Last modified: 08/27/03 11:56:52 AM
Trusted S/MIME Gateways.
Technical Report TR2003-461, Department of Computer Science, Dartmouth
Senior honor's thesis; advisor: S.W. Smith.
The utility of Web-based email clients is clear: a user is able to
access their email account from any computer anywhere at any
time. However, this option is unavailable to users whose security
depends on their key pair being stored either on their local computer
or in their browser. Our implementation seeks to solve two problems
with secure email services. The first that of mobility: users must
have access to their key pairs in order to perform the necessary
cryptographic operations. The second is one of transition: initially,
users would not want to give up their regular email clients. Keeping
these two restrictions in mind, we decided on the implementation of a
secure gateway system that works in conjunction with an existing mail
server and client. Our result is PKIGate, an S/MIME gateway that uses
the DigitalNet (formerly Getronics) S/MIME Freeware Library and IBM's
4758 secure coprocessor. This thesis presents motivations for the
project, a comparison with similar existing products, software and
hardware selection, the design, use case scenarios, a discussion of
implementation issues, and suggestions for future work.