GemSAFE™ Your personal safeguard for secure web and e-mail services Frequently Asked Questions

| Back to GemSAFE Homepage |

Product Overview

What is GemSAFE?
GemSAFE provides a personal network safeguard by using digital certificates for accessing corporate Intranets, Extranets, Web sites and popular electronic mail systems. GemSAFE combines a Gemplus smart card, a smart card reader and software for integrating with popular Microsoft Corporation and Netscape Communications software suites.

Who developed GemSAFE?
GemSAFE was developed and is distributed by Gemplus, the world’s leading provider of plastic and smart card solutions.

What is the benefit of GemSAFE?
GemSAFE can prevent e-mail spoofing and provide better security access to Intranets and Extranets. The solution enables user authentication on the Web and also delivers confidentiality, integrity and non-repudiation (through signature) for e-mail.

What is the GemSAFE Evaluation Kit?
The GemSAFE Evaluation Kit is designed to assist organizations that want to implement a card-based solution to provide employees with a portable "electronic passport" using digital certificates for accessing corporate Intranets, Web sites and popular electronic mail systems. The components of the GemSAFE Evaluation Kit are:

• 25 GemSAFE smart cards
• 25 GCR410 Readers
• Software
• Technical Documentation

And depending on the region:

• Training and consulting (see Gemplus web site for more details)

Pricing & Availability

How much does GemSAFE cost?
GemSAFE is available as a shrink-wrapped kit for US$99. The GemSAFE Evaluation Kit ranges from US$1,999-$3,999 depending on services requested.

How do I purchase GemSAFE?
Single units of GemSAFE are available from Gemplus direct sales or via the Gemplus Webstore at www.gemplus.com. The GemSAFE Evaluation Kit is available by calling Gemplus’ direct sales. Contact information can be found on the Gemplus website.

Is GemSAFE available to Systems Integrators?
Yes. Any System Integrator (SI) who is working on Intranet or Internet security projects can benefit from GemSAFE. Additionally, IT security suppliers could also potentially become distributors for GemSAFE.

The technology

How does GemSAFE work?
GemSAFE stores a user’s confidential information and digital identity on a smart card to prevent misuse and fraud. Instead of entering one of many log-in screen passwords that can be easily duplicated or forgotten, a smart card offers a series of encrypted keys to protect information. When users need to access information, they simply insert their smart card into a compatible PC and type in their PIN (personal identification number) to ensure identification, while the microchip on the card carries out the user authentication.

How do I install GemSAFE?
GemSAFE is designed to be "plug-and-play," so it is easy to install and set up. Users simply connect the smart card reader to a computer’s serial port and install the software on any Windows 95 or Windows NT computer. The user then activates the smart card through an on-line procedure which downloads an industry-standard X.509 certificate to the card. The smart card now functions as a portable "electronic passport," providing strong proof-of-identity when sending e-mails or accessing Web sites.

What e-mail clients does GemSAFE support?
GemSAFE supports both Microsoft Outlook Express and Netscape Messenger e-mail clients which use digital certificates with the S/MIME standard for security messages.

How does GemSAFE work with Microsoft and Netscape products?
Both Microsoft and Netscape secure the user’s electronic identity in the form of a private key and a certificate, and store it on the local hard drive. GemSAFE brings additional security to these communication programs by storing a user’s key and certificates on a smart card. This adds portability, while eliminating the storage of keys on computers, which can easily be compromised. Any S/MIME-compatible e-mail program is capable of reading the messages secured with GemSAFE. The latest versions of Microsoft Internet Explorer and Netscape Navigator also support SSL 3 for Web client authentication using certificates. Web sites can be developed that require users to present their electronic identity or certificate before accessing certain information. This electronic identity can be securely stored on the GemSAFE smart card for added security and portability.

Market Overview

What is the market for the GemSAFE solution?
Businesses and consumers looking for simple, secure and portable solutions for business and transactions via the Web should look to GemSAFE. According to Datamonitor, the Internet Security market is growing and will continue to grow at 50% a year through the year 2001. In total, it is expected to reach US$6.9 billion.

Source: The average market forecasts from W3C, Forrester, IDC, & Jupiter

What types of industries would benefit from GemSAFE?
Security sensitive industries such as financial services, universities, healthcare, retailers, utilities, government and others would benefit from GemSAFE. For the first time these organizations will be able to provide their customers with the highest level of online transaction security because GemSAFE smart cards offer stronger user authentication than traditional password-based solutions.

What are some specific applications where GemSAFE would be an effective solution?
The following are examples of applications that are ideal for GemSAFE:

• Internet Banking – A bank already runs a Web site for publishing public information which includes content from its corporate brochure. This public information does not have to be secure. However, to provide customers with personal banking services such as account balances, transfers of funds, bill payments and stock trading, the bank and its customers require secure access to these sensitive transactions, without making the access too complicated for the end-user who is used to simply clicking on an icon to get the information. In this scenario, using GemSAFE, users no longer have to enter a name or an account ID, instead, they insert their GemSAFE card to get direct access to bank details. This new solution meets user needs and is compatible with both existing Web servers and PC software.

• Online Training – GemSAFE is ideal for a university that decides to market and sell online training because it ensures that the university protects the course content. With GemSAFE, information can only be accessed by the students who have paid their subscriptions. Additionally, when users starts a session, the server will automatically identify them and restore the lesson where appropriate.

• Corporate Intranets – Most Fortune 1000 companies have built vast Intranets that wire hundred of thousands employees to internal Web servers. The need for security and mobility is key for these applications, as very sensitive information such as product specifications, sales performance and human resources data is available. With GemSAFE, corporate Intranet systems can be protected by providing access only to authorized users, thus preventing the 80% of IT crimes that have internal origins.

What is a smart card?
A smart card, which is the size of a standard plastic "credit card" with an embedded computer chip, holds various types of information in electronic form with sophisticated security mechanisms.

What are the primary benefits of smart cards?
The primary benefits of smart cards are simplicity, security and portability.

What are today’s most popular smart card applications?
In 1997, Gemplus’ top five applications throughout the world were:

• Public Telephony – pre-paid phonecards using contact technology
• Mobile Telephony – mobile phone handsets featuring subscriber identification and directory services
• Banking – debit/credit payment cards and electronic purse
• Loyalty – storage of loyalty points in retail and gas industries
• Healthcare – identification of public or private social beneficiaries

What is the market for smart card solutions?
IT analysts and consulting firm, Frost and Sullivan expect worldwide smart card sales will balloon to more than $5 billion in 2003, up from $974 million in 1996.

What is Gemplus’ marketshare of smart card solutions?
At the end of 1997, Gemplus worldwide smart card solutions marketshare was 41%.

| Back to GemSAFE Homepage |