Lightsource Technologies

Entrust with over 1500 large enterprise customers world wide secures your digital life — and the digital life of your organisation and its employees, partners and customers.

Your digital life encompasses all that you do electronically, from communication to commerce to collaboration, both at work and at home. It's your digital identity and all that you do online. It's personal. It has value. You want your digital life to be safe, just like your physical life. In many ways, "digital life" has become just "life" — like "ebusiness" is now just "business."

Entrust secures your digital life by providing software solutions that

• protect your digital identity through authentication
• enforce policy via advanced content scanning
• protect your information assets through encryption

In particular, Entrust and it's product suites are:

• Standards compliant. Entrust both actively participates in the standards bodies and fully implements recognised standards.
• Vendor interoperable. Entrust actively participates in a number of interoperability initiatives.
• Flexible. Entrust supports a flexible, seamless integration into a customer’s current technology architecture.

Standards Compliance and Participation

Web Services Standards

• SAML
• SPML
• XACML
• WS-Security
• XKMS

PKI, Encryption, Digital Signature Standards

• Compliance Summary
• Summary of PKI Interoperability Protocols

Interoperability Initiatives

Although standards are an essential element in the ability to develop interoperable products, standards alone are not enough to guarantee multi-vendor interoperability. This is not something that is unique to PKI and enhanced security solutions. Interoperability testing has always been considered an integral part of demonstrating multi-vendor interoperability in almost every technology area.

Entrust has always been strongly committed to multi-vendor interoperability and this is evident through our proven track record of active participation in industry and government sponsored interoperability initiatives, including:

• the Federal PKI Bridge CA demonstration
• the National Automated Clearing House Association (NACHA) CA Interoperability pilot
• the Securities Industry Root CA (SIRCA) proof of concept
• the Automotive Network Exchange (ANX)
• the Department of Defense Bridge CA demonstration
• the Electronic Messaging Association (EMA) Security Challenge
• PKIX-CMP interoperability testing in association with other vendors and ICSA
• Identrus
• PKI Forum

Entrust actively participates directly in the following standards activities/forums:

• OASIS Technical Committees including:
  • Digital Signature Services (chair of committee)
  • Security Services
  • Access Control
  • WS-Security
• The Liberty Alliance
• W3C XML Key Management Work Group standardizing XKMS
• The Open Group (formerly OSF and X/Open)
• ISO/IEC JTC1/SC21/WG4 and ITU-T SG7 Directory
• ISO/IEC JTC1/SC27/WG2 Information Technology Security Techniques
• ANSI X9F1 Cryptographic Algorithms for the Financial Industry
• ANSI X9F3 Cryptographic Protocols for the Financial Industry
• IEEE P1363
• Federal PKI Technical Working Group (TWG)
• MISPCv2 (Minimum Interoperability Specification for PKI Components Version 2) Working Group
• Secure Digital Music Initiative (SDMI)
• The Wireless Application Protocol (WAP) Wireless Security Group (WSG)
• Several Internet Engineering Task Force (IETF) - working groups including:
  • Public-Key Infrastructure X.509-based (PKIX)
  • Common Authentication Technologies (CAT)
  • Secure/Multi-purpose Internet Mail Extensions (S/MIME)
  • XML Digital Signature (XMLDigSig)
  • LDAP Extensions (LDAPExt)

Within these groups, Entrust often takes a lead role in developing standards that describe secure solutions, and describe techniques facilitating ease of interoperability.