CDSA Program Update SECURITY. Graham Bird. (650)

Transcription

1 CDSA Program Update SECURITY Graham Bird (650)

2 Agenda The Open Brand program Interoperability Assurance Program Procurement Q&A Product Standards

3 The Open Brand

4 What the Brand Stands For It Works It Will Continue to Work Problems Will Be Fixed Value. Backed by Guarantee. Ipso facto ad volorem

5 Open Brand - Program Structure TMLA TMUG IAP Specifications Product Std Test Suites Product Standard Conformance Statement Waivers Options

6 How Do You Know? SECURITY

7 How it Works Trademark Law Process to Certify APIs - Portability Data Formats Protocols Interoperability Assurance Hardware Independent

8 The Open Brand Family UNIX BASE CDE SECURITY

9 The Key Accelerator Over 1700 Branded Products To Date Procurements $25 Billion $25 Billion requiring the Open Brand

10 Brand Procurements Air Force Workstation $800 Million Desktop V $1.2 Billion Air Force ICARDS $932 Million NASA SEWPII $1800M

11 Market Impact - Example Single UNIX Specification Supported by all major vendors IBM MVS Siemens mainframe o/s API adoption in proprietary o/s Adoption in freeware

12 The Process Product? Practical Guide to The Open Brand Product Standard How to Test Formal Test Interpretations Waivers TSDs TMLA Registration Application Certificate Product Registered Annual Renewal

13 Test Suite(s) Indicators of Compliance Continuous not snapshot Supports Brand Quality Assured Lab Quality Control Lab

14 Administration Check Submission is Complete Audit Test Report Audit Conformance Statement Fees are correct Enter onto Register Certificate Issued Annual Renewal

15 Interoperability Assurance Program

16 Definitions Conciliation the act of bringing parties together for the purpose of resolving disagreements Mediation the hearing and determination of a cause between parties in controversy, by a person or persons chosen by the parties.

17 What Is It? Rapid resolution to interoperability problems experienced with Registered Products Resolution of interoperability problems with Registered Products that have been supplied by two or more vendors Conciliation process for vendors who are attempting to resolve interoperability problems Mediation process when vendors cannot reach consensus on resolving an interoperability problem Database of interoperability issues raised and resolved

18 Conciliation Request to The Open Group From Buyer From Vendor Conciliation The Open Group Each Vendor Consensus Reached Or..

19 Mediation If No Consensus Neutral Party Assess Problem Decide on Appropriate Solution Interoperability Recommendation Anonymous Review 30 Days to Implement Specification / Test Updates Bulletin Publication

20 Procurement

21 Procurement - What Objective: Buyer pull Grow market Win/Win/Win/Win $$$ Spend Mandate Brand Mandate Conformance Mandate Specification

22 Procurement - How Mandate Brand Letter of Intent Public Endorsement Evangelize RFP Sample Text LOI Sample Text Case Studies Brand Business Case Web Resources

23 Procurement - Promotion Case Studies Presentation for Evangelists Press Stories Consultant Brief Speaker Panel

24 Questions / Input?

25

26 Brand Development & Marketing

27 Brand Program Development Product Standard Conformance Statement Admin forms Test suite Trademarks Life-cycle specs Product Standard(s)

28 What can carry the Open Brand? We Use CDSA Applications TM CDSA Product Standard(s) TM Modules

29 Customers Applications Endorsement Any application CDSA Platform suppliers Infrastructure suppliers Module RSA etc

30 Ensuring Diffusion Brand development Trademarks Procurement Application & ISV endorsement Marketing & promotion

31 Promotion Press and Analyst Brief PR program Press releases Press tracking Collateral White papers Article placement Slide sets Speaker placement Vendor salesforce salesforce brief Collateral pack Help line ISV adoption program Plugathons

32 User Demand Procurement Targeted Visible / references Application Endorsement program It works with CDSA Simple & lightweight Web based

33 Timescales Product Standards Q2 Test Suite Q3/4 Procurement Product Q3 Q4/5?

34 Branding Environment Hardware & Software Dependencies Binary Compatible Families Architecture Specific PC

35 Interpreting Specifications Permanent Interpretations Until next Issue of Specification Temporary Interpretations Whilst a problem is investigated Waivers Cleared within 12 Months Agreed Test Suite Deficiencies Until test suite is fixed

36 Conformance Statement Records Implementation Details Numeric Limits Options Branding Environment One CS per Product Standard Available to Customers Web based

37 Product Standards

38 Product Standards Real World Vendors product Buyers needs What it means to conform Concise Lots of pointers Web based

39 Product Standard Label Description Conformance Requirement Operational Environment Portability Environment Overriding Standards Indicators of Compliance Migration

40 Product Standards UNIX 98 Server UNIX 98 Internet Server Specification Specification Specification Specification

41 CDSA Product Standards CDSA Client Smartcard Plugin Crypto Plugin

42 CDSA Client CSSM APIs digital signature public key delivery & validation certificate management crypto services optionally, key recovery CSSM SPIs Crypto Data Storage Certificate Library Trust Policy

43 Crypto Plugin Crypto SPI bulk encryption digital signature cryptographic hash key generation random number generation

44 Smartcard Plugin Crypto SPI bulk encryption digital signature cryptographic hash key generation random number generation Data Storage SPI persistent storage & recovery of: certificates revocation lists associated data