Safe and trustworthy access in a working environment

Safe and trustworthy access in a working environment: the Moodle. PKI project Pilar Lasala & Leo Catalinas University of Zaragoza Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project Working environments When users access to a working environment: ØThe system needs to know who is The user accessing should have an identification system so that the server allows him/her the access The server should have a certification ØThe user needs to know where he/she is system accessing so that the user is sure where he/she is accessing Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project LEFIS working environment Ø The server will let anyone navigate through its pages, but it will only let the LEFIS members access to the restricted areas Ø The LEFIS member will know that he/she is really working with the LEFIS server Ø The LEFIS documents will be digitally signed to assure their integrity and legitimacy Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project LEFIS working environment Username: Password: Digital certificate Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project LEFIS working environment ? ? Digital certificate Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project LEFIS working environment ? ? 0 III 000 III 00 I 0 I 00 II 000 I 00 I 0 I Digital signature Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project Moodle. PKI Project Modular Object-Oriented Dynamic Learning Environment Ø Is a ‘CMS’ (course management system) Ø Open Source software package Ø Ø + Ø Ø Ø WG Activities Support User’s communication Dynamic contents Workshops Assemblies …… Public Key Technologies to increase security Digital certificat e 0 III 000 II I 00 I 0 I 00 II 000 I 00 I 0 I Digital signatur e Digital certificat e Ø Ø Our own PKI with Open Source Software Secure and identified web access, signed documents and signed email Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project LEFIS PKI design Trust based in APTICE CA Hierarchical Permits building multiple PKIs Capable of recognize other PKIs Cross Certification between PKIs APTICE Certification Authority Lays Trust Base signs APTICE CA delegates Lays Trust Base LEFIS PKI ORG 1 PKI Trust LEFIS Subordinated Certification Authority The LEFIS PKI ORG 2 PKI manages Trust Used Trust Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands LEFIS Registration Authorities

Safe and trustworthy access in a working environment: the Moodle. PKI project How to get a LEFIS Certificate? http: //pki. lefis. org (PKI Sign up option in the left menu) More information http: //pki. lefis. org CSR LEFIS_MAN_EN_ENROLL_LEFIS_ Certificate signing L PKI. pdf A ANU request M Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

Safe and trustworthy access in a working environment: the Moodle. PKI project What does the user get with a LEFIS Certificate? Ø Identified access to LEFIS Web resources Ø Documents and e-mail digital signature Ø Users can use public/private keys to sing and/or encrypt documents in their own computers (if their are interested) Monitoring and Supervision Seminar 15 June 2006, Rotterdam, The Netherlands

www. lefis. or g