Re: [pki-tc] 3 slides for OASIS forum

[Arshad Noor <arshad.noor@strongauth.com>]

I agree, Stephen.

I concur with your view and with the suggestion on the EMV card.  But,
I wasn't aware that digital certificates were being issued to every
customer for this card.  For some reason, I've had this notion that
EMV cards had secret keys on them, but whose integrity was protected
by certificates issued only for managing the infrastructure (readers
and data - but not individual cards).  Is there more information on
the technical details behind EMV's use of PKI?  Thanks.

Arshad Noor
StrongAuth, Inc.

Stephen Wilson wrote:
> Thanks for that Arshad.  It's a tough gig doing PKI in three slides! 
> 
> My only comment would that I think we should elevate embedded PKI in the
> future slide, perhaps to top position.  In my view, client side PKI is
> likely to become ubiquitous in devices like smartcards and cell phones.  
> 
> [My favorite comparison is with magnetic stripe card technology.  That is
> so ubiquitous that we blissfully forget about the complexity of
> ferromagnetics, and the complex supply chain that delivers card products
> via blank plastics, magnetic tapes and bulk ferrite powders.  Chip cards
> will supersede all this in coming years, and digital certificates will
> become at least as common as cards.]
> 
> A missing example on slide 3 may be the EMV smartcard, which has embedded
> client side PKI, with over 400 million smart credit/debit cards already
> issued.  
> 
> Anders may be right that gateway PKI is important too, but it is not in the
> same league (with respect to numbers) as embedded client side PKI.  The
> outright need for gateway PKI will likely fall as embedded certificates
> become seamlessly easy to use.  
> 
> Cheers, 
> 
> Steve.
> 
> 
> 
> 
>>All,
>>
>>As promised in last week's session, here are 3 slides that I've come up
>>with as a first-cut of what I intend to present in the 3 minutes that I
>>will have in the OASIS forum on May 9th.
>>
>>Please review and provide comments.  If you believe there should be more
>>bullets/sub-bullets, please forward suggesttions to me before April 29.
>>Thank you.
>>
>>Arshad Noor
>>StrongAuth, Inc.
>>
>>P.S. I will use the OASIS format after the content is finalized.
>>[attachment][attachment]
> 
> 
> --
> <Put email footer here>