yOuThGenEraTion @ BAC 5

Third parties refer to Certificate Authority (CA) who issue digital certificates to verify that a particular website is representing its company. One of the famous application of 3rd party certification programme in Malaysia is provided by the MSC Trustgate.com Sdn Bhd. MSC Trustgate.com Sdn Bhd was incorporated in 1999 as a licensed Certification Authority (CA) in Malaysia under Digital Signature Act 1997. It aims at catalyzing the growth of e-commerce by creating a trusted e-environment that helps businesses to expand in the new economy. It provides security solutions and trusted services to help companies build a secure network application infrastructure for their electronic transactions and communications over the network. The services that provides by Trustgate are SSL Certificate, Managed PKI, Digital ID, MyTRUST, MyKAD PKI, SSL VPN, Managed Security Services, VeriSign Certified Training.

SSL Certificate
Trusgate provides two SSL Certificates due to the increase of phishing attacks on the Internet. It helps the customers to ensure that they are dealing with trusted parties and their information traveled over the Internet was reaches at intended recipients. The two certificates are Global Server ID and Secure Server ID. Global Server ID adopts today's strongest encryption commercially available for secure communications via Server Gated Cryptography (SGC) technology while Secure Server ID protect the transfer of sensitive data on network using a minimum of 40-bit and up to 256-bit encryption. It includes VeriSign that provides security solutions to protect the network and consumers of the organization.

Managed Public Key Infrastructure (MPKI)
MPKI service is a fully integrated enterprise platform designed to secure intranet, extranet, and Internet applications by combining maximum flexibility, performance, and scalability with high availability and security. The service allow enterprise to quickly and cost-effectively establish a robust PKI and Certification Authority (CA) system with complete control over security policies, PKI hierarchies, authentication models, and certificate lifecycle management.

Digital ID
The use of Digital ID to sign and encrypt the transactions can ensure that the confidential information is secured. Digital ID is an electronic credentials that uses private key and public key to facilitate the following operations:

Authentication – you are who you claim you are
Privacy – your confidential data remains private
Authorization – control user access rights to important data
Integrity – be sure data is not altered behind your back
Non-repudiation – have the evidence in the event of a dispute

MyTRUST
SIM card can turns into a Mobile Digital Identity for secure mobile banking and other financial services with MyTRUST. Mobile digital signature provides non-repudiation on transactions under the Digital Signature Act, 1997. It runs on Wireless PKI platform and Mobile Operator infrastructure. PKI-enabled SIM cards are preloaded with MyTrust application and a digital certificate from a licensed Certification Authority. Therefore, users are able to digitally sign any transaction easily and conveniently via their mobile phone.

MyKad PKI (MyKey)
MyKey is the MSC Trustgate.com Sdn. Bhd.’s Digital Certificate which is loaded into MyKad. It is governed by Malaysia’s Digital Signature Act 1997 and is accepted by the Malaysian government. Mykey allows its users signed document digitally. The document is treated as a legal binding document as it is with a handwritten signature.

SSL Virtual Private Network (SSL VPN)
SSL VPN provides secure remote access based on the web security standard SSL (Secure Socket Layer). SSL VPN can be configured to access multiple intranet sites with single sign-on. Users can get access to intranet, e-mail and business system from wherever they are and whatever device they choose. Besides, it provides an advanced policy management component to authenticate users and type of device they are using.

Managed Security Services
Valuable business resources that are accessible over the network need to be protected against misuse to ensure the business runs smoothly. Trustgate provides full set of security solutions to help companies build a secure and reliable environment for their organization. Trustgate’s consultants have extensive experience in implementing IT security and conform to SAS 70 standard. They are committed to deliver effective security infrastructure to protect organization’s network from attacks.

Verisign Certified Training
Trustgate has been appointed as Asia's first VeriSign Authorised Training Centre. Under the partnership, Trustgate and APIIT (Asia Pacific Institute of Information Technology) jointly facilitate the delivery of VeriSign’s high-end Security and E-Commerce programmes.

The projects that have been implemented by Trustgate in Malaysia included:
~E-banking Security Deployment
~E-procurement Integration
~User Authentication and Customer Clearance Approval System
~PKI for Online Transaction Payment System
~PKI Development & Integration for Malaysia’s National Identification Card “MyKad”
~PKI Infrastructure for E-government and E-business Transactions
~Secure Document Storage System
~Project Management and Application System Development
~Security Consultancy & Outsourcing Services

Reference:
http://www.mykey.com.my/Website/home.php
http://www.trademal.com/global/index.php/id/17463/key/trustgate/MSC_Trustgate_com_Sdn_Bhd/index.html http://www.msctrustgate.com/