eSecurity Services cross border

1
eSecurity Services cross border

• Sven Falcke
• Senior Vice President
• eSecurity
• BBS AS

2
BBS History3 Decades of Experience in National
Critical Services
The banks introduce their own girosystem.
1972
In 1970 the savings banks and the commercial
banks jointly establish Bankkort AS and The
Commercial- and Savings Banks Credit card
company.
Bankgiro ? Giro systems
1987
Settlement ? Interbank systems
1991
BankAxept ? Card systems
1943
1945
1969
1970
1972
2000
eBilling EBPP ? Information systems
The commercial banks establish their own
Giro- Central and founding The Bankgiro Central.
2001
BankID ? Trust services
Bankkort AS og BGS Merges, and BBS is
established.
2006
ATMs and cashdispensers
The Norwegian Postal Administration launches
Giro payments.
3
BBS TodayOffering End Secure Electronic Services
BBS Technology
Payment Services
Trade and Purchase
Trust Services
Information Services

• gt Qualified Certificates
• gt Managed PKI Services
• gt Multi-ID Authentication
• gt DNV Global Validation
• gt One Time Code
• gt Signing Solutions
• gt Mobile eID/ Signature

• gt eInvoice B2C/B2B
• gt Direct Debit
• gt Paper based
• gt Dir.rem./ Egiro in.
• gt Egiro out payments
• gt Net-giro
• gt Invoice hotel

gt Collection gt Archive gt Distribution gt
Scanning gt OCR/Egiro in. gt BBS Online gt Net-post
gt Smart cards/ EMV gt Terminal solutions gt
E-Commerce gt Mibibank gt Automates gt Mobile gt
Collection
BBS Infrastructure
Customer Service
Customer Service
Customer Service
Customer Service
4
Our norwegian customers at Porvo 13
5
BBS HistoryWhat is driving Electronic Security?
Mobile is part of lifestyle. More Services are
now available.
Electronic Business
E.g., Online shopping, payments, e-banking,
procurement etc.
Self Service
End users much more in control. New demands on
service quality.
Integrating EU Markets
Cyber Crime
Regulations/ Compliance to control cyber crime
92 attacks on banks. Phishing doubled in 2007
from 2006.
6
Track RecordGlobal Service Capabilities,
Certifications

• Year 2008 Selected by a major Baltic Telecom
  Operator for Qualified Certificates
• Year 2007 Established DNV Global Validation for
  Multi-Nationals and Governments
• Year 2007 Delivered Nordic Multi ID Signing
  service for Insurance, Real-Estate Companies
• Year 2007 Delivered Global PKI for an
  International Communication Enterprise
• Year 2007 Established Worlds First
  International Mobile Signature Test bed
• Year 2004 Delivered common One-Time-Password
  service for 24 banks
• Year 2003 Recognized for Excellence by European
  Foundation for Quality Management
• Year 2002 Certified according to BS 7799.22002
  (security certification)
• Year 2001 Reached an agreement with Norwegian
  Banks to establish BankID Solution
• Year 2001 Delivered Identrus Global PKI Service
  to Nordea Banks in 8 countries
• Year 2000 Established in-house BBS-ID to secure
  all high value transactions

7
E-Security PortfolioComprises Infrastructure and
Value Added Layer
8
Managed Service ModelReady to (re-)use gt Low
Risk gt Short Time to Market
9
Complete solutions for cross border electronic ID
RELYING PARTIES
BBS Technology
Fast/Safe/User friendly
Easy
Complete service
High quality
Competence
Easy implementation Low implementation
cost Integrated with standard software Open
standards
Stability Security Integrity
Solves complex customer needs Maintenance and
hosting Offers value added services Enabled for
international use
Leading PKI-competence center in Europe Leading
innovator
ISSUERS
10
Thank you!

• sven.falcke_at_bbs.no

11
Multi-ID ServicesAuthentication, Signing, Long
Term Archive

• Rule based MultiID signing
• Signature workflow service Service returns
  signed document
• Multiple signatures on same doc
• Parallel and sequential signing
• Alerts signers when document is ready for signing
  via sms/ email

12
Signing SolutionsSecure Digitization of Workflow

Combination
Serial
Parallel

• Signing through a set of pre-defined rules
• By defined persons
• With/without notification
• Within defined timeframes
• With defined IDs
• Through defined channels

13
Mobile Signature ServicesTechnology Level
14
Wireless PKI (1 of 2) Use case Logon
User dialog Accept using ID-PIN
Input UserID
Enterprise
User ID
Web page
Comm. SW
Mobile Network
Signing challenge
WPKI Service
API
Signed challenge
Server component
BBS deliveries
15
Wireless-PKI (2 of 2)Integration towards Banks
Payment Gateway
- User Signature - Certificate content Serial
number Issuing bank - Merchant Signature -
Certificate content Serial number
Issuing bank - Order Payment info. (Value,
currency, order date, payment date...)
Payment Reservation/ Clearing
Banks Payment gateway
Payment OK
Merchant
Account number/ Certificate info database
16
Experience Summary

• With 60 full-time resources delivering eID
  services, BBS has one of the largest e-ID
  organizations in Europe and largest in Nordics.
• Competence on leading CA platforms (Cybertrust,
  Entrust, Nexus)
• Competence on value added services
• Successful delivery experience
• Towards banking, payments, m-commerce, work-flow,
  etc.
• Towards all major segments (banking, telecom,
  enterprise, public sector).
• Towards national ID schemes and enterprise cases
• Towards local and international players
• Towards various electronic channels (PC/
  Internet, Chip cards, mobile/SIM)
• For OTP services in hardware token, chip card and
  mobile form factors

17
(No Transcript)
18
(No Transcript)
19
(No Transcript)