by Klaus Schmeh | Jun 30, 2020 | Event
Every year, Mindshare is a highlight for cryptovision and the entire industry – with a great conference program and the hottest party of the summer. But this year? Due to Covid-19, many things are different at cryptovision at the moment, and so having Mindshare 2020 as an onsite event was not an option.
However, cryptovision made a virtue of necessity – and invited to a Digital Mindshare, which was held as a webinar. On June 23, 2020, two hours of exciting online presentations were broadcast live from the cryptovision meeting room, which had previously been turned into a television studio.
Under the motto “CryptOlympics”, six speakers presented the strategies and success stories of the company in the style of a sports TV show, including medal ceremonies and winner interviews (with customers and partners). Circuits to Mexico, Rotterdam and Berlin made it clear that this was an international event. It was informative as always, even if the usual networking during the breaks or at the party was missing.
After Marketing Director Veronica von Preysing had introduced the new Club cv, which will be discussed later at this point, each participant had the chance to sign up for a Corona Care Package. This included a backpack, a face mask, a survival bracelet, and a disinfectant spray – all the things you need in these times. The packages are being shipped by mail.
With 150 participants from ten countries, the Digital Mindshare 2020 was as popular as the onsite events of recent years. But despite the enthusiastic feedback, all participants agreed in one point: If at all possible, next year’s Mindshare will be an analog event in Gelsenkirchen again – and not just for the party.
Digital Mindshare website: https://www.cryptovision.com/de/unternehmen/mindshare-2020/
by Klaus Schmeh | May 4, 2020 | Products
Dealing with VS-NfD classified information is much easier if you can send it by e-mail. However, this is only permitted with a VS-NfD-approved encryption solution. GreenShield by cryptovision is one of the few products that meet this requirement. GreenShield not only convinces with its high user-friendliness, but also with its central management and the support of different BSI-approved smartcard types.
GreenShield is available in the variants GreenShield Mail (e-mail encryption) and GreenShield File (file encryption). GreenShield Mail is implemented as a convenient add-in for the user’s e-mail client. GreenShield File and GreenShield Mail for Outlook received approval for processing and transmitting VS-NfD (EU and NATO restricted) classified information as early as December 2018. Now the approval has been extended by the BSI to include GreenShield Mail for IBM Notes.
This makes GreenShield Mail the only VS-NfD approved email encryption solution for IBM Notes on the German market. The solution’s multi-client capability is also unique: it supports both Outlook and Notes on the same device. Thus GreenShield Mail enables a smooth migration from Notes to Outlook.
Germany’s largest Notes installation is operated by a Federal Ministry, which has been using the predecessor product (cv act s/mail – for VS-NfD) from cryptovision for 15 years. cryptovision is now pleased to be able to serve this customer with GreenShield Mail for Notes.
GreenShield website: https://www.cryptovision.com/en/products/security-applications/greenshield/
by Klaus Schmeh | Apr 16, 2020 | Products
Retailers and restaurateurs need to upgrade. The Kassensicherungsverordnung (KassenSichV) [Cash Register Security Ordinance] requires them to equip their cash registers with cryptographic security mechanisms that prevent tax fraud. The focus here is on a so-called Technical Security Device (TSE), a security module that must be certified according to the specifications of the German Federal Office for Information Security (BSI). A TSE must be used in every cash register, whereby the technical details are regulated in standard TR-03153.
cryptovision, which has specialised in crypto solutions for two decades, has completely developed an innovative TSE module on behalf of Bundesdruckerei and its subsidiary D-TRUST. A few days ago, this product received the required certificate from BSI. Now nothing stands in the way of its use in supermarkets, restaurants or furniture stores.
The primary goal in the multi-year design process was to develop not only a secure and legally compliant TSE solution, but above all one that is suitable for everyday use. No retailer will tolerate that a cash register that he uses dozens of times a day is suddenly more cumbersome to operate. Against this background, cryptovision and Bundesdruckerei decided to implement a microSD card, as known from digital cameras for example. With a size of less than two square centimetres, such a card can be integrated into small (mobile) POS systems without any problems. It can also be used on a server.
As the only solution on the German market, the TSE developed by cryptovision uses the latest chip generation with the card operating system JCOP 4 from NXP. All security-relevant functions are stored centrally on this chip – this increases not only security but also the future viability of the TSE. The product enables up to four transactions per second, with a lifetime that can be set at up to 20 million transactions. The solution can be accessed via several interfaces (C-API, JAVA-API or transport layer), which makes integration by manufacturers of POS systems easy.
“With our TSE product, we have once again succeeded in meeting high security requirements and legal regulations in a solution that is suitable for everyday use,” says Markus Hoffmeister, CEO of cryptovision, happily. “Our long-standing partnerships with NXP, Bundesdruckerei and D-TRUST were a great advantage in this respect”.
For Hoffmeister, the legally required protection of cash registers is only the beginning of a development that will also result in the protection of numerous other technical devices: “The future belongs to the Internet of Things (IoT). From electricity meters to cars to refrigerators, there is hardly anything that will not be connected to a communication network at some point in the future. Security will play a central role in this.” cryptovision is prepared for this. The Jacolyn CSP security solution, which forms the core of the certified TSE product, is not only suitable for cash registers. It can be used in many IoT applications in the future.
Additional links:
Press release by Bundesdruckerei (German): https://www.bundesdruckerei.de/de/Newsroom/Pressemitteilungen/Digitale-Kassendaten-vor-Manipulationen-schuetzen
Website about cryptovision’s TSE solution: https://www.cryptovision.com/en/solutions/iot-and-industry/fiscalization-solutions
by Klaus Schmeh | Apr 2, 2020 | Event
The SecIT 2020 in Hanover was to become a real highlight for cryptovision. Klaus Schmeh, Chief Editor Marketing at the Gelsenkirchen-based specialist for cryptography and electronic identities, was booked for a lecture, where he was to be on stage together with Bruce Schneier. Schneier is considered the most famous cryptologist in the world.
But then came the corona crisis, and with SecIT 2020 Schmeh’s joint appearance with the prominent partner fell through. At least, the organizers reacted quickly and converted the conference into an online event, which took place a few days later. The agenda was reduced, with both Schmeh and Schneier retaining their presentations. On 30 and 31 March, the virtual SecIT finally took place. Klaus gave a video conference on quantum cryptography before Schneier spoke live from the USA about Incedent Response. Though a virtual lecture was an unusual experience because of the lack of personal contact with the audience, Klaus’s engaging presentation style and his popular comic slides once again did their job. In the online forum it was quickly agreed: the experiment was a success, but even the best online event cannot replace a face-to-face gathering.
SecIT website: https://sec-it.heise.de/
by Klaus Schmeh | Mar 19, 2020 | General
“I’m at the home office right now.” As good as everyone has heard that phrase several times over the last few days. No wonder, because in the times of the coronavirus, working from home is as much a part of everyday life for many people as breathing masks and empty supermarket shelves. According to the German industry association Bitkom, one in three professionals in Germany is currently working in a home office for the first time, while for 43 percent, existing homework regulations have been extended.
Inevitably, the issue of security now comes into focus, because remote access should of course only be available to authorized employees of a company, and not to hackers.
Centrally managed company laptops or tablet PCs protected by endpoint security measures can usually be securely integrated into the corporate network using a virtual private network (VPN) enhanced with two-factor authentication (e.g. with a company ID). However, if a company has not yet implemented an endpoint security concept, a VPN is not sufficient. Instead, a sealed-off VDI (Virtual Desktop Infrastructure) is necessary, as it can be implemented on the server side with solutions from VMware, Citrix or Microsoft.
On the user side, both a fat client (for example via RemoteApp/RemoteDesktop) and a thin client can be used. A product bundle cryptovision offers together with partners such as IGEL, IBM or genua is best suited for this purpose. In such a solution, cryptovision’s smart credential middleware SCinterface is integrated, so that the user can log on in the home office with a secure two-factor authentication and does not become a security risk (think of phishing or attacks on the client system). Since SCinterface supports all common cards and security tokens, a company can also use existing Smart Credentials for the home office VDI.
You want to know more about cryptovision’s solutions for the secure home office? Our colleagues will be happy to advise you.
SCinterface website: https://www.cryptovision.com/en/products/secure-token-integration/sc-interface/
by Klaus Schmeh | Mar 13, 2020 | Event
It is with great regret that we have to announce the cancellation of this year’s Mindshare Conference. In the current situation, due to local restrictions as well as our own assessment, it is not possible to have our annual event in Gelsenkirchen. We very much care for our customers, partners and friends and want to make sure you are all staying safe. We are looking forward to meeting you next year in Gelsenkirchen. To get the latest information on Mindshare 2021 please subscribe to our newsletter.
Mindshare website: https://www.cryptovision.com/en/mindshare-2020/
by Klaus Schmeh | Mar 3, 2020 | Event, General Conferences, Webnews
“The program committee was blown away by your Powerpoint slides”, said a member of the organizing team at RSA 2020 to cryptovision’s Klaus Schmeh. As one of very few Germans, Klaus was chosen to give a presentation at the conference part of the event, which represents the world’s largest crypto gathering with over 45,000 attendees. Titled “Understanding and Explaining Post-Quantum Crypto with Cartoons”, the talk introduced the main post-quantum crypto algorithms with every slide showing a cartoon. Over 200 people in the audience proved as blown away by the presentation as the program committee.
cryptovision’s Adam Ross gave a talk, too. At the German-American IT Security Forum, hosted by the German industry association, TeleTrusT, he spoke about “Securing the Internet of Things – Embedded Security Made in Germany”.
Along with their co-worker Lutz Feldhege, Adam and Klaus ran a booth at the German pavilion of the exhibition part of RSA 2020, showcasing cryptovision products such as the smart credential middleware SCinterface and the PKI solution CAmelot. With about 600 booths, RSA once again qualified as the largest crypto exhibition in the world. Cryptovision is proud to have been a part of this great event.
Event website: https://www.rsaconference.com/events/us20
by Klaus Schmeh | Dec 20, 2019 | Products
cryptovisions smart credential middleware SCinterface is released in the new version 7.3. SCinterface now also supports macOS 10.15 (Catalina) and via SCinterface Utility the dark mode of macOS – good news for all Mac users. The configuration of PIN caching with SCinterface Cache has become much more flexible – it can be done according to time, predefined key usage or application, whereby whitelists as well as blacklists are possible. All variants can be combined at will. The flexibility of PIN caching increases the level of security. SCinterface 7.3 also supports additional cards, tokens, profiles and operating system versions. Not least due to the constantly growing number of interoperable solutions, SCinterface will remain the product of choice in 2020 for the use of Smart Credentials in applications of all kinds.
SCinterface product page: https://www.cryptovision.com/en/products/secure-token-integration/sc-interface/
by Klaus Schmeh | Nov 20, 2019 | Event
Encryption is an important thing – but it is used far too rarely. This was the message of the keynote lecture held by cryptovision employee Klaus Schmeh at the Security PWNing on 15 November in Warsaw. With almost 1000 visitors, Security PWNing is one of the most important IT security conferences in Eastern Europe. The hacker Gynvael Coldwind, who chaired the program committee, had engaged Schmeh because he has appreciated his presentation style – with a lot of humor and self-drawn cartoons – for years. Coldwind and the rest of the audience were not disappointed. Schmeh not only relentlessly revealed the shortcomings of the current (non-)use of cryptography, but also presented interesting solution strategies. The new magic word is “human-centred cryptography”. The human being has to be the focus of attention, then encryption will work.
Security PWNing website: https://www.instytutpwn.pl/konferencja/pwning/
by cryptovision | Nov 14, 2019 | General, Webnews
ePasslet Suite v3 – cryptovision’s Java card framework for electronic ID documents – will be available in 2020 on SECORA™ ID, Infineon’s new Java card operating system. Using ePasslet Suite, users of SECORA™ ID can easily and flexibly implement numerous eID functions. SECORA™ ID is the newest member of Infineon’s established SECORA family. SECORA™ ID is a smart card operating system based on the widely used Java Card standard. It was specifically developed as a platform for electronic ID cards.
SECORA™ ID is being certified according to Common Criteria EAL 6+ and EMVCo. In addition to Infineon’s in-house applet collection, SECORA™ ID also supports the proven ePasslet Suite by cryptovision. This solution considerably expands the functionality of SECORA™ ID by offering about a dozen additional applications. All common eID documents can be implemented this way, with a wide variety of configuration options as well as adaptations to national and project-specific requirements being possible – including electronic identity documents with several applications. The functionality includes the addition of applications on documents already issued. 
Cryptovision’s managing director Markus Hoffmeister: “We are delighted that Infineon customers can now use our suite on this new platform. The partnership with Infineon is another important milestone on our successful path in the eID market”. With Infineon’s SECORA™ ID as additional platform for ePasslet Suite, cryptovision gains access to another huge market: 70 percent of the worldwide population use identification documents based on Infineon’s security chips. To the Infineon press release
