics and VeriSign.

Resources

• Sun Microsystems http://www.sun.com
• JavaSoft http://java.sun.com
• IBM http://www.ibm.com
• Symantec http://www.symantec.com
• The International Computer Security Association http://www.icsa.com/
• TimeStep http://www.timestep.com/
• Entrust http://www.entrust.com/
• ValiCert http://www.valicert.com/
• Baltimore Technologies http://www.baltimore.ie/
• BT http://www.bt.com/
• VeriSign http://www.verisign.com/
• Finjan http://www.finjan.com/
• Security Dynamics http://www.securitydynamics.com/
• GTE http://www.gte.com/
• Hewlett-Packard http://www.hp.com/
• Phoenix Technologies http://www.phoenix.com/
• RSA http://www.rsa.com/
• Litronic http://www.litronic.com/
• Rainbow Technologies http://www.isg.rainbow.com/
• VeriFone http://www.verifone.com/
• GlobeSet http://www.globeset.com/
• Security-7 http://www.ssecurity7.com/
• nCipher http://www.ncipher.com/
• LJL http://www.ljl.com/
• C2Net http://www.c2.net/

If you have technical problems with this magazine, contact webmaster@sunworld.com

URL: http://www.sunworld.com/swol-01-1998/swol-01-rsaprods.html
Last modified: