The needs of the commercial market in the field of digital processing, are much larger than those provided by most tools. Economic growth enforces business processes to be easier and faster with the use of the Internet. The electronic signature as a way to secure only the document and not the whole digital service will not meet the demands of the market. The newly implemented electronic signature must provide security mechanisms for all business processes. This paper provides a general overview of Cloud of Trust - a framework for providing security services for a variety of electronic transactions.

1. ©2013 Trusted Information Consulting Sp. z o.o.
Trust services for business
processes
Michał Tabor
Trusted Information Consulting
Międzyzdroje, EFPE 2013

2. ©2013 Trusted Information Consulting Sp. z o.o.
Agenda
Cloud of Trust
Components of
the cloud

3. ©2013 Trusted Information Consulting Sp. z o.o.
Motivation
Deliver electronic transactions
services suitable the business
Exploit the potential of experience in
building PKI
Learn from mistakes:
– Solutions not understandable for society
– Unfitted business model

4. ©2013 Trusted Information Consulting Sp. z o.o.
Cloud of Trust
Workflow definition
User needs
definition
Workflows
User needs

5. ©2013 Trusted Information Consulting Sp. z o.o.
Cloud of Trust
Risk mitigation
User
Commitment
Verification
Authorization
Confirmation
User
Authentication
User
Authentication
Trust
Security
Workflows
User needs

6. ©2013 Trusted Information Consulting Sp. z o.o.
Cloud of Trust
Risk mitigation
User
Commitment
Verification
Authorization
Confirmation
User
Authentication
User
Authentication
Trust
Security
Workflows
User needs

7. ©2013 Trusted Information Consulting Sp. z o.o.
Trust service

8. ©2013 Trusted Information Consulting Sp. z o.o.
TRUST CLOUD SERVICES

9. ©2013 Trusted Information Consulting Sp. z o.o.
SIGNATURE SERVICE

10. ©2013 Trusted Information Consulting Sp. z o.o.
SIGNATURE SERVICE
Signature creation
assistance
Mitigates risk
Assures signatures
PKI 2.0 Lightweight
Certificate Signature
Server Signing
Standard PKI Signing

11. ©2013 Trusted Information Consulting Sp. z o.o.
WORKFLOW SERVICE
Process control
Signature collection
Document
dissemination
Registred email

12. ©2013 Trusted Information Consulting Sp. z o.o.
DOCUMENT REPOSITORY
Authenticity
Integrity
Long term preservation
Translation
Smart paper
Notary service

13. ©2013 Trusted Information Consulting Sp. z o.o.
ATTRIBUTE SERVICE
Private data
Registers and databases
State based attributes
Declarations
External attribute
services
Bank confirmations
Trusted profile
STORK attributes
exchange

14. ©2013 Trusted Information Consulting Sp. z o.o.
CONTROLS SERVICE
Authentication
Authorization to signature
service usage
Workflow based controls
Autorisation to attributes
usage
Passwords, SMSes,
SAML Authorization
WSS Authorization

15. ©2013 Trusted Information Consulting Sp. z o.o.
SIGNING DOCUMENTS
Signing Envirioment

16. ©2013 Trusted Information Consulting Sp. z o.o.
MULTIPLE SERVICES

17. ©2013 Trusted Information Consulting Sp. z o.o.
Trust exchange

18. ©2013 Trusted Information Consulting Sp. z o.o.
Thank you for your attention
Michał Tabor
michal.tabor@pki2.eu
http://twitter.com/Michal_Tabor
http://pki2.eu