Skip to navigation

Press Release

CoreStreet Launches Newest Version Of Its Real Time Credential Validation Authority

Newest Version Will be the Only Distributed OCSP Solution to Meet Strict Common Criteria Certification Standards

Cambridge, Mass. (April 26, 2004)

CoreStreet, a leading provider of validation solutions for identity management and access control, today announced the immediate availability of the new Real Time Credential Validation Authority (RTC VA) 3.0, the industry’s most secure, massively scalable and cost-effective Online Certificate Status Protocol (OCSP) system for validating digital certificates. RTC VA 3.0 enables security administrators to revoke an individual’s access rights in real time, in any environment, connected or disconnected. RTC VA 3.0 is ideal for government agencies and financial services institutions looking to bridge the gap between logical and physical environments.

RTC VA 3.0 is the only distributed OCSP solution that will meet Common Criteria EAL3 certification once the standard evaluation is completed in Q2, 2004. RTC VA 3.0 includes improved security features, such as enhanced audit logging with digital signatures, enabling an auditor to securely track actions performed in the management interface. In addition, support for Delta CRLs allows administrators to update just new revocations in real time, which can reduce revocation time to a fraction of a second even for large certificate deployments.

“RTC VA remains the industry’s only secure, massively scalable and cost-effective solution for government agencies, financial services companies and the Global 1000 where mission-critical data in the digital world or buildings in the physical world need to remain secure,” according to Phil Libin, president of CoreStreet. “The enhanced security features and significant upgrades in administrative features add additional benefits to companies looking to buy the only OCSP product of its kind on the market.”

The RTC VA works by publishing certificate status information in the form of small, digitally signed OCSP responses. These responses can be used to determine the validity of a digital certificate or establish individual privileges or access rights. Unlike previous public key infrastructure (PKI) implementations, the RTC VA does not require securely vaulted responders. By reducing the need for costly security measures such as hardware security modules, server protection, and secure communication lines, the RTC VA greatly reduces implementation and maintenance costs for PKI security.

RTC VA 3.0 offers the following features and benefits:

  • Common Criteria Certification —RTC VA 3.0 is in evaluation at National Information Assurance Partnership (NIAP), a U.S. Government initiative originated to meet the security testing needs of both information technology (IT) consumers and producers. Certification will be completed in Q2, 2004. When completed, RTC VA 3.0 will be the only distributed OCSP EAL3 certified solution on the market. RTC VA 3.0 will be certified at assurance level 3, augmented with ALC_FLR.1.
  • Security Enhancements— RTC VA 3.0 features more robust security for accessing and managing the master authority. In addition, RTC VA can support digital signatures for all logging of administrator activity. By digitally signing all audit records, administrators will be able to view who initiated changes and when.
  • Support for Delta CRLs— RTC VA 3.0 allows administrators to make new revocations available in real time, allowing an administrator to update just the new revocations. This can reduce the time for revocation publication from minutes to seconds.
  • New Database Functionality —The RTC VA 3.0 includes a powerful embedded database engine for Microsoft Windows environments, without additional licensing requirements. This eases the installation process and further meets the needs of customers.

CoreStreet Product Certifications

Common Criteria- officially in evaluation
DoD JITC Certified
FIPS 140-2

Availability

The RTC VA 3.0 is shipping today and is available worldwide. For more information, contact CoreStreet at 617-661-3554 or visit www.corestreet.com.

About CoreStreet

CoreStreet is the only provider of massively scalable validation products for identity management and access control. With CoreStreet’s Real Time Credentials™, organizations can control physical and logical access to buildings, computer networks, applications and devices.

Real Time Credentials solutions can be deployed anywhere in the world - in connected and disconnected environments - without having to set up costly and vulnerable infrastructure. CoreStreet’s products are designed to secure large, mission-critical applications for military, civilian government, financial services and healthcare customers. The company, headquartered in Cambridge, Mass., holds 14 patents with more pending. For more information, visit www.corestreet.com.

CoreStreet and Real Time Credentials are trademarks of CoreStreet Ltd.