Secure SSL Telnet with PASSPORT
Terminal Emulation
Zephyr and RSA Security foster secure TN3270 and TN5250 Emulation from Windows
Secure
Sockets Layer, or SSL, is a connection-based protocol that uses
public key cryptography to provide secure server communications.
In the case of TN3270 and TN5250 emulation, this can mean secure access to
the latest releases of OS/390, OS/400 or IBM® Communications
Server using PASSPORT. The immediate beneficiaries of SSL are remote
users who access data over the Internet, including insurance, banking
and financial institutions.
Public Key Cryptography
Public key cryptography assures private and secure data transmission
through two processes: authentication and encryption. Authentication
ensures that the data sender is exactly who or what it claims to
be. Encryption, the most effective way to achieve data security,
is the process of translating data into a secret code. To demonstrate
the difference between 40-bit, 56-bit and 128-bit encryption, let's
refer to the following example from RSA:
Real World Example
" Equated to the real world, sending information without encryption
is like sending a postcard through the mail - the contents are visible
to anyone who wants to see it. Using this analogy, 40-bit encryption
is like sending the information in a plain white envelope, and 128-bit
encryption is like encasing your data in a lead-lined, 6-inch thick
titanium safe that is being transported by an armored tank with
a convoy of a hundred armed guards. In other words, 128-bits is
considerably more secure than 40."
Public and Private Keys
Authentication and encryption use digital codes called "keys"
- a public and a private key. The public key is used to encrypt
messages, and the corresponding private key is used to decrypt them.
It is important to note, however, that despite their symbiotic association,
it is virtually impossible to infer the private key if you know
the public key.
The public key has two major functions: validation and data encryption.
As its name suggests, the public key is openly published to any
party requesting one of these two functions.
The private key on the other hand, is necessary for encrypting
data (also called signing) and for decrypting. Unlike the public
key, this key is closely guarded.
Digital Certificates
Digital certificates are a standard way of binding a public key
to a name. In order to provide a digital certificate, the data sender
must apply for a digital certificate from a Certificate Authority
(CA) such as VeriSign. This way, the CA acts as a neutral third
party that verifies the data sender is who or what they claim to
be. Once this information is verified, the CA can issue a public
key certificate for that party to use. The most commonly used standard
for digital certificates is X.509. A universal standard of this
sort is necessary because in order to send encrypted data, you must
know the recipient's public key.
Download a Copy Now
Download a fully
functional trial copy of PASSPORT PC TO HOST® Terminal Emulation.
The evaluation copy can be downloaded and running in minutes, and
offers fully functional TN3270, TN5250, VT100, VT220, VT420, SCO ANSI and Wyse 60 emulation
with a built-in expiration date. Once your evaluation is complete,
you can convert the trial copy of the software into a production
version with a simple electronic code.
|