Secure EmailUW Digital ID
Secure EmailStarring the Angry Birds
IntroductionBackground: Nicholas DavisEmail, the electronic postcardWhy encryption is importantS/MIME, secure emailWhat is...
Email, the electronic postcardEasyCheapGets the idea acrossWho can see itWhat assurance doyou have ofconfidentiality?Does ...
Why Encryption is Important        Keeps private information private        HIPAA, FERPA, SOX, GLB compliance        Pr...
S/MIME Industry StandardSecure/Multipurpose Internet MailExtensionsThe equivalent of a Kevlar envelopefor your emailEmail ...
What is a UW Digital ID• A UW Digital ID is our branded  digital certificate• A UW Digital ID is the electronic  identific...
How Does a Digital ID Work                    Even some Angry Birds                    have difficulty                    ...
What is Inside a Digital ID
Where Do Digital IDs Come From• A certificate issuer  recognized by all  computers around  the globe• Root certificates ar...
It Is All About Trust
Using Digital IDs to Secure Email Best use for certificates, in my opinion Public key enables encryption and ensures tha...
Digital ID Also Demonstrates….. Proof of authorship The contents of the message have not been  altered from their origin...
What does it actually look like in practice?                -Sending-
What does it actually look like in practice      (unlocking my private key)               -receiving-
What does it actually look like in practice?        -receiving- (decrypted)
Digitally signed and verified;          Encrypted
What does it look like in practice?    -receiving- (intercepted)
Intercepting the Data in Transit
Send Me a Signed Email,Please, I Need Your Public Key
Who Uses UW Digital IDsEveryone in the Office of the RegistrarEveryone in the Office of Financial AidNumerous other depart...
How To Get a UW Digital ID1. Go to the DoIT Tech Store2. Tell the friendly people that you would like a UW Digital ID3. Sh...
You Never Know Who Is Watching – Movie #1
How Do They Do It    Movie #2
Questions and DiscussionNicholas DavisMBA, CISA, CISSPndavis1@wisc.edu
Upcoming SlideShare
Loading in...5
×

How to Secure Email By Using Encryption

318
-1

Published on

Think about all of the information contained in the emails you exchange every day. If you are concerned about sending sensitive or confidential information via email, we have good news! UW-Madison faculty, staff and researchers have free access to a UW-Madison Digital ID to encrypt and securely send emails. Digital IDs can also be used to digitally sign important electronic documents.

Please attend this one-hour brown bag session, presented in an Angry Birds motif, where we will highlight the dangers of sending unsecured email, demystify the technology used to encrypt email and digitally sign documents, and register you for an ID.

Special note to researchers: If you need to share sensitive research information with individuals from other institutions, use a UW-Madison Digital ID to secure your email.

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
318
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
21
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

How to Secure Email By Using Encryption

  1. 1. Secure EmailUW Digital ID
  2. 2. Secure EmailStarring the Angry Birds
  3. 3. IntroductionBackground: Nicholas DavisEmail, the electronic postcardWhy encryption is importantS/MIME, secure emailWhat is a UW Digital IDHow does a UW Digital ID workWhat is inside a digital IDWhere do digital IDs come fromA story of trust, based on massive paymentsDigital IDs for secure emailDigital IDs for digital signingWhat encrypting email looks like in practiceInterception of data in transitHow to get that important public key
  4. 4. Email, the electronic postcardEasyCheapGets the idea acrossWho can see itWhat assurance doyou have ofconfidentiality?Does confidentialitymatter? Yes, no,maybe…
  5. 5. Why Encryption is Important  Keeps private information private  HIPAA, FERPA, SOX, GLB compliance  Proprietary research  Human Resource issues  Legal Issues  PR Issues  Industrial espionage  Over-intrusive government  You never know who is listening and watching!
  6. 6. S/MIME Industry StandardSecure/Multipurpose Internet MailExtensionsThe equivalent of a Kevlar envelopefor your emailEmail is encrypted (wrapped up)before sending and is secure for itsentire trip, and at its destinationEmail is decrypted (unwrapped) onlyby the intended recipient
  7. 7. What is a UW Digital ID• A UW Digital ID is our branded digital certificate• A UW Digital ID is the electronic identification equivalent of a passport• It has added benefits too• Allows you to digitally sign email and electronic documents• Allows you to encrypt email for others• Allows you to decrypt email which others have encrypted for you
  8. 8. How Does a Digital ID Work Even some Angry Birds have difficulty understanding this!
  9. 9. What is Inside a Digital ID
  10. 10. Where Do Digital IDs Come From• A certificate issuer recognized by all computers around the globe• Root certificates are stored in the computer’s central certificate store• Requires a stringent audit and a lot of money!
  11. 11. It Is All About Trust
  12. 12. Using Digital IDs to Secure Email Best use for certificates, in my opinion Public key enables encryption and ensures that the message can only be read by the intended recipient
  13. 13. Digital ID Also Demonstrates….. Proof of authorship The contents of the message have not been altered from their original form This is done through the use of digital signing
  14. 14. What does it actually look like in practice? -Sending-
  15. 15. What does it actually look like in practice (unlocking my private key) -receiving-
  16. 16. What does it actually look like in practice? -receiving- (decrypted)
  17. 17. Digitally signed and verified; Encrypted
  18. 18. What does it look like in practice? -receiving- (intercepted)
  19. 19. Intercepting the Data in Transit
  20. 20. Send Me a Signed Email,Please, I Need Your Public Key
  21. 21. Who Uses UW Digital IDsEveryone in the Office of the RegistrarEveryone in the Office of Financial AidNumerous other departments around campusOver 1300 users alreadyThose who want to exchange secure email with peopleat other UW-System campusesFor encryption and signing of email and attached filesThe entire email is encrypted, including attachments
  22. 22. How To Get a UW Digital ID1. Go to the DoIT Tech Store2. Tell the friendly people that you would like a UW Digital ID3. Show them your Faculty/Staff ID card and one other form of ID4. Go back to your office5. Within 24 hours, you receive a registration email6. Follow instructions7. Click on link to download your UW Digital ID8. Follow simple import instructions9. Send a digitally singed email to someone, by clicking on the digitally sign button10. Now, that person can encrypt mail to you, by clicking on the encrypt button11. If they send you a digitally signed email, you can now encrypt for them12. If you both send digitally signed emails, you can now encrypt for each other13. Digital signed email must only be sent once* If your department has multiple interested people, we can send someone to docredentialing at your office
  23. 23. You Never Know Who Is Watching – Movie #1
  24. 24. How Do They Do It Movie #2
  25. 25. Questions and DiscussionNicholas DavisMBA, CISA, CISSPndavis1@wisc.edu
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×