May 5, 2000 Confidential Information of Entegrity Solutions 11

PKI Forum WorkshopPKI Forum Workshop

Art GoldbergArt GoldbergSVP –Corporate Development and Chief Strategy OfficerSVP –Corporate Development and Chief Strategy Officer

April 22, 2023 Confidential Information of Entegrity Solutions

““Why PKI Ain’t Happenin…Why PKI Ain’t Happenin…”

“at the rate that we had expected and hoped! ”

May 5, 2000 Confidential Information of Entegrity Solutions 33

The Top Four Reasons Why The Top Four Reasons Why “PKI Ain’t Happenin’”… “PKI Ain’t Happenin’”…

1. Lost sight of the “Proportionality Principle”

2. Infrastructure doesn’t solve business problems… and solutions that utilize it have been few and difficult

3. PKI Industry is fragmented and does not support interoperability

4. It is expensive to put in place a PKI infrastructure

May 5, 2000 Confidential Information of Entegrity Solutions 44

4. 4. It is expensive to put in place a PKI It is expensive to put in place a PKI infrastructureinfrastructure

Initial investments can be very high Issuance of certificates to the entire community

is time consuming and cumbersome Certificates are not for ever and need to be

maintained Outsourcing only addresses the initial investment

costs

May 5, 2000 Confidential Information of Entegrity Solutions 55

3.3. PKI Industry is fragmented and does not PKI Industry is fragmented and does not support interoperabilitysupport interoperability

No two certificate authorities issue certificates that are identical

Standards have not matured Cross certification is still a dream Client side software – “Heavy vs. thin (non)

client”

May 5, 2000 Confidential Information of Entegrity Solutions 66

2.2. Infrastructure doesn’t solve business Infrastructure doesn’t solve business problems… and solutions that utilize it have problems… and solutions that utilize it have

been few and difficultbeen few and difficult

Few packaged PKI enabled applications exist. Integration into the applications has been time

consuming, expensive, and difficult. The PKI infrastructure doesn’t solve basic

problems:– e.g.: Single Sign On

Long keys do not make up for insecure practices and facilities.

May 5, 2000 Confidential Information of Entegrity Solutions 77

1.1. Lost sight of the Lost sight of the . . “Proportionality “Proportionality

Principle” Principle”

Only 5%-10% of the applications require the “complete” security that PKI promises.

Less expensive techniques are available as alternatives to PKI for most applications.

Access Management is where the majority of customers are going… with Userid/Password as the dominant authentication method.

May 5, 2000 Confidential Information of Entegrity Solutions 88

The Entegrity SolutionThe Entegrity Solution

Trust Solutions

Custom Standard

We Build…

Delivering…

Security:• Authentication• Authorization• Privacy• Integrity• Non-repdiation&

Trust:• Application• Interoperability• Access to Trust

Service Providers

Access Management

NetCrusader

(Common Authentication )

Directory

SafePages

WebCORBA

EJB SDP

PKI Authorization

Trust Services Platform

Using…

• Professional Services• Trust Application Hosting (ASP)

Supported

By…

©

May 5, 2000 Confidential Information of Entegrity Solutions 99

For Enterprises doing B2B e-Commerce…

AOL The Federal Reserve Bank Identrus BT Penn State University Chase Her Majesty’s Government (UK) Internet Capital Group

Such as…

& 200+ others….

May 5, 2000 Confidential Information of Entegrity Solutions 1010

Scaling and Evolution of Trust SolutionsScaling and Evolution of Trust Solutions

April 22, 2023 Confidential Information of Entegrity Solutions