Trust in products vs. Trust in ecosystems: A paradigm shift · 20.09.2017 Firmenlogo 8. Informationstag und Workshop "Elektronische Signatur" Gemeinsame Veranstaltung von TeleTrusT

Firmenlogo 20.09.2017

8. Informationstag und Workshop

"Elektronische Signatur"

Gemeinsame Veranstaltung von TeleTrusT und VOI

1

Trust in products vs.

Trust in ecosystems:

A paradigm shift ?

Dr. Kim Nguyen

Fellow (Bundesdruckerei GmbH) & Managing Director (D-TRUST GmbH)

CA Day, 2017-11-28 Berlin





2

Security has been one of the main

points of discussion for many

years …





3

Many portfolios are still focussing

on secure products alone…





4

Global markets are dominated by

global ecosystems & services





5

Of course security is part of these

ecosystems

- Infrastructure

- Products





6

But: customers move to solutions

that offer great UX and expect

security anyway





7

Have we lost the global game

already??





8

Markets

focus on trust,

not security





9

Business is global, Trust is local





10

But: Do we have the right trust

ecosystems?

Lets look at some global trends…





11

Example 2: The PKI world

Trustmodel (Old):

Centric

Believe in the one good

source…





12


Trustmodel (Old):

Centric

But what happens if good

turns into evil???

Diginotar etc.





13


New Trustmodel:

Distributed

Certificate transparency

(CT)

A certificate is only trusted

if it appears in several

independent trusted logs…





14


New Trustmodel:

Distributed


(CT)

CT is quickly becoming a

standard feature for SSL

certs





15


New Trustmodel:

Distributed


(CT)

What about Publicly trusted

certificates in general?





16


New Trustmodel:

Distributed

Certificate

transparency (CT)

How does CT interact with

data privacy?

Data redaction as a

probable solution?





17


Trustmodel (Old):

Centric

Believe in the one good

source…

CAA =

Certification Authority

Authorization





18


Trustmodel (New):

Distributed

CAA =

Certification Authority

Authorization

CAA entry regulates

which TSP can certs

for a domain





19

First observation

TSP business is quickly

becoming dependent on

various technical

infrastructures not operated

by the TSP itself





20

Example 3: Trust Services are

becoming part of a global market





21

Example 2: Trust Services are

becoming part of a global market

© ADOBE, 2017





22

Second observation

TSP business is quickly

becoming involved in

larger, „holistic“ platforms

and infrastructures





23

Business is global, Trust is local

The eIDAS regulation as a european basis





24

eIDAS offers the chance to

establish a common EU Trust eco

system with high UX





25

Personal identity vs.

Organizational identity





26

EU Market is ready

for local

eIDAS trust

services

Lets build

a trusted eIDAS

ecosystem

together





27

Summary:

Secure products are needed,

but not enough

Ecosystems will win the game –

and the customers

Lets build a secure trusted

European ecosystem together!





28

Thank you for your

attention!

Documents

Trust in products vs. Trust in ecosystems: A paradigm shift · 20.09.2017 Firmenlogo 8. Informationstag und Workshop "Elektronische Signatur" Gemeinsame Veranstaltung von TeleTrusT