Click here to learn
about this Sponsor:
Home  |  News  |  Articles  |  Polls  |  Forum

Keywords: Match:
Device security suite automates certificate management
Jun. 12, 2007

Mocana has added certificate management capabilities to its flagship device security software suite. The Certificate Management extension to Mocana's Device Security Framework combines a device runtime with a network-based application, with the aim of helping network operators efficiently provision and revoke certificates issued to VoIP phones and other connected devices.

According to Mocana, certificate-based authentication defends better than simple password authentication against SPIT (spam for Internet telephony), hijacked VoIP services, and other device security compromises. However, when managed manually, certificates may simply be left in devices until they expire. The company's Certificate Management extension aims to help network operators easily revoke and re-issue certificates over the network -- for example when devices are re-allocated to new users. This is said to greatly increase the scalability and practicality of implementing certificate-strength authentication in devices.


Mocana certificate management architecture
(Click to enlarge)

The Mocana Certificate Management extension implements the server component of SCEP (simple certificate enrollment protocol), a scalability-oriented authentication scheme originally developed by Cisco and Verisign, and subsequently submitted to the IETF as a draft standard (although it appears to have expired earlier this month). The extension also implements certificate authority and certificate registration authority services, Mocana said.

Touted capabilities and features include:
  • Certificate enrollment and renewal -- issuing a certificate to a specific user or device and/or renewing that certificate at regular intervals before expiration
  • Certificate revocation -- withdrawing a certificate from a specific device for a certain reason, making that device inoperable
  • Certificate query -- obtaining the Certificate Authority certificate and/or obtaining the end entity's certificate
  • CRL query - obtaining information on whether a certificate has been revoked
  • Uses Mocana's FIPS-validated PKCS and crypto libraries
According to Glen Allmendinger, president of Harbor Research, "As connected devices continue to proliferate across all industries, the need to automate security and systems management will be paramount. Connected devices will require security software that can [ease] provisioning burdens."

Mocana CEO Adrian Turner added, "The rate at which connected devices are proliferating is staggering. IT organizations are experiencing the pain of not only making sure those devices are secure when rolled out, but more importantly, managing the on-going security."

Availability

The Mocana Security Management extension is available now for Linux, MontaVista Linux, VxWorks, Nucleus, Solaris, ThreadX, Windows, Mac OS X, (ARC) MQX, pSOS, and Cygwin, the company said.



Related Stories:


(Click here for further information)


FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.

Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.

Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.

Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.

High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.

Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.

Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.

Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.

7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.

 


Got a HOT tip?   please tell us!
Free weekly newsletter
Enter your email...
Click here for a profile of each sponsor:
PLATINUM SPONSORS
GOLD SPONSORS
(Become a sponsor)

ADVERTISEMENT
(Advertise here)

Check out the latest Linux powered...

mobile phones!

other cool
gadgets



BREAKING NEWS

• Hacker-friendly karaoke PMP runs Linux
• Maemo gains KOffice port
• OLPC partners with Amazon, ITU
• "cJTAG" debuts
• First $100 laptop runs Linux
• First Linux on Everest
• Dell ships Ubuntu- and Atom-based netbook
• Smallest x86 board ever?
• MontaVista Vision gains focus
• "Olympics" phone runs Linux
• Android Challenge winners push location awareness
• Atmel-based industrial SBC runs Linux
• Atom squeezes onto Pico-ITX board
• Via frees Chrome graphics driver source
• Webinar dissects Linux multicore migration


Most popular stories -- past 90 days:
• Open source phone goes mass-market
• Updated! Linux Mobile Phones Showcase
• World's cheapest Linux-based laptop?
• Garmin Nav devices run Gnome Linux
• First Atom-based notebook runs Linux
• ARM9 board boots Debian in 0.69 seconds
• Open source camera records geotagged video to SATA HDD
• Linux-friendly Beagle fetches $150
• "PDA phone" runs Linux
• Intel offers $80 "Little Falls" Atom mobo
• Netflix Player runs Linux


DesktopLinux headlines:
• OSCON 2008 presentations, videos posted
• Debian distro named for little green man
• Google spins web browser
• Summit debuts for Linux end users
• "UbuntuLite" reviewed
• Linux in the SME
• Linux: not yet photo-friendly
• Linux to gain anti-virus software
• Linux gains backup utility
• Testing Lenny


Also visit our sister site:


Sign up for LinuxDevices.com's...

news feed

Home  |  News  |  Articles  |  Polls  |  Forum  |  About  |  Contact
 

Ziff Davis Enterprise Home | Contact Us | Advertise | Link to Us | Reprints | Magazine Subscriptions | Newsletters
Tech RSS Feeds | White Papers | ROI Calculators | Tech Podcasts | Tech Video | VARs | Channel News

Baseline | Careers | Channel Insider | CIO Insight | DesktopLinux | DeviceForge | DevSource | eSeminars |
eWEEK | Enterprise Network Security | LinuxDevices | Linux Watch | Microsoft Watch | Mid-market | Networking | PDF Zone |
Publish | Security IT Hub | Strategic Partner | Web Buyer's Guide | Windows for Devices

Developer Shed | Dev Shed | ASP Free | Dev Articles | Dev Hardware | SEO Chat | Tutorialized | Scripts |
Code Walkers | Web Hosters | Dev Mechanic | Dev Archives | igrep

Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2008 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.