trust & security in the cloud · trust & security in the cloud ... certum java api...
TRANSCRIPT
Trust & Security in the Cloud
Marcin Szulga
Trust Services R&D Director
Asseco Data Systems
3
• Established in Poland, in 1991
• Our companies are listed in Warsaw, Tel Aviv and on NASDAQ
Asseco Group – at a glance
Provider of
proprietary
software
and services
6th
largest software
vendor in
Europe
Provider of
IT infrastructure
and IT security
solutions
176mEUR EBIT in
2016
1,1mEUR market
capitalization
22 300 employees, in
over 30 countries
1,8bEUR sales
revenue in
2016
The largest
IT company
in CEE
Federation
of companies,
owned and/or
controlled by
Asseco Poland
4
C E R T U M
– Key Facts
Our offer – the most complete stack
5
6
Trust Services & Security – a journey
Cloud is the next step in evolution of Trust Services
New solutions for Trust Services
7
REST API
CustomerHSM
(Crypto Cards)
eIDAS
qualified
service
eSignature/eSealService
SimplySign
Signature API
Certum IdP
API
WebNotarius
Sig. Validation
API
NonQ Certs
Enrollment
API
Q Certs
Enrollment
API
Certum JAVA
API
WebBrowser
Signature
Component API
Certum APIs Portfolio
Common API Use Cases
E-Invoices, ReportsFinance
AgreementsSales
Orders, ProposalsProcurement
Holidays, HR Requests, Agreements (short-time)
HR
Taxes, Social Insurance, ReportsB2G
API
Enterprise application
Finance
Sales
Web application
Mobile Devices
HR
API
11
STEP 1: Enroll certificate on SimplySign service
STEP 2: Integrate with Certum IdP API to obtain Access Tokens
STEP 3: Integrate with SimplySign API for document or code signing
Certum SimplySign API
12
Asynchronous REST, JSON
Certum SimplySign API
Authentication
Authentication
Access Token
Access Token
Signature Call
Certum Auth API
ExternalAuth API
APICERTUM
GET /idp/oauth2.0/authorize
POST
/idp/oauth2.0/accessToken
CLIENT_ID, REDIRECT_URL
CLIENT_ID, SECTER_ID,
REDIRECT_URL, AUTH_CODE
Certum IdP Auth API
13
14
Certum SimplySign
High Level vs Low Level API
POST “Sign” Method (PaDES)High LevelAPI
GET/cardsGET
/cards/certificates
POST
/cards/certificates/signLow Level
API
15
CSC API
16
How to start?
It's easy!
Contact us:
partner@assecods.
pl
17
PKCS#11, CSP, KSP driver that emulates physical card and connects via API with SimplySign service.
SimplySignDesktop
If I don’t want to play
with API and M2M?
18
CodeSigning in the Cloud
Innovation on the global market!
High security solution in the Cloud –
faster and easier signing of code and applications.
CodeSigning in the Cloud
20
If you want to know more– visit us at
stand A07Certum
„Trust & Security in the Cloud”
Thank you.
21
Marcin SzulgaTrust Services R&D Director
mobile: (+48) 669 992 097skype: marcin_szulgae-mail: [email protected]
The power of creation.
22
www.assecods.pl