Overview Configuration Feature Operation System

'KSignWPKI(Wireless PKI)' provides perfect security infrastructure on fast changing wireless communication environment by enabling CA service through mobile phones, PDAs and other handheld devices.With complying wireless communication standard protocols such as WAP and MME, 'KSignWPKI' provides safe and fast CA service over the wireless communication devices in spite of their limited technical capabilities.



Wireless Internet communication is vastly common these days and more people are using wireless Internet applications and link to M-Commerce (e.g. mobile banking, mobile stock trading, mobile auction service), so there has been more eagerness to verify identity of service users. At work, more businesses and enterprises are lively engaging with wireless Internet enterprise applications to improve working environment for employees by letting them with safe access to enterprise network at free location, and to provide customers with fast and easy of mobile access to service.
Especially, since wireless Internet communication uses open-air access, it is must to have complete security in full measurement. To meet these security needs, 'KSignWPKI' provides secure wireless communication environment by complying cryptography and digital signature technology. Therefore, enterprises with 'KSignWPKI' can transact confidential and important information without disclosing it during transaction over the open-air, and 'KSignWPKI' will report any alteration during data transactions, so the users can have secure service environment too.
As a wireless PKI solution, 'KSignWPKI' provides perfect security fundamentals on rapidly developing wireless communication environment that enabling digital certification service on mobile phone, PDA and other mobile devices.'KSignWPKI' provides fast and safe digital certification service on comparatively limited powered wireless end-user devices by enabling various PKI technologies on wireless communication environment.
Any disputes caused for denying service record engaged with M-Commerce transaction can be absolutely prevented as using digital signature provided by the 'KSignWPKI'





KSignWPKI Components
CA (Certification Authority)
RA (Registration Authority)
KGS(Key Generation System)
LRA(Local Registration Authority)
Web Server, Directory Server, Mail Server(Storage)
OCSP(Online Certificate Status Protocol)
TSA(Time Stamp Authority)

(1) KSignWPKI CA : the system to issue and administrate digital certificate
Provide WTLS digital certificate issuance and administration to content provider(CP)
Provide X.509 v3 format digital certificate issuance and administration function to end-user mobile device
Provide trust between sender and receiver by constructing secure communication channel through digital certificate-based key distribution.
Various security services (e.g. data authentication, non-repudiation) will be provided to clients (e.g. end-users, CP)

(2) KSignWPKI RA : the system to register user information

Verify user identity, register user information and authorize issuance
Register, modify or delete user information

(3) KsignWPKI KGS : the system to generate certificate request form and key
Generate public key pair (ECDSA, RSA) for KSignWPKI CA
Issue certificate issuance request form (support PKCS#10, RFC2511) to issue certificate

(4) KSignWPKI Client (for device)
Support certificate verification modules and Accredit CA certificate administration modules
Provide APIs to verify, generate digital signature and support CP and E2E security services
Issue, reissue, update, revoke and suspend certificate

5) KSignWPKI Client(for CP)

Support mobile devices and E2E security service
Certificate management (e.g. WTLS certificate issuance request, suspension request)
Support certificate verification modules and Accredited CA certificate administration modules
Provide APIs to verify, generate digital signature and support certificate to revoke WTLS certificate



(1) Applied wire/wireless-integrated security foundations
Provide certificate management including certificate issuance and other functions for mobile telecom's users
Support wire/wireless integrated certificate management for each algorithm.

(2) International Interoperability
Applied PKCS and international standard suggested by IETF PKIX
Provide effective service on limited wireless communication environment following to WAP Spec.

(3) Provide same level of security as in wireline environment
Support best-suited security algorithm for mobile phones, PDAs and other mobile devices
  - Hash algorithm : SHA-1, SHA, MD2/4/5, etc
- Symmetric algorithm : Triple DES, SEED, etc
- Asymmetric algorithm : RSA, ECDSA,ECC, etc
Provided best-suited crypto libraries for mobile environment
Minimize dysfunctions caused due providing security service on wireless communication environment.

(4) Support various service environments
Support WTLS Short-lived certificate mechanism
Support CRL, Delta CRL, OCSP to verify certificate
Support wireless Internet protocols such as WAP(Wireless Application Protocol) and
ME(Mobile Explorer)
 
KSignWPKI IN USE

KSIGN was one of the very first companies to develop and introduce commercialized wireless PKI system. KSIGN constructed wire/wireless Root CA for Korea Information Security Agency as well. Such Public Licensed CAs, Korea Information Certificate Authority and Korea Financial Telecommunications & Clearings Institute have also deployed wire/wireless CA with KSIGN's 'KSignPKI/KSignWPKI'. LG Telecom and SheCA, Shanghai have selected KSignWPKI for their eCommerce/mCommerce business operation. It is no doubt that KSIGN is the leader of wireless communication security provider for eCommerce/mCommerce.
'KSignWPKI' provides secure wireless Internet transaction environment enabling trusted mobile Internet banking, mobile stock trading, mobile auction, information retrieval, email service and of course, safer eCommerce.
KSIGN supports various types of end-user wireless/wire access devices (e.g. mobile phone, PDA, PC) and help to construct effective and safe network environment by supporting mixture of various crypto algorithms. 'KSignWPKI' can interoperate with various PKI application products such as Data Validation and Certificate Server (DVCS), Key Management Infrastructure(KMI), Extranet Access Management(EAM), PKI-based Conditional Access System(CAS), Data Encryption Solution(SWAT), Application Security Toolkit (KSignCASE) and other several PKI products.



Server
  - Operating System: Minimum Sun Solaris 2.5/2.6
- System: Minimum Ultra10 (Recommended)
- Memory: Minimum 512 MB (Recommended)
- HDD: Minimum 20M (Requested)
- Smart card reader and smart card: CA server use
Client
  - Operating System: MS Windows9X/NT/2000
- System: Minimum Intel Pentium 200MHz (Recommended)
- Memory: Minimum 32 MB (Recommended)
- HDD: Minimum 10MB
- Video: Minimum SVGA (Recommended)
- Smart card and smart card reader: for PC
Installation Requirement
  - Following software must be installed in advance before installing KSignWPKI 2.0
- WEB Server: Apache web server 1.2/1.3
- Netscape browser: Minimum 4.6/4.7
- Directory Server: Netscape directroy server or Aphlion directory server
- Data Base: Minimum Oracle 8.1.6




Untitled Document