SecurityAgentTM

SecurityAgent (a.k.a. SeSeTM - Security Secretary) is the flagship product of ISELabTM. It is user-centered authentication software, which empowers end users with personalizable authentication management features enabling authenticated channels for a multitude of businesses and applications on the Internet.

Philosophy: Faithful to Intrinsic Value of Authentication
In order to conduct electronic business in secure way, first overall, authentication mechanism is required and it is implemented in terms of Public Key Infrastructure (PKI). Most PKI efforts are trying to play a role of Certificate Authority (CA) as so called "trusted third party" (TTP) by setting up certificate server issuing public key certificates. However, in the reality, the human users of PKIs already have been assigned their identifiers in the physical world and identifiers managed by organizational entities that are considered authoritative for assigning these identifier to these users -- that is usually a critical party of their business. In such contexts it is intrinsically desirable for organizational entities to act as CAs, identifying users in cyberspace in the same fashion as they have identified them in the physical world. In other words, this implicit form of trust relationship exists between relying parties and these organizations (companies, families, and clubs etc.) based on long established business or social relationships, which cannot be replaced by TTP. Rather than to fight for being a big brother (a.k.a. TTP) to issue intrinsically valueless certificates, we aim to provide easy-to-use tool to help people faithfully map their relationship in the physical world to cyberspace and use the tool as a platform to computerized their activities to enjoy efficiency and conveniences facilitated by today's ubiquitous computing.

Key Tool: Connecting Human User to Cyberspace
SecurityAgent is personal autonomous software which acts on the behalf of human users to shift their roles and identities as well as their business and organizational relationships into to the digital world, the first step to extend businesses to the electronic virtual world. It comes with an intuitively perceivable user interface that is faithfully consistent with the traditional security concepts, whereby a security environment built on "esoteric" cryptographic technologies (e.g. encryption, digital signature, and public-key certificate management) can be gracefully integrated with human users to conduct business in electronic fashion of the new millennium.

Business Platform: Interfacing Authentication with Applications
SecurityAgent can also be thought as a personal platform to computerize business activities in the way of being faithful to existing business logic which is conceptually the most desirable way to conduct business, yet with great efficiency facilitated by today's ubiquitous computing.

For example, privileges or access rights based on identification and authentication in the cyberspace can conceptually be defined in the same way as what they are in the traditional business environment, whereby privacy and confidentiality of information can be elaborately controlled and ensured as required, and most importantly, the digital receipts that prove the transaction or flow of information that have actually taken place can be provided. This has been critically important traditionally for business, and it's going to be even more so as more applications become Internet-based activities.

As a platform, it bridges the electronic authentication infrastructure (a.k.a. Public Key Infrastructure -- PKI) togather with PKI enabled applications, effectively and seamlessly!

Main current clients include banks, financial institutes, governments, and stockbrokers, accounting and law firms, as well as some industries. The system environment can be Windows, XP, Linux, or Unix.

For more information or purchase, please contact info@iselab.net.


© Information Security Engineering Lab, Inc. 2004.