03-60-475Secure EmailProject 1

OnSite
Installation/Enrollment
Review the System Requirement
Enroll for a Digital Certificate Configure Outlook Email Account Verify the recipient also has Secure Email
OnSite
How it Works
– When registering for secure e-mail 2 keys are generated :
• a public key, which is stored in the Global
Address List : this is used for encrypting messages sent to you by others.
Masud Hasan 03-60-475 Secure Email
Project 1
Secure Email
It uses Digital Certificate combined with S/MIME capable email clients to digitally sign and encrypt E-mail
OnSite
QUESTIONS
Only easy ones will be answered! Kidding~~
OnSite
Configuring Outlook
OnSite
Configuring Outlook
OnSite
Sending Secure Email
•Encryption should not be set as a default
•To send a signed or encrypted message:
OnSite
Receiving Secure Email
•No action needs to be taken
•An encrypted message cannot be viewed in the preview pane, it must be opened •The lock and seal icons will appear on the message showing that it has been encrypted and signed
System Requirements
•Operating Systems: Windows 98 native &
Second Edition, Windows NT with Service Pack 5, Windows 2000 Power User or with a patch installed by an administrator. •Browsers: IE V5sp1 or later, 128 bit encryption enabled (domestic version) •Email programs: Outlook 98 or 2000 •Disk Space: Minimal •Intel platform. The computer must have at least a 100 MHZ Pentium processor.
OnSite
Enrollment Steps
OnSite
Enrollment Steps
OnSite
Configuring Outlook
•The user must configure their security settings in Outlook to recognize and make use of their newly downloaded personal certificate. This would involve:
- Click the lock and seal icons on the toolbar of a new message
-or-Go to Options on the toolbar of a new message and check Encrypt Message and Add Digital Signature
Digital Certificate
•A digital certificate is an electronic means of establishing your credentials when doing business or other transactions on the Web. It is issued by a certification authority (CA). It contains your name, a serial number, expiration dates, a copy of the certificate holder's public key (used for encrypting and decrypting messages and digital signatures), and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real.

OnSite
Services/ Mechanisms and Algorithm Used
Services in a security protocol
Signatures
Encryption
Hashing
RSA
DES
SHAI
OnSite
How you can secure your Email?
OnSite
Supported Platforms
•IE 5.0 SP1 or better is the only web browser currently supported for enrollment. •Wireless handheld and palmtop devices are not currently supported for secure email. •Outlook Web Access does not currently support secure email. •Alternatives to the standard solution such as PGP may not be used for secure email.
OnSite
Conclusion
I have been able to improve my knowledge in Computer Security by learning this tool.
My second project will be able to provide more details about PGP mail client using leading encryption techniques and to compare two different technologies for same purpose. Until then, Thanks for listening and good luck for Midterm.
• There are free digital certificates in the web. • Microsoft Email Clients have S/MIME protocol •Unix user can use it too •Following all the steps, you can secure your email.
S/MIME Client
– There are currently two actively proposed methods for providing these security services: S/MIME and PGP (both in its early incarnation as PGP/MIME, and as the new OpenPGP standard). – Microsoft Outlook: S/MIME Client.
-Selecting a Signing Certificate -Choosing a hash algorithm
-Deciding on a name and format for the settings
-Having clear text signed messages sent
OnSite
• a private key, which is stored in the mail
client (Outlook) on your pc : is used for digitally signing your own messages, and for decrypting encrypted messages sent to you.
Two Basic Features
– The two basic features of Email security are privacy (only the intended recipient can read the message) and authentication (the recipient can be assured of the identity of the sender). The technical capabilities for these functions has been known for many years, but they have only been applied to Internet mail recently.