The U-trust Consortium, which was selected to provide the Public Key Infrastructure (PKI) for LuxTrust S.A. a company created by the Luxembourg Government and several major players from the private sector in Luxembourg to provide PKI services to Luxembourg citizens - has appointed Cryptomathic as a key technology provider for the scheme. The project is to go live during the second semester of 2007.
Cryptomathic will work alongside the U-trust Consortium to deliver an innovative virtual smart card solution to LuxTrust S.A. This will eliminate the cost of issuing standard smart cards and readers and increase usage amongst citizens by making transactions enabled by the PKI in compliance with the EU regulations including for example the secure filing of official documents like tax returns etc. - user-friendly. The solution will also be used by banks to secure transactions and authentication.
Citizens sensitive data will be maintained on secured servers, provided by Cryptomathic, which store users private keys, essentially creating a virtual smart card. Such a technology enables individual citizens to retain secure control over the data on the server or their virtual smart card - via a remote two factor authentication process, which works with both VASCO Digipass authentication devices and SMS authentication mechanisms.
One of the Cryptomathic servers (the Cryptomathic Authenticator) will be used to authenticate users strongly and the other (the Cryptomathic Signer) to digitally sign transactions and apply a time stamp thus ensuring non repudiation. End-users can use their virtual smart card with enabled Web applications or on their terminals via a middleware application, known as Cryptomathic PrimeInk, to enable them to connect up the PKI services and digitally sign documents. Support for legacy PKI smart cards is also offered.
The PKI infrastructure and the authentication servers are hosted by Clearstream Services and the Signing and Time Stamping servers are hosted by CETREL.
The U-trust Consortium comprises Centre de Transferts Electroniques (CETREL Prime Contractor), Deutsche Börse subsidiary Clearstream Services, e-payments processor HITEC and E-Business and Resilience Centre (eBRC).
Related links: (Open in a new window.)
www.cryptomathic.com
Taken from Information Security Bulletin.