Security and the Smarter Planet

Dr. Matthias Kaiserswerth
Director, IBM Research - Zurich

Security and the Smarter Planet
Text

1 © 2009 IBM Corporation

IBM Research - Zurich

AGENDA
• Introduction to IBM Research

• What is a smarter planet?

• Innovations for a smarter planet

• Identity Mixer

• Zone Trusted Information Channel

• Fighting Crime with Analytics


AGENDA



• Identity Mixer




The sun never sets on IBM Research

Zurich
Watson (NY) Established in 1956
China
Founded in New York in 1945 Established in 1995

Almaden (CA) Haifa
Established in 1952 Established in 1972

Austin (TX) Tokyo
India
Established in 1998



The sun never sets on IBM Research

• Largest private research organization worldwide
• More than 3,000 scientists and engineers
Zurich
at 8 labs in 6 (NY)
Watson countries
Established in 1956
China
Founded in New York in 1945 Established in 1995
•Almaden (CA) on R&D in 2008
IBM spent $6B Haifa
• Patent leader for 16 years straight

Austin (TX) Tokyo
• 5 Nobel Prize Laureates
Established in 1995
India
Established in 1982

Established in 1998



16 Consecutive Years of Patent Leadership Worldwide
2008 US Patent Leaders

4500 4186

>2x
Number of Patents

70%

>20x
Software
and
Services 2030
1776
1424

205 192 186
68 58
0
IBM Microsoft Intel HP Oracle EMC Apple Accenture Google

Source: IFI Patent Intelligence



Open Collaboration
To Expand and/or Leverage New Regions, Partners and Research Areas



IBM Research - Zurich Today
- 350 Persons including
employees, pre-docs and
post-docs and visiting
scientists

- 30 different nationalities

- 90 Collaborative projects
with universities, industrial
partners and governments

- New Nanotech Center to
open in 2011



Our Major Accomplishments



AGENDA




• Identity Mixer




Global Technology Outlook Genetic Map
2000 2001 2002 2003 2004 2005 2006 2007 2008

Technology Technology Technologyechnology
T Technology Technology TechnologyNano- Systems, and
Technology Technology,
and Systems Systems
and Software
Modular Syste Internet
Systems Storage Optimized ms Datace
Systems Desig nter
SW SW Legislati n
Depend Post Quality/ on and
ability 9/11 Securit Data
y Characte Event- Real
ristics Driven World
Continu of On-
Stochas Demand World Aware
Optimi al Data tic
ze to Optimiz and Analysi Managin
Surviv Intellige Analytic s and
ation g
e nt s Optimiz Metada Busines
Informa ation ta s
tion Integrity
Virtual People
Identity Proxies
Embed Pervasi Enterpri
ded ve
Pervasi Dynami Pervasi Softwa Connec Speak to IT se
ve c ve re tivity Mobile
e- On- Archite Innovati
SW Busines Deman cture on Service
Layers Next
s d of in s 2.0 CiC
Gen Frame Busines Service Web
Web work s s
Enterpri Web Platfor
Intellige se SW 2.0 Digital m
nt Autono Intellect Communities
Infrastru Utilities mic ual
cture Property
11
© 2009 IBM Corporation


Smarter Planet
Our world is becoming

INSTRUMENTED

INTERCONNECTED
Virtually all things, processes and ways
of working are becoming

INTELLIGENT



Smarter Planet

INSTRUMENTED
Smarter planet: Thinking and
acting in new ways to make our

INTERCONNECTED
systems more efficient, productive
and responsive, but this doesn’t
Virtually all things, processes and ways
of working are becoming
come without risk.
INTELLIGENT



With growth and connectivity, comes increased risk

99%
OF ALL FINANCIAL
ONLINE FRAUD TARGETS
THE USA AND EUROPE

50%
INCREASE IN THE
NUMBER OF MALICIOUS
WEB SITES IN 2008

14.5B
14
MESSAGES A DAY ARE
CONSIDERED SPAM
IBM Internet Security Systems X-Force® 2008 Trend & Risk Report, http://www.spamlaws.com/spam-stats.html

© 2009 IBM Corporation


AGENDA




• Identity Mixer




Identity Mixer
The flexible RSA problem: Given an RSA modulus n and a number z ∈ Zn find an e ≥ 2
and a u ∈ Zn such
ue≡z (modn)
Strong RSA assumption: solving the flexible RSA problem is hard for big n.
Remember : FACTORING ≥ RSA ≥ S-RSA
Systemparameters: integer invervals Γ, ∆, Λ and length ln
Org Oʼs pk: RSA mod nO > 2ln and (aO, bO, dO, gO, hO) ∈R QRnO
User Uʼs master secret key: xU ∈ Γ
Uʼs nym with O: P(U,O) = aOxUbOs(U,O), where s(U,O) ∈R ∆ (s(U,O) = Uʼs secret)
Credential by O on P(U,O): (c(U,O), e(U,O)) where – e(U,O) ∈R Λ and prime.
– c(U,O)e(U,O) ≡ P(U,O)dO ≡ aOxUbOs(U,O)dO (mod nO) Theorem: Given an oracle O that on input xi ∈
Γ outputs
(si, ei, ci) s.t. si ∈R ∆, prime ei ∈R Λ and ciei ≡ aOxibOsidO , then computing (c, e, x, s) s.t.
c2e ≡ (aOxbOsdO)2& (mod nO) and (x, s, e, c) = (xi, si, ei, ci) is infeasible under the SRSA.
̸
U has established pseudonym P(U,Oi) = aOixUbOis(U,Oi) with Oi. U want to prove to Oi
possession of a credential by Oj, i.e., values
s(U,Oj), c(U,Oj), e(U,Oj)! s.t.! c(U,Oj)e(U,Oj)! ≡ aOjxUbOjs(U,Oj)dOj 1. U sends A = c(U,Oj)
hOjr1 and B = hOjr1gOjr2 to Oi,
where r1, r2 ∈R {0, 1}2ln PK{(α,β,γ,δ,ε,ζ,ξ,η) : dOj2 = (A2)α(a1 2)β(b1 2)γ(h1 2)δ ∧
Oj Oj Oj
B2 = (hOj2)ε(gOj2)ζ ∧ 1 = (B2)α(h1 2)δ(g1 2)ξ ∧ Oj! Oj
P(U,Oi)2 =(aOi2)β(bOi2)η ∧ β∈Γ ∧ γ∈∆ ∧ α∈Λ} .


Identity Mixer

• Anonymous sharing of data
• On the Internet or via Smart
Cards
• Data owner controls who
sees the data, for how long
and who they can share it
with



Identity Mixer
Friend
Call Center

Auto Insurance Company

Family Doctor Health
You Insurance

DNA
18
Database © 2009 IBM Corporation


AGENDA



• Identity Mixer




Typical online banking scenario

USB Bank
You Bank
Token
sign(message) SSL/TLS connection



Man in the Middle online banking breach

Spoofed email (phishing)
You Bank
Trojan Horse Virus

Impersonation

Fake Client



Zone Trusted Information Channel (ZTIC)
Back End Server
User PC (possibly under attack) (Bank)

ZTIC
Proxy

Looks at/
interacts with

ZTIC
(secure display)

Maintains all asymmetric
keys and TLS session keys
for server connection

Separate ZTIC hardware



AGENDA



• Identity Mixer




Business Analytics
Business
Optimization

Business Intelligence

Resource planning

Business Automation



NYPD Real Time Crime Center



Fighting Crime with Analytics



Summary

• Progress always comes with great risk. For
this reason security needs to be a top priority
from the start

• Open collaboration between corporations,
academia and government are critical in
reducing this risk

• Happy 60th Birthday


Zurich Research Lab

29

Security and the Smarter Planet

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Andere mochten auch

Andere mochten auch (20)

Ähnlich wie Security and the Smarter Planet

Ähnlich wie Security and the Smarter Planet (20)

Mehr von IBM Research - Zurich

Mehr von IBM Research - Zurich (6)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Security and the Smarter Planet