SLIDE 1
Enabling Trust and Security for Reliability of your Business
ISO27001
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- TDID & CA Service
- Trust Hierarchy
- Our Customers
2
- PKI-Enabled Applications
Thai Digital ID Co.,Ltd. Building Trusted National Root CA - - - PowerPoint PPT Presentation
Thai Digital ID Co.,Ltd. Building Trusted National Root CA - - - PowerPoint PPT Presentation
Thai Digital ID Co.,Ltd. Building Trusted National Root CA - Thailands Experience ISO27001 Enabling Trust and Security for Reliability of your Business TDID & CA Service TDID & CA Service Standard PKI Environment CA
SLIDE 2
SLIDE 3
Established in December 2000, as the first CA Service Provider. Objectives : To deliver the world-class standard CA service
TDID Background
TDID
Enterprise SSL Personal
3
Device
Enterprise Enterprise User Personal SSL Router Computer
SLIDE 4
CA Service
SSL Certificate
Secure Sockets Layer Certificate offers encrypted web site security to assures visitors of the web site's trustworthiness and authenticity.
4
- Identity-based and Role-based certificate
- Onboard key generation and cryptographic processing
- Eliminates Weak Passwords with Two-Factor Authentication
- Highly secure with USB Token validated FIPS 140-1 Level2
- Asymmetric Key RSA 2048-bit for Private and Public Key
Enterprise / Personal / Device Certificate
SLIDE 5
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- Trust Hierarchy
- Our Customers
5
- PKI-Enabled Applications
SLIDE 6
6
CA Software
Recognized Global Leader in PKI Primarily Centralized Administration Rich Policy and User Management Web-based distributed administration Comprehensive Audit and Monitoring Trusted by Government, Defense, Finance and Industry leaders around the globe World-class Technical Support Flexible go-to- market approaches
Certified Common Criteria EAL4+
SLIDE 7
CA Hardware
Administration SSH, SNMP* Backup Token PED Network Trust Link Service (NTLS) High Performance with Partitions
Internal K5 HSM
Backup Token CA Server1 CA Server2 CA Server3
Certified FIPS 140-2 Level 3
7
SLIDE 8
CA Operation
(ISO 27001 Compliance)
8
Security Policy Organization
- f Information
Security Asset Management Human Resources Security Physical and Environment Security Communications and Operations Management Access Control Information System Acquisition, Development & MA Information Security Incident Management Compliance Business Continuity Management
PLAN DO ACT CHECK
ISO 27001
SLIDE 9
9
CA Operation
(WebTrust Compliance)
Assessment Analysis Assurance Remediation
Web Trust
SLIDE 10
CA Operation
10
Certified ISO/IEC 27001:2005 Certified WebTrust for CAs
SLIDE 11
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- Trust Hierarchy
- Our Customers
11
- PKI-Enabled Applications
SLIDE 12
Established in December 2000, as the first CA Service Provider. Objectives : To deliver the world-class standard CA Hosting service
TDID Background
TDID
Bank of Thailand Processing Center Company Interbank Transaction Management and Exchange 12
ธนาคารแห่งประเทศไทย บริษัท เนชั่นแนล ไอทีเอ็มเอ๊กซ์ จ ากัด บริษัท ศูนย์ประมวลผล จ ากัด
SLIDE 13
CA Hosting Service
Recognized CA
Personal User Enterprise User
Data Center Backup Center TDID PKI Backend
13
SLIDE 14
Sending Bank Clearing House (BOT) Paying Bank Customer
BOT CA
Data+Image Chq. Data+Image Chq. Data Data+Image Chq.
Imaged Cheque Clearing and Archive System (ICAS)
14
SLIDE 15
ITMX CA
Directory CA Server RA Server User A User B User C User D Bulk & Single Payment System Web Portal System User A User C
BPC SPC IE IE
User D User B
Interbank Payment System
15
SLIDE 16
ATM Outsourcing Service
SLIDE 17
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- Trust Hierarchy
- Our Customers
17
- PKI-Enabled Applications
SLIDE 18
18
Trust Hierarchy
Thailand National Root CA Thai Digital ID CA G2
SLIDE 19
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- Trust Hierarchy
- Our Customers
19
- PKI-Enabled Applications
SLIDE 20
Our Customers
20
DBD e-Certificate DPA Secure e-Transactions e-Tax Invoice & e-Receipt
Applications User
Certificate-based VPNs Security Online e-Data Submission Electronic Financial Services (EFS)
SLIDE 21
- TDID & CA Service
- Standard PKI Environment
- CA Hosting Service
- Trust hierarchy
- Our Customers
21
- PKI-Enabled Applications
SLIDE 22
Applications enabled by PKI PKI-Enabled Applications
- Entity Identification
- Authentication and Authorization for
Web Applications
- Electronic Document and Form Signing
- Authentication for VPNs
- S/MIME Email Signing and Encryption
- Application Encryption and/or Digital Signature
(non Web)
- Desktop Encryption
- Wireless/Mobile Security
SLIDE 23