The Trusted Network

1

• The Trusted Network
• LEFIS PKI
• 2nd June, 2006 Sofia
• by Leonardo Catalinas May 2006
• ltlcg_at_unizar.esgt

2
Internet security today

• Simplest authentication methods and unprotected
  data traffic implies
• Poor user's confidentiality
• Poorly verified user's identity
• Unverified data integrity

3
What we can do?

• well-authenticated
• access to resources
• Digital Signature

• private access which prevents non related people
  to spy member's actions

4
Tools

• Use of Public Key Technologies to increase
  security

• Our own PKI
• Open Source Software
• Interoperability
• Cross CA
• Secure and identified web access
• Signed documents
• Signed e-mail

.
5
PKI Design

• PKI Design

• Trust based in APTICE CA

APTICE Certification Authority

• Hierarchical

• Permits building multiple PKIs

Lays Trust Base

• Capable of recognize other PKIs

• Cross Certification between PKIs

LEFIS Subordinated CA
signs
delegates
The LEFIS PKI
APTICE CA
LEFIS Registration Authorities
Lays Trust Base
manages
ORG1 PKI
ORG2 PKI
LEFIS PKI
Used
Trust
Trust
Trust
6
PKI Enrollment

• But, how to get a LEFIS Certificate?
• PDF Guide in english
• CSR Generation Adv.
• Easy Web Interface
• Local Keys Generation
• Platform independent

LEFIS_MAN_EN_ ENROLL_LEFIS_PKI.pdf
7
LEFIS Web Site Aims

• Moodle
• Is a CMS
• WG Activities Support
• Users communication
• Dynamic contents
• Workshops
• Tasks
• Wiki

• Public Side (Informative)
• Private Side (for validated members)

8
LEFIS' Innovative idea

• Moodle PKI MoodlePKI
• An extension designed and developed by ourselves
• Makes Moodle able to identify users by their
  Certificates
• Certificates can be easily obtained in our PKI
  public web page
• We plan to recognize Certificates signed by other
  PKIs or CAs

9
Accessing The LEFIS Web PageWith a Digital
Certificate