Smart cards, tokens & middleware
WTC Geneva Trust Service Provider works with numerous secure processor, secure processor OS, smartcard, card reader, RFID and driver middleware manufacturers to provide a comprehensive secure smartcard and proximity card offering.
Smart Card
The smart card is a high quality multipurpose card that can be used for a variety of functions:
- Secure files and documents
- Securely exchange information
- Secure electronic email
- Securely access facilities (wireless proximity access – special version)
- Securely access desktops and servers
- Digital sign documents and files for more efficient electronic workflow and approvals
In addition to signature and PKI applications, and access control systems, the smart card can be used to secure many other sensitive applications, such as payment systems.
The Smart Card is implemented using a Philips P8WE5032 integrated circuit, which has been certified as ITSEC E4 high.
Features:
- ISO/IEC compatibility
- Secure messaging
- Hierarchical ISO file system
- DES, 3DES
- State machine
- Logical channel support
- Deletion of files (EF) and applications (DF)
- Enhanced hardware security
- High performance
- Implementation of various access controls (authentication)
- Data encryption with asymmetric RSA keys up to a key length of 1,024 bits
- Generation and verification of digital signatures with RSA and DSA
- On-card RSA key generation up to a key length of 1,024 bits
- Digital signature application StarCert has been certified ITSEC E4 high
The provided middeware allows smart card or tokens to be used in all conventional PKI applications such as secure mail, SSL or network login. The smart card middleware consists of an easy-to-use installation routine and the middleware itself. This serves to connect the hardware to applications and operating systems. A utility for token management is also included.
To achieve optimum interoperability the smart card middeware supports more than 70 different smart card operating systems (Starcos, JCOP, CardOS, Multos, SmartCafe, etc.), thus ensuring future longevity and flexibility of the deployed infrastructure.
Supported operating systems:
- Windows 98/ME/NT 4.0/2000/XP/2003 server
- MAC OS X
- Linux
- Solaris
- Windows CE
A selection of the supported applications:
- MS Windows 2000/XP log-on
- MS Windows terminal server/Citrix
- Secure e-mail clients, e.g. MS Outlook (Express, 98, 2000, XP), Netscape Messenger, Novell Groupwise 6, Baltimore Mail-Secure, Utimaco Sign & Crypt, Entrust Entelligence
- Secure e-mail plug-ins for Lotus Notes from Utimaco, Secude, SSE, Baltimore
- WISeCrypt
- SSL authentication with browsers such as MS Internet Explorer, Netscape Navigator
- WISeKey PKI, Baltimore PKI, Entrust PKI, RSA Keon PKI, VeriSign PKI or GlobalSign PKI
- VPN clients from Microsoft, NCP, Cisco, Checkpoint, SafeNet
- SSH Secure Shell clients
- PGP, RSA SecurID, Celo eSigner, Lotus Notes Rnext, Citrix Metaframe, Novell NMAS
- SSO from eTrust, Protocom
The following interfaces are supported:
- PKCS#11 meeting the RSA specification
- PKCS#12 transport format
- PKCS#15 token information syntax format
- CSP for MS CryptoAPI
- PC/SC 1.0 several class 2/3 readers
- A004
Token management utility
- Token initialization (incl. loading of applets in the case of a Java™-based token)
- PIN definition
- Key generation
- Multi-language support
- Automatic registration of certificates in MS applications
- Customized adaptations (e.g. menu options on/off)