Embed Size (px)
Citation preview
1 www.jrsys.com.tw 1 www.jrsys.com.tw 1 1
James Wu / jrsys CEO
eAuthentication and
Cross Boarder
eTransaction
2 www.jrsys.com.tw
Stage 1
eGovernment 3-year Program 1998-2000
Stage 2
eGovernment Program 2001-2004
Stage 2.5
E-Taiwan eGov Program 2003-2007
Stage 3
U-Taiwan eGov Program 2008-2010
Stage 4
Intelligent Taiwan eGov Program 2008-2011
Taiwan’s e-Gov Journey
Infrastructure
Development &
Penetration
Efficien
cy & E
ffectiveness
Online Service
Development
Integrated,
Interoperable
and Interactive
Services
Pervasive
Services
Transparency
Accountability
Participation
E-Governance
web2.0
driven
Clustered,
Proactive,
Trustworthy and
Non-stop
Services
Device
Portable devices
Network Wireless Broadband
Application Web 2.0 Applications
Cloud
Computing
3 www.jrsys.com.tw
Government e-Procurement System (GEPS)
Land Information System
e-Tax System
G2B Service Platform
Taiwan e-Gov Framework
My eGov Service
Portal Site
Government Service Platform (GSP)
GPKI
Government Service Network (GSN)
GCA, MOICA
MOEACA, XCA…
Government
Directory Service GDS, XDS, CPA
Gov Agencies
Portal Sites
Citizen
Organizat’n
Business
Application Services
Infrastructure
e-Gov Online Services
Gov’t
e-Invoice Platform
……
4 www.jrsys.com.tw
Government Public-Key
Infrastructure (GPKI)
GRCA
Government
Agencies,
E-Gov Servers
GCA MOEACA
Businesses
(companies and
branches, and
shops)
MOICA
Citizens
XCA
Other organizational
entities (e.g., school,
not-for-profit org.)
GTestCA
All kinds of test certs. for developing apps
HCA
Healthcare
Professionals,
Healthcare orgs,
Healthcare
Servers
5 www.jrsys.com.tw
Proactive Services
Innovating Services
Satisfaction↑
Instance notice
Greater efficiency
Safe and secure
Integrative with other
channels
Proactive Service
e-Helper for
business
e-Housekeeper
for citizen
e-Secretary for
Gov employees
6 www.jrsys.com.tw
G2B2C e-Document Interchange
Taiwan first Validation Authority product (2002)
Taiwan largest Validation Authority
Big transaction volumes (33,000 eDocument /day)
E-Official
Document
Verify signature/ Decryption
Digital signature/ encryption
7 www.jrsys.com.tw
Taipei City Government
• Multi-purpose card Employee ID card
Employee ID
• Contact PKI Card
• Contactless Transportation Card
Secure Single-Sign-On System
8 www.jrsys.com.tw
Newborn baby reporting system
9 www.jrsys.com.tw
Military PKI-enabled Applications
• The first Military PKI-enabled project
• For both Web base and Client Server Applications
• Secure Single Sign On
• Access control by PKI smart card
• Users include army, navy and air force
10 www.jrsys.com.tw
Ministry of Transportation and
Communications
Web AD
management t
portal
Mobile Signature and
Validation Service
PKI-enabled Application
Microsoft Active
Directory Service
11 www.jrsys.com.tw
Ministry of Finance
Internet
User
MOICA
PKI Validation
Purchase Order System
Electronic Document
Material and Transport
Meeting Room Reservation
Human Resource
EIP(Sun One) LDAP
EIP Portal
HA
Log Server
PKI suite
PKI suite
Verify
CRL SVC
LOG SVC
Audit
OCSP SVC
1.User with
Smart Card
2.Login
3.Verify
4.Log
5.Result
6.Authorization
DB
MS AD
GCA
12 www.jrsys.com.tw
Single Sign On
PKI APIs
Ministry of Foreign Affairs
13 www.jrsys.com.tw
ezFly Online Travel Agent
16
14 www.jrsys.com.tw
CHT WebTrust® Certificate
We issue certificates to Mobile & PC
Secure MicroSD
iOS/PC /Android Token
Bluetooth
Reader
Jrsys Secure Mobile/PC Tokens
Software PFX
HCE
Smart Cards USB
PC/SC reader
USB PKI
Token
15 www.jrsys.com.tw
eAuthentication
Different level of security
– ID/Password
– One Time Password
– PKI Two Factor Authentication
• Software Token
• Secure Element
– NFC
– Biometric
Dual-Channel Multi-Factors Authentication
Kerberos/SAML
QR code OTP
Mobile PKI
HCE
Tokenization
FiDo
Apple Pay
Hot Technologies
16 www.jrsys.com.tw
All in One OTP solutions
Slim SIM OTP SMS AOTP OTP APP QR code OTP
MicroSD OTP
Android Token iOS OTP
OCRA OTP
OTP Token e-Ink Display
Master Card
jrsys OATH OTP
Server
Low cost solution
One Time Random Password
17 www.jrsys.com.tw
Mobile ID (OOB auth)
Jrsys Authentication
Server
1. Input ID and Password
Internet
2. Scan QR code to obtain the OTP code
3. Server verify the
OTP code
CA/RA
PKI base QR code Dual Channels Two Factors
Out-Of-Band authentication
18 www.jrsys.com.tw
Mobile PKI
• Smart Card
– Bluetooth Reader, NFC Mobile Phone, Audio Reader
• SIM
– SWP SIM, Slim SIM Sticker with Secure Element/SWP, HCE
• Secure MicroSD
• iOS/Android/PC Token
• Audio PKI Token
• FiDo/Apple Pay
– NFC + SE +Fingerprint sensor
19 www.jrsys.com.tw
Secure Mobile Devices
Bluetooth Reader
World First
iOS/Android/PC
Token
e-Ink Master
OTP card
Audio Reader
20 www.jrsys.com.tw
Bluetooth Smart Card Reader for iOS/Android/PC
21 www.jrsys.com.tw
Dual Interface Smart Card
Multi-Function Smart Card
– ID card (Contact/Contactless ICAO)
– PKI card (Contact/Contactless Digital Signature)
– Transportation Card (Contactless MiFare)
22 www.jrsys.com.tw
• Platform: PC/Android/iOS
• Jrsys Secure MicroSD inside
PC USB
iOS 8-Pin
Lightning
Connector
World First iOS/Android/PC Token
Android
Mini USB
23 www.jrsys.com.tw
Secure your cloud storages
Secure your cloud storage with one more device.
24 www.jrsys.com.tw
Pain & Solution
• PKI is hard to understand and implement
• Cross Platform is hard, especially Mobile
High Hidden cost
25 www.jrsys.com.tw
Easy & Fast PKI-enable Solutions
• PKI-enabled in 3 Days Not 3 Months
• Cross Platform
• Various Devices
• Mobile Signature & Validation Service
ActiveX Firefox Plug-In Chrome Plug-In
26 www.jrsys.com.tw
Security Suits for PC
Jrsys PC Security Suite
ActiveX Firefox Plug-In Chrome Plug-In
Multiple Tokens
Software PFX Smart Card USB Token HSM
Software Applications Applications
Jrsys
Middleware
Secure
Devices
can
work with
and many
Web Authentication with SE
2014 Taiwan ITM
Best product
Winner Award
27 www.jrsys.com.tw
Security Suits for Mobile
Applications
Jrsys
Middleware
Secure
Mobile
Devices
can
work with
and many
Mobile Authentication with SE
Secure Mobile APP
Mobile Signature
One Time Password
Secure PDF
Mobile Money
Secure e-Mail
jrsys Mobile Security Suite
Android SDK iOS SDK
Multiple Mobile Tokens
Software
PFX
HCE
Secure
MicroSD
Smart Cards
Bluetooth
reader PC/iOS/Android
Token
2014 Taiwan ITM
Best product
Winner Award
28 www.jrsys.com.tw
WebTrust® RA
CHT WebTrust ® CA issue certificates to Mobile & PC
Secure MicroSD
iOS/PC /Android Token
Bluetooth
Reader
Jrsys Secure Mobile/PC Tokens
Software PFX
HCE
Smart Cards USB
PC/SC reader
USB PKI
Token
29 www.jrsys.com.tw
Cloud Validation
Single Sign On
PKI APIs
All in One Authentication Service: ID/Password, OTP, Smart Card, Mobile Tokens and Micro SD.
30 www.jrsys.com.tw
Secret Communication System
VOIP
IM
Photo
File
31 www.jrsys.com.tw
James Wu /jrsys
Cross-Border e-Commerce
Mobile Payment
Digital Signed Electronic Document Exchange
32 www.jrsys.com.tw
QR Code for Digital Signature Online/Offline
Payment, 2 Factor Login, etc.
33 www.jrsys.com.tw
2 Factor Login – QR Code & Mobile
Traditional
ID/Password
Hard to against Trojan, Sniffer, Web Site
Compromised and Bad Administrator
• Dual Channel Two Factor Secure Login
• Cross Platform/ Browsers
No Phishing Secure Sign In
34 www.jrsys.com.tw
“Card Not Present Transaction”
Big Risk of Online Shopping
Trojan, Sniffer, Phishing site e-Commerce site compromised
You may lost
Card Number + Expiration Date + CVV
35 www.jrsys.com.tw
On-Line Payment
3.Scan the checkout QR code
4.Select virtual credit card
5.Input PIN code to confirm the payment
Consumer 1.Prepare checkout data 2.Create a Digital Signed Checkout QR code on the screen
Date:2014/10/02
Merchant’s Digital
Signature
Commerce
Credit card
information is
not transmitted
Card Number + Expiration Date + CVV No more Just Scan the Secure QR Code
36 www.jrsys.com.tw
Off-Line Payment
Out-of-band authentication
Handwriting
signature
Before
Mobile Payment
Card can be Cloned
Merchant scan the QR
Sign a Credit
card Check
More Secure and Fast than
Magnetic Credit Card Swipe Payment
37 www.jrsys.com.tw
1.Select Virtual credit card
2.Enter the amount
3.Input PIN to make a digital signature
and Generate a QR code
4.Scan the QR code
5.Make a Digital Signature
6.Connect to Payment Gateway
Date:2014/10/02
Consumer’s
Digital Signature
Consumer
Commerce
Commerce cannot clone
any card !
Offline Payment Process
38 www.jrsys.com.tw
QR code for Logistic
• Shipping QR code contains Product codes, Quantities, Date, Time and Manufacture's Digital Signature
• User can scan and verify it immediately
39 www.jrsys.com.tw
Patented QR Code Payment
• Digital Signature QR code – Not only an URL/ OTP short code
– But also the transaction with digital signature
• Easy to deploy and use
• No additional hardware cost
– Authentication, Integrity, Confidentiality and Non-repudiation secure transaction
Date:2014/10/02
Time:11:50
Amount: US$25
OTP
Digital Signature
Patented O2O
Payment technology
40 www.jrsys.com.tw
Digital Signed Hard Copy Document
Before
Now
Handwriting Signature
Digital Signed PDF or Hard copy Printout
Party A’s
Digital
Signature
Party B’s
Digital
Signature
PDF417
Original
Document
with Digest
41 www.jrsys.com.tw
Digital Signed Hard Copy Document
Digital signed QR
code Invoice
Digital signed
PDF 417 License
42 www.jrsys.com.tw
2012 ASIA PKI
Innovation Award
2012 Mobile Money
Innovation Award
APICTA Award 2013 Security Winner
One of the 7 innovative ideas to provide greater access to financial services from 98 best ideas of 26 countries
BY: MIF, IDB, CAF and GSMA
2014 Taiwan ITM
Best 100 products
Winner Award
About jrsys Innovative Mobile and Cloud
Security-Enabler
43 www.jrsys.com.tw
Partner with Foxit
27,500 Millions
PDF users
use jrsys security Suite
44 www.jrsys.com.tw 44
jrsys Secure your Mobile Life !
