Press Release
CoreStreet Validation Authority Under Evaluation By The National Information Assurance Partnership
Product is the First Distributed OCSP Responder to be Tested
CAMBRIDGE, MA (January 22, 2004)
CoreStreet, a leading provider of authorization and validation technology, today announced that its Real Time Credential Validation Authority (RTC VA) has been accepted for testing by the National Information Assurance Partnership (NIAP). Completing the evaluation process marks the point at which a security product is certified by the National Institute of Science and Technology (NIST) and the National Security Agency (NSA). The RTC VA is the first distributed Online Certificate Status Protocol (OCSP) responder to undergo the testing.
“This stringent evaluation will give customers an additional layer of confidence in the secure design and operation of the RTC VA,” said Bob Dulude, Chief Security Officer for CoreStreet. “When this is complete, anyone will be able to read and examine the evaluation documentation to get an unbiased understanding of whether the RTC VA is right for them.”
The NIAP is a collaboration between the NIST and the NSA designed to promote the development of technically sound security requirements for IT products and systems and to develop appropriate metrics for evaluating those products and systems. The long-term goal of NIAP is to help increase the level of trust consumers have in their information systems and networks through the use of cost-effective security testing, evaluation, and assessment programs. Evaluations are conducted according to the internationally recognized security standard called “Common Criteria”.
The CoreStreet RTC VA manages all PKI deployments, be they physical, such as smart cards, or logical, like secure email in a distributed setting. Unlike traditional OCSP responders, which require a permanent, secure connection to validate certificates, the RTC VA can be deployed at the edge of a network, enabling validation of certificates quickly and easily without establishing an expensive secure connection back to a central vault. That’s because CoreStreet uses Real Time Credentials—digitally signed proofs—embedded with information for validating and authorizing certain activities and access permissions.
The RTC VA is fully compatible with current security standards such as X.509 digital certificates and OCSP validation protocols. An organization already using PKI products can typically plug in the RTC VA without making any changes to their existing infrastructure.
About CoreStreet
Bridging the security gap between physical and information security, CoreStreet provides the only secure authorization and validation technology for connected and intermittently connected environments. Combining security, safety and convenience, CoreStreet enables organizations to grant or revoke an individual's access rights to buildings, computer networks, laptops, or wireless devices immediately in real time. The company, headquartered in Cambridge, MA, holds 14 patents with more pending. For more information, visit www.corestreet.com.
CoreStreet and Real Time Credentials are trademarks of CoreStreet Ltd.
