| Device security suite automates certificate management |
Jun. 12, 2007
Mocana has added certificate management capabilities to its flagship device security software suite. The Certificate Management extension to Mocana's Device Security Framework combines a device runtime with a network-based application, with the aim of helping network operators efficiently provision and revoke certificates issued to VoIP phones and other connected devices.
According to Mocana, certificate-based authentication defends better than simple password authentication against SPIT (spam for Internet telephony), hijacked VoIP services, and other device security compromises. However, when managed manually, certificates may simply be left in devices until they expire. The company's Certificate Management extension aims to help network operators easily revoke and re-issue certificates over the network -- for example when devices are re-allocated to new users. This is said to greatly increase the scalability and practicality of implementing certificate-strength authentication in devices.
Mocana certificate management architecture
(Click to enlarge)
The Mocana Certificate Management extension implements the server component of SCEP (simple certificate enrollment protocol), a scalability-oriented authentication scheme originally developed by Cisco and Verisign, and subsequently submitted to the IETF as a draft standard (although it appears to have expired earlier this month). The extension also implements certificate authority and certificate registration authority services, Mocana said.
Touted capabilities and features include:- Certificate enrollment and renewal -- issuing a certificate to a specific user or device and/or renewing that certificate at regular intervals before expiration
- Certificate revocation -- withdrawing a certificate from a specific device for a certain reason, making that device inoperable
- Certificate query -- obtaining the Certificate Authority certificate and/or obtaining the end entity's certificate
- CRL query - obtaining information on whether a certificate has been revoked
- Uses Mocana's FIPS-validated PKCS and crypto libraries
According to Glen Allmendinger, president of Harbor Research, "As connected devices continue to proliferate across all industries, the need to automate security and systems management will be paramount. Connected devices will require security software that can [ease] provisioning burdens."
Mocana CEO Adrian Turner added, "The rate at which connected devices are proliferating is staggering. IT organizations are experiencing the pain of not only making sure those devices are secure when rolled out, but more importantly, managing the on-going security."
Availability
The Mocana Security Management extension is available now for Linux, MontaVista Linux, VxWorks, Nucleus, Solaris, ThreadX, Windows, Mac OS X, (ARC) MQX, pSOS, and Cygwin, the company said.
Related Stories:
(Click here for further information)
|
|
|
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.
Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.
Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.
Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.
Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.
Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.
Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.
Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.
|
|
|
|
|
news feed