Product/Service

Wireless Security Solution

Source: Diversinet Corp.
The Passport Certificate Server 4.0 is designed to work with a broader base of client platforms, including GSM phones using SIM (Subscriber Identity Module)...
The Passport Certificate Server 4.0 is designed to work with a broader base of client platforms, including GSM phones using SIM (Subscriber Identity Module) card technology, and to reflect the direction of important industry standards such as WAP (Wireless Application Protocol). It is designed to support end-to-end security across a broad range of client platforms, including Palm, WinCE, RIM, and SIM toolkit applications on GSM phones. This architecture supports both current WAP WTLS standards and is extendable to future WAP environments.

By deploying application-level encryption and digital signatures, users avoid the well-documented security issues associated with the WAP gateway protocol translation between the wireless transport level security (WTLS) protocol and the wired side transport layer security (TLS) protocol. Data is exposed during this translation process while it is decrypted from WTLS and re-encrypted for the TLS protocol. The availability of end-to-end security today means that end-users do not have to wait to deploy secure applications until the infrastructure is upgraded.

The product includes a Certificate Authority (CA), a registration authority (RA), certificate repository, certificate validation services, application server SDK clients for many mobile devices and software to secure the channel between the mobile and m-commerce application server. The company uses lightweight PKI protocols suitable for wireless data networks including GSM. The product is designed to minimize the effort associated with developing and deploying secure m-commerce applications. It provides real-time, on-line validation services to guarantee a certificate is "good" and has not been revoked by the CA.

The product is designed to support multiple server platforms such as NT, Unix (Solaris, HP/UX), and Linux. The product also supports the RSA or ECC cryptographic algorithms. The product adheres to relevant IETF standards, WAP standards, and supports FIPS 140-1 compliant CA key storage and certificate signing. The product incorporates Chrysalis-ITS Luna CA3.

Diversinet Corp., 200 Yorkland Blvd, Suite 605, Toronto, ON M2J 5C1. Tel: 416-756-2324; Fax: 416-756-7346.