Two worlds, one smart card: an integrated solution for physical access and logical security using PKI on a single smart card

Authors:
Jaap-Henk Hoepman;Geert Kleinhuis
Affiliations:
TNO Information and Communication Technology, Groningen AND Institute for Computing and Information Sciences, Radboud University Nijmegen, Nijmegen, The Netherlands;TNO Information and Communication Technology, Groningen, The Netherlands
Venue:
EuroPKI'07 Proceedings of the 4th European conference on Public Key Infrastructure: theory and practice
Year:
2007

Citing 3
Cited 0

Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations

Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations
Overcoming the challenges in deploying user provisioning/identity access management backbone

BT Technology Journal
Kerberos: an authentication service for computer networks

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present a use case of the introduction of a large scale Public Key Infrastructure (PKI) environment in an incumbent telecommunications company in The Netherlands. The main characteristics of the case are the integration of an existing physical access facility with a PKI environment for logical security of the company ICT infrastructure. In fact, both are accessed using a single (smart) company card. The purpose was to implement a high level of security, within the practical constraints at hand, and to reach a level of reduced sign-on for company employees. This integration poses numerous challenges. In this article we describe how PKI is actually introduced to support authentication, signing and encryption services for its employees. 18.000 personalised smart cards with PKI were issued, controlling access to over 1500 buildings, fitted with in total more than 6000 smart card readers. The smart cards also controlled access to 14.000 personal workstations both desktops and laptops (each fitted with a contact smart card reader), with access to over a 1000 different applications.