To: brad greene who wrote (15432 ) 11/2/1999 10:20:00 AM From: R. Jaynes Read Replies (1) | Respond to of 26039
Here's an article that, if I read it correctly, appears to say you can use digital certificates to positively identify an individual. Some excerpts - Ruesch decided to use an extranet for managing and executing international payments for its 2,000 to 4,000 RueschLink clients expected to be signed up by this time next year. The company considered a range of security options, including biometrics such as fingerprint or voice identification; smart cards; and one approach that required users to enter their personal identification number into a desktop reader every five minutes. But the company rejected those as too cumbersome. "E-business isn't about barriers," Szoc says. Instead, Ruesch decided on digital certificates, which serve as a legal signature and produce a binding confirmation of a business transaction. That makes it hard for users to repudiate an agreement later. They also serve as proof that people are who they say they are. Ruesch chose the Secure Extranets system from CyberTrust Solutions Inc., a GTE company. "We thought about VeriSign, but we had a relationship with GTE Internetworking, and the pricing is competitive," Szoc says. . . . . A basic security measure includes verifying whether the people dialing in are who they say they are. The easiest approach is to require use of passwords. A more complex-but more secure-approach is using digital certificates and a public key infrastructure (PKI) to authenticate a user's identity, says Jeff Barnell, VP of technology for VPNet Technologies Inc., which develops virtual private network technology and services. "It works like a driver's license that you use to cash a check. You have to trust the Department of Motor Vehicles enough to know they issued this to so-and-so, and that that's enough to verify they are so-and-so," Barnell says.quoteserver.dogpile.com Rick