Insta DefSec Security Systems

1
Insta DefSec Security Systems

• Security Products and Solutions
• Sales Presentation

2
What does Insta sell?

• Solutions
• include both Insta and some third party products
  (Insta white labelled) all available to
  channel partners
• All PKI based (Insta Certifier)
• Products
• Insta Certifier
• Insta Token Master
• VoiceCrypto
• IPCrypto
• ICM
• Services
• Managed PKI
• Root CA services (to Insta Certified Partners)

3
Insta Security Systems solutions

• Identity Management Solutions
• Insta ID
• Insta Control
• Insta Mover
• Insta e-mail Security
• Insta Encryption Solutions
• Speech and data encryption solutions
• Insta Partnering Solutions
• Crisis Management
• Partner Networking
• TETRA Key Management and
• Security Solutions

VoiceCrypto
Installation
Help Desk
Security- analysis
Certifier
Token Master
Training
3rd party components
4
Why solutions?

• Customers look for solutions that are
  compherended with services
• Easier to understand sell
• Answers to specific problems and issues (like
  e-mail security)

5
PKI products and services

• Insta PKI Platform
• Insta Certifier A complete public-key
  infrastructure (PKI) platform
• Insta Token Master Token personalization
  software
• SSL certificates
• Managed PKI
• BS7799 certified Insta Service Center
• Other certifications coming WebTrust

6
Encryption Products and Services

• Insta VoiceCrypto
• For strong security speech enryption
• Insta IPCrypto
• Data encryption
• Based on military and government standards

7
Partnering Products and Services

• iCM
• Interorganisational Crisis Management
  situational awareness solution, MIP interoperable
• Partner Net
• Collaboration solution for parnering net

8
Insta Technology Framework

• Public Key Infrastucture (PKI)
• Identity Management solutions
• High Security Remote work (VPN)
• User administration Authentication, Access
  Control, Authorisation
• Single sign on
• SOA
• federated identities
• Mobile technologies, Mobile IP
• Ajax

9
Markets and products

• Finland Whole product range
• Europe / UK CA products, Managed services, Insta
  Mover (software)
• Asia
• India CA products, Managed services,
  VoiceCrypto
• Others CA products, Insta Mover (software)

10
Customer Segments

• Banking Finance
• CA products services
• VPN, Mover
• Healthcare
• CA products services
• Mover
• Government
• CA products services
• VoiceCrypto
• Corporations 500
• Mover
• CA products services

11
Insta Partnership Program

• Draft

12
Insta Partnership Program

• Aims to develop standard processes and policies
  for Channel development and management
• Takes into consideration common plans, resources,
  budgeting and responsibilities

13
Partnership Program Objectives

• To create win-win situation for both parties, to
  enhance partner business processes for fast
  market entry and thus more profitable business
  offerings

14
Insta Partnership models

• Channel partners
• Insta Certified partners reselling and servicing
  partners. Setting up service centers for CA
  services.
• Insta Sales partners Resellers for Insta
  Products
• Technology partners providing technologies and
  products for Instas offering (third party
  products), joint product development.

15
Insta Certified Partner

• Small number of qualified partners
• Preferably one/few in each main market areas
• Building Insta Service Centers
• Insta audits service center and processes
• Have at least two Insta Certified Partner
  trained engineers and representatives and
  ability to train own resellers
• Insta invests in setting up demo environments,
  pre-sales training and support
• Partner commits to Insta and Instas processes
• Joint business planning
• Reviews and reporting quaterly
• Action plans yearly
• 1st line support (both pre-sales and after-sales)
  by partner, 2nd line by Insta

16
Insta Sales Partner

• Reseller of Insta products
• Can be a number in various markets
• Have one trained engineer/representative for
  Insta products
• 1st line support (both pre-sales and after-sales)
  by partner, 2nd line by Insta

17
Partnership Program

• Partnership Process
• Agreement principles
• Training
• Technical support and maintenance
• Sales and marketing support
• Resources
• Marketing and sales plans budgets
• Review process and partnership management

18
Training to partners

• Insta Training Center
• Insta Certified Partner
• Three-day training course for engineers and
  technical representatives
• Insta Sales Partner
• One day training course for engineer and
  technical representatives
• Yearly Insta training days for partners

19
Support and maintenance

• Insta Partner Web
• Technical infrastucture environment
• Documents, requirements etc.
• Technical resources requirements
• Skills required and needed from personnel
• Building demonstration environment (for Insta
  Certified Customers only)
• By Insta personnel on-site partner site
• Supporting with few first customer
  implementations
• Technical help-desk and support
• Maintenance of software etc.

20
Marketing and Sales support

• Materials
• Brochures
• White papers
• Demonstrations
• Customer cases
• References
• Common marketing effords
• Trade shows, seminars etc. Events
• Brand building and awareness by Insta
• Insta sales / executive personnel present at most
  important events (road shows etc.)

21
Resources

• Sales and partnership management
• Development phase
• Sales training and support, materials etc.
• Technical
• For training
• Support
• Building demo environments
• Continuous support

22
Review and partnership management

• Marketing and sales plans reviewed every half
  year and further plans made (Insta Certified)
• Review done by manager responsible for
  partnership account
• Reporting with a common tool
• Monthly partnership letters
• Extranet solution to partners for resources
• Yearly partnership days

23
Sales Arguments

• Why certificates compared to other authentication
  methods?
• Security (no better solution available though PKI
  complex)
• Multiple use (secure)
• Only Single-Sign-On method that is waterproof
• Digital Signature possibility
• Why Insta Certificates?
• Small and flexible
• BS7799 Certified Services
• Service models
• Strong in technology (standards)
• Price competitiveness
• In any case, PKI cases are coming!!! Once again

24
Applications for PKI

• PKI is an enabling technique, certificates are
  used for example in
• Web server security (SSL server certificates)
• Digitally signed and encrypted e-mails (S/MIME)
• Strong authentication of remote access VPN users
• Centralized management of gateway keys in
  site-to-site VPNs
• Strong, two-factor authentication for web single
  sign-on (SSO)
• Windows (2000 and XP) domain logon with smart
  cards
• SSH Secure Shell for secure system administration
  and application tunneling
• Smart card logon to wireless LAN using EAP-TLS
• Non-repudiation with digitally signed web forms
• Smart card logon to ERP applications (e.g. SAP)
• and so on...

25
Insta PKI platform in a Nutshell

• Why ?
• To issue digital certificates
• To revoke valid certificates
• To publish certificates CRLs
• What ?
• A complete public-key infrastructure (PKI)
  platform
• Interoperable and flexible
• Standards based implementation
• How ?
• Strong two-factor authentication based on smart
  cards and tokens
• Integrates to heterogeneous network environments
• Centralized authentication management

26
Insta Certifier Benefits (1/2)

• Flexible
• Installation on one or several different hosts
• Servers / services can be easily doubled, tripled
  etc. for scalability and security (e.g. for DoS)
  without extra cost
• Easy to customize for customer needs
• Wide multiplatform support
• No separate client applications needed
• Grows from very small to very large installations
• Adapts to existing environment
• Install, configure and just leave it running
• Very strongly focused on satisfying customer
  needs quickly
• The policy configuration features are what makes
  Certifier one of the most flexible and powerful
  PKI products we have seen NSS group test report

27
Insta Certifier Benefits (2/2)

• Extensive support for two factor authentication
• Basically any token/SC through PKCS11 and CSP
• User based enrolment (browser)
• RA based enrolment (Token Master)
• Factory based enrolment (Token Master / CMPClient
  / 3rd party sw)
• Standards-based
• No proprietary interfaces
• No proprietary interpretations of standards
• Enables easy connection to 3rd party sw/hw
• No vendor lock in
• UTF-8 out-of-the-box
• Cost-efficient
• Includes commercial database (no extra cost
  unless using another)
• Includes all the functionality (all
  configurations with only one price)
• Competitive and simple pricing

28
Materials available (public)

• Coming (fall 2006)
• Use scenarios
• Certificate use in an organisation
• Strong authentication and access control
• Strong authentication in mobile devices
• Digital Signatures
• Glossary
• Customer cases
• Insta solutions for eBanking
• Insta solutions for healthcare
• Insta solutions for Governments

29
Materials (for partners only)

• Certifier Material
• Insta Certifier Product Description
• Insta Certifier Customization Reference
• Insta Certifier Interoperability Quide
• Insta Certifier Administrators Quide
• Coming
• Introduction and implementation quide for Insta
  products for Insta Partners
• Insta Partner Web (FAQs etc.)
• Future plans
• Customer cases from partners globally
• Joint implementations

30
Cases

• eTampere
• City of St. Petersburg
• Health ID cards (hospital districts)
• MediMove
• Central Government
• Bank VPN utilising USB tokens
• Kvaerner Power partner net solution
• Corporate ID card

31
Insta DefSec OyP.O. Box 174 (Finlaysoninkuja 21
A)FI-33101 TampereFinlandTel 358 20 771
7111Fax [phone]www.certificate.fiwww
.insta.fi