Skip Links

Network World

  • Social Web 
  • Email 
  • Close

PKI will grow, but policy problems remain

By Jeremy Kirk , IDG News Service , 11/28/2006
  • Share/Email
  • Comment
  • Print

Public key infrastructure is poised for a resurgence, with associated identity technologies increasingly underpinning applications as organizations look to securely share information, vendors said Tuesday at a standards conference in London.

While it was a hot buzzword during the peak of the technology boom, PKI fell out of favor as IT projects were increasingly seen as bloated and without sufficient focus.

"PKI still has a lot of perception problems," said Stijn Bijnens, senior vice president of identity management for Cybertrust.

Bijnens was one of several participants in a conference by the Organization for the Advancement of Structured Information Standards (Oasis), a consortium that developments standards for business applications.

PKI uses certificates that have been verified by a certification authority and allows other organizations or people to exchange trusted information. PKI simplifies e-government and e-commerce by letting a person identify themselves once to a certification authority that vouches for the person's identity when they interact with other organizations in the infrastructure.

Several changes in IT should spur growth of PKI. Microsoft's release of its next-generation operating system, Windows Vista, contains technology to help users manage identities, called CardSpace, Bijnens said. CardSpace will allow users going to compatible Web sites to have greater control over how their personal information is released.

While it's unknown how CardSpace will work with other identity technologies, it should help grow the market for certificate accreditation and procedures around identity verification, Bijnens said.

"Microsoft just enables the market for everyone," Bijnens said.

Governments are undertaking electronic-identity projects that should also foster interest in PKI technology, Bijnens said.

But PKI technology faces hurdles, too. The technology is growing increasingly complex even for those familiar with it, said Arshad Noor, of StrongAuth.

Noor said he was once involved with a PKI implementation at one of the largest pharmaceutical companies for its 120,000 employees worldwide. The CEO expected the rollout could be done in about five weeks. The rollout eventually finished, but not on the CEO's time scale, he said.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.