# Presentation: 080349

## Technology OverviewforFPKI TWGMay 2, 2002

## Agenda	

- Company Introduction
- NOVOMODO Basics
- Advanced Features
- Application Examples
- Summary

## About NOVOMODO

- Software product company focused on validation security and privilege management
- Founded by Dr. Silvio Micali in 2001 to bring about a “new way” of approaching business problems associated with validation & privileges
- Validation technology in production use at MIT – 160,000 certs issued over 18 months
- “Alpha” product release available for evaluation

## NOVOMODO Executive Team

**Silvio Micali – Founder and Chief Scientist**
- 	Professor of Computer Science at MIT
**Peter Hussey – CEO**
- 	Former President of CyberTrust and Baltimore Americas
**Robert Dulude – SVP and Chief Security Officer**
- 	Former VP at CyberTrust and Baltimore
**William Ang – VP Engineering**
**	**Partner at TechSquare, Inc.
**TBA – CFO**
- 	Co-founder of two successful financial services firms, COO and EVP of several firms
**TBA - VP Sales and Marketing**
**	**VP sales positions at Lotus and others

## NOVOMODO Advisors	

*Allan Borodin,* University of Toronto
*Manuel Blum,* Carnegie Mellon University
*Mihir Bellare,* University of California - San Diego
*David Campbell,** *Director, Innovation Advisors
*Steve Cohn,* COO Nevo Technologies
*Shafi Goldwasser,* MIT
*Mike Kaplan,** *CTO SafeNet
*Charles Rackoff,** *University of Toronto
*Ronald Rivest,** *MIT
*Phil Rogaway,** *University of California – Davis
*Jeff Schiller,** *MIT* *& IETF

## NOVOMODO Mission
become the global leader in
Certificate Validation
and
Dynamic Privilege Management

- become the global leader in
- Certificate Validation
- and
- Dynamic Privilege Management

## Some Definitions

_*Authentication*_ is proving your claimed identity
- The picture on your driver’s license
_*Authorization*_ is granting privileges (user/process)
- Privilege to drive
_*Validation*_ is verifying your privileges and attributes
- Your privilege to drive has not been revoked
- Your address on your license is current

## eSecurity Solution

- _NOVOMODO technology provides_:
_**Validation**_ that is simple, secure, cost effective and truly scales
- Scalable = no degradation in performance or cost effectiveness as move to 10s millions
_**Two-party validation**_ for off-line situations
_**Dynamic privilege management**_
- Multiple privileges using a single certificate

## Unforgeable
Works only with proper document and date
Simple
20 bytes
Fast
A few hashes (10,000 times faster than one digital signature)
Public
Can post on the Web!

- 909090909
**VALID****4.26.02**

- 20-byte
- Validation
- Token

**Unforgeable**
- Works only with proper document and date
**Simple**
- 20 bytes
**Fast**
- A few hashes (10,000 times faster than one digital signature)
**Public**
- Can post on the Web!

**PROOF**

- NOVOMODO Validation

## NOVOMODO Validation

- 909090909
**VALID****4.26.02**

- 20-byte
- Validation
- Token

**PROOF**

- Validation Authority

- Basics

## NOVOMODO Basics

- _OCSP_

**Secure**
**Scalable**
**Cost effective**
**Easily managed**** **

## NOVOMODO Basics

**Secure**
**Scalable**
**Cost effective**
**Easily managed**** **

## NOVOMODO 2-PARTY Validation

- NOVOMODO 2-PARTY Validation

- Val. Token  “**Push**”
- (e.g., silent SMS)

**Wireless, **
**Physical Access Control,**
**...**

- Offline Validation!
- NO 3rd Party Call!
- Unique to NOVOMODO

- Relying Party
- Logical or Physical Access

## Dynamic Privilege Management

**NOVOMODO**

## Dynamic Privilege Management: Example

- Low-levelclearance

- Medium-levelclearance

- High-levelclearance

- Purchasing
- Power

- Database Access

**Dynamic Privilege Management: Example**

**On The Cert**

- PKI Enabled
- Application
- Access

## Dynamic Privilege Management

- Low-levelclearance

- Medium-levelclearance

- High-levelclearance

- Purchasing
- Power

- Database Access

- PKI Enabled
- Application
- Access

**Dynamic Privilege Management**

- 909090909
**VALID****4.26.02**

- 909090909
**VALID****4.26.02**

**On The Cert**

## Dynamic Privilege Management

- Low-levelclearance

- Medium-levelclearance

- High-levelclearance

- Purchasing
- Power

- Database Access

**Dynamic Privilege Management**

**On The Cert**

- PKI Enabled
- Application
- Access

## Dynamic Privilege Management

- Low-levelclearance

- Medium-levelclearance

- High-levelclearance

- Purchasing
- Power

- Database Access

**Dynamic Privilege Management**

**On The Cert**

- 909090909
**VALID****4.27.02**

- 909090909
**VALID****4.27.02**

- PKI Enabled
- Application
- Access

## Dynamic Privilege Management

- Low-levelclearance

- Medium-levelclearance

- High-levelclearance

- Purchasing
- Power

- Database Access

**Dynamic Privilege Management**

**On The Cert**

- PKI Enabled
- Application
- Access

## Dynamic Privilege Management

**Unique To**
**NOVOMODO !**

** ****	****Revocation + Reissuance**
** ****	****Same Certificate, multiple privileges, multiple authorities**
** ****	****Low-cost independent control****	****	**

**Tenants**

## Dynamic Privilege Management

**Unique To**
**NOVOMODO !**

** ****	****Revocation + Reissuance**
** ****	****Same Certificate, multiple privileges, multiple authorities**
** ****	****Low-cost independent control****	****	**

## Smart Access Card

- Independent
- Validation Authorities

- Smart Card
- with Single Certificate but
- Dynamic Cert Management

**Share Card, Cert, Infrastructure, ...**
**RETAIN CONTROL !**

**NAVY**

**ROOSEVELT**

**NAVY**

**Department of Defense**

**RSVT**

-  Donald Rumsfeld
- Secretary of Defense
- Pentagon
- Washington, DC
- #1234567

## Simple DeploymentFunctional Block Diagram

**Simple Deployment****Functional Block Diagram**

**SUBSCRIBER**

**Novomodo**
**Responders**

**CA**

**RA**

**DPM**

**Relying Party**
**Application**

## Enabling FlexibilityArchitecture Options

## Summary	

- Technology is simple, secure and scales
- Attractive alternative to OCSP
- Near real time off-line validation
- Ideal for wireless platforms
- Ideal for physical access via smartcards & biometrics
- Dynamic privilege management – for 1st time:
- Multiple privileges on single certificate
- Multiple privileges independently controlled
- Privileges can be pre-positioned for future use
- Replaces unworkable attribute certificates
- Unique to Novomodo

## Bob Dulude

- Chief Security Officer
- bob@novomodo.com

## Background on one-way hashing

*H* is easy to compute (10,000 times faster than signature)

*H* is hard to invert (e.g., SHA-1)

- If *X* is 20 bytes = 160 bits, then there are 2160 possible *X*’s
- even at 1 trillion hashes/sec, it takes 1028 years to try them all>> than the lifetime of the universe

*X*

*H*(*X*)

- EASY

- HARD

## NOVOMODO Validation

## NOVOMODO Validation

*X*1

*X*364

*...*

*X*365

*X*363

*H*

*H*

*H*

*H*

*H*

- added to certificate

## NOVOMODO Validation

*X*1

*...*

*X*365

*X*363

*H*

*H*

*H*

*H*

*H*

***C*** =SIGCA(serial number,*PK**U*, *U*, issue date, exp. date, *           *

- , ...)

**if *****C***** is valid the next day, VA reveals *****X*****364**

**if *****C***** is valid 1 day after next, VA reveals *****X*****363**

**if *****C***** is valid *****D***** days before expiration,****VA reveals *****X******D***

**Cost of validity proof to VA: table lookup**
**Cost of verification: a few hashes**

***C***** is valid on issue date**

## NOVOMODO Revocation

***C*** =SIGCA(serial number,*PK**U*, *U*, issue date, exp. date,

- VA generates a secret random 20-byte value

*Y*0

- VA computes *Y*1 = *H*(*Y*0)

- To prove that ***C*** is revoked: reveal *Y*0

- ,.)

**NOVOMODO: definitive, fast proofs ****of either validity or revocation!**

**Token**

*X*0

*X*1

*...*

*X*363

*H*

*H*

*H*

*H*

*H*

*X*365 ,

## Separation of CA from VA

***C*** =SIGCA

- , ...)

- VA Manages the Cert

- VA

- (serial number,*PK**U*, *   *, issue date, exp. date, *           *

- Authenticates User

- RA

**Only VA can release tokens!**

*X*100

-      Signs Cert

*U*

## Multiple Privileges in One Cert

***C*** =SIGCA

- RA

*A*364

*A*362

*B*363

- Validator releases the 20-byte proof for the right Sec Lev for that day KEEP SAME CERT!!

## NOVOMODO: Independent Validators

***C*** =SIGCA

**Each VA manages **
**“****own privileges”!**

*A*364

- _Return_

*B*363

*Z*364

*Z*271

##               OCSP 

- Single privilege
- Doesn’t scale
- Vaults vulnerable
- Costly deployment

**Return   **