Friday, June 26, 2009

The Application of 3rd Party Certification Programme in Malaysia

VeriSign Inc. is the trusted provider of Internet infrastructure services for the networked world. It provide SSL ( the leading Secure Sockets Layer (SSL) Certificate Authority enabling secure e-commerce, communications, and interactions for Web sites, intranets, and extranets) identity and authentication, and domain name services that allow companies and consumers all over the world to engage in trusted communications and commerce.
VeriSign is part of the Standard and Poor’s 500 index and manages two of the world’s 13 Internet root servers, a.root-servers.net and j.root-servers.net, considered national IT assets by the U.S. Federal government. Besides that, VeriSign protects more than one million Web servers with digital certificates, protecting the majority of secure Web sites on the Internet, including 93% of the Fortune 500 sites. The VeriSign Secured® Seal is displayed by over 90,000 domains in 145 countries and viewed over 150 million times every day. There are over 2.3 million VeriSign Identity Protection Credentials have been issued to use for strong authentication.
Whereas, MSC Trustgate.com Sdn Bhd is a licensed Certification Authority (CA) operating within the Multimedia Super Corridor. MSC Trustgate was incorporated in 1999 to meet the growing need for secure open network communications and become the catalyst for the growth of e-commerce, both locally and across the ASEAN region. At present, MSC Trustgate has 12 million in paid up capital.

Trustgate is licensed under the Digital Signature Act 1997 (DSA), a Malaysia law that sets a global precedent for the mandate of a CA. As a CA, Trustgate’s core business is to provide digital certification services, including digital certificates, cryptographic products, and software development. Trustgate is working together with VeriSign Inc. in delivering the service of identity and authentication in Malaysia.

On 20th October 2008, VeriSign, Inc., announced that it has extended its existing reseller relationship with MSC Trustgate Sdn Bhd by entering into an additional agreement. Their services offer businesses strong authentication for protecting the online identities of their customers, business partners and employees. This is because identity theft is one of the fastest growing crimes in Malaysia, with personal information, such as credit card and NRIC numbers, netting criminals thousands of Ringgit in a very short time frame and his has become a reported concern by 78% of Malaysians.

One of the products that are offered by Trustgate is MyKad PKI (MyKey), where Malaysian government has put in place a smart National Identity Card (“MyKad”) for every citizen. MyKad with PKI capability allows its holder to conduct online transaction with government agencies and private sectors. MyKey is the MSC Trustgate.com Sdn. Bhd.'s Digital Certificate which is loaded into MyKad. It is governed by Malaysia Digital Signature Act 1997 and is accepted by the courts of law in Malaysia. It is class 2 certificate and has 1024-bit key length.

Besides that, Trustgate also offers MyTRUST for Mobile Signature. It can turns a SIM card into a Mobile Digital Identity for secure mobile banking and other financial services. Mobile digital signature provides non-repudiation on transactions under the Digital Signature Act, 1997. It runs on Wireless PKI platform and Mobile Operator infrastructure. PKI-enabled SIM cards are preloaded with MyTrust application and a digital certificate from a licensed Certification Authority. Users are able to digitally sign any transaction with ease and convenience via their mobile phone.


Other than that, there are also CryptoSuite. Everyday businesses are exchanging thousands of files and documents over the unsecured network.Some documents contain highly confidential information such as trade agreement, pricing information, business strategies, or even personal data. Sending unencrypted file is just like sending postcard, it can be easily read by anyone.

CyptoSuite from MSC Trustgate allows sender to secure their files and documents with a single-click of the mouse button. This utility uses digital certificate to encrypt the file so that only the intended recipient can only decrypt it using their private key. The encrypted file can be safely stored in any medium or send over the less-secured web-mail.

References:
http://www.verisign.com/ssl/ssl-information-center/index.html
http://www.msctrustgate.com/
http://littleangele-commerce.blogspot.com/2009/02/application-of-3rd-party-certification.html
http://ecommercesite.wordpress.com/2008/06/21/the-application-of-3rd-party-certification-programme-in-malaysia/

No comments:

Post a Comment