Welcome Guest. | Log In | Register | Membership Benefits

InCommon And Comodo Partnership Secures Colleges And Universities

Companies have issued tens of thousands of certificates

Sep 28, 2011 | 08:38 PM | 


Ann Arbor, MI, and Jersey City, NJ, September 28, 2011 - In just the first year of a unique partnership, InCommon (www.incommon.org) and Comodo (www.comodo.com) have issued tens of thousands of certificates to more than 120 colleges and universities across the United States.

InCommon, operated by Internet2, provides the U.S. research and higher education with a framework of trust for the safe sharing of online resources. Comodo is a leading certificate authority and Internet security organization, providing businesses and consumers with a variety of security and trust services.

The partnership between InCommon and Comodo CA Ltd. offers U.S. higher education institutions with unlimited certificates for one annual fee, providing substantial cost and overhead savings. Subscribers may issue unlimited Secure Socket Layer (SSL) certificates, including extended validation (EV), client (personal) certificates, and code signing certificates for all of the domains they own or control such as .edu, .org, .net, .com and others.

"By offering unlimited SSL certificates, we've provided the potential for campuses to significantly reduce their certificate-related expenses," said John Krienke, chief operating officer of InCommon. "Now that we have rolled out client (personal) certificates, we've set the stage for campuses to more easily adopt important services like signed email and second-factor authentication. Economics are no longer a limitation for certificate possibilities."

One large state university system and current subscriber anticipates an annual savings of about $325,000. Additionally, many large, individual campuses report savings of $75,000-$90,000 per year.

"We are in the $15,000 bracket for large Internet2 members, so our cost savings is roughly in the $65,000-75,000 range annually compared to our previous certificate provider," said one subscriber. "That ends up being a four-to-five-times return on investment."

"We are proud of our partnership with InCommon and ability to deliver trust and savings to colleges and universities throughout the country," said Melih Abdulhayoglu, CEO and chief security architect of Comodo. "These security measures will enable students and faculty members to perform secure communication and transactions online by fortifying the IT networks of higher education systems against security breaches and the leakage of digital information."

Because institutions can issue an unlimited number of certificates, many now use valid certificates in their test environments. Some campuses have also done away with chargeback systems that were common when certificate purchases were distributed and done one at a time.

One subscriber commented: "The program paid for itself within one central department that used to purchase just 200 certs a year for $28,000. This department now picks up the $15,000 annual cost for the entire campus. A win-win-win all the way around."

The InCommon Certificate Service is a non-profit, transparently operated service. Internet2 members receive a 25 percent discount. For more information, including a fee schedule and subscriber agreement, see www.incommon.org/cert.

About InCommon

InCommon provides the U.S. research and higher education with a framework of trust for the safe sharing of online resources. Through InCommon, research organizations and higher education institutions take advantage of a privacy-preserving, secure method to offer single sign-on convenience and standards-based security to their faculty, researchers, students and staff. Individuals no longer need to maintain multiple passwords and usernames, and online service providers no longer need to maintain user accounts. The educational institution or research organization manages the level of privacy and security for its constituents. The InCommon Certificate Service offers unlimited certificates to the U.S. higher education community for one fixed annual fee. For more information, see www.incommon.org.

About Internet2

Internet2 is an advanced networking consortium led by the research and education community. An exceptional partnership spanning U.S. and international institutions who are leaders in the worlds of research, academia, industry and government, Internet2 is developing breakthrough cyberinfrastructure technologies that support the most exacting applications of today—and spark the most essential innovations of tomorrow. Led by its members and focused on their current and future networking needs since 1996, Internet2 blends its human, IP and optical networks to develop and deploy revolutionary Internet technologies. For more information, see www.internet2.edu.

About Comodo

Comodo' is a leading brand in Internet security. With US Headquarters in New Jersey and global resources in UK, China, India, Ukraine, and Romania, Comodo provides businesses and consumers worldwide with security and trust services, including digital certificates, PCI scanning, desktop security, and remote PC support. Securing online transactions for over 200,000 businesses, and with more than 35 million desktop security software installations, including an award-winning firewall and antivirus software, Comodo is Creating Trust Online'. To learn more, visit Comodo's website: www.comodo.com .



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Compliance Reports

report How To Boost Security Via FFIEC Compliance
With just a smartphone, users can conduct nearly all their banking business at any time of the day or night. However, all this flexibility and convenience opens up new avenues for fraud and cybercrime. Guidelines laid out by the FFIEC several years ago predate many of the capabilities-and vulnerabilities-that are in place today. In this report, we examine the latest guidelines and provide advice on how you can extend the work done to comply with FFIEC guidelines to strengthen your organization's overall security posture and keep customers and their data safe.

report Keeping Compliance In Check
Configuration mistakes, access control gaffes, poor documentation--it doesn?t take much for a compliance audit to go all wrong. In this special retrospective of recent news coverage, Dark Reading takes a look at the costs, common missteps and best practices for compliance, as well as the day the Internet nearly went dark due to the threat of new regulations.

report FISMA Lifts All Compliance Boats
FISMA may not be on your radar now, but it likely will be at some point. Geared specifically toward the federal government and its affiliate agencies and third parties, FISMA is a very specific set of requirements aimed at establishing and maintaining at least a baseline level of computer and network security. FISMA requires unique categorization and classification of information assets, not to mention a boatload of documentation to prove compliance. But once your organization achieves FISMA compliance, it will likely be compliant with just about every security mandate out there.

Other reports from the Compliance Tech Center:

Related Content

Log Management in 2012 and Beyond
2012 brings interesting changes to the log management world. Now, more than ever, it is critical to understand the impact to your log infrastructure and the solutions that will better prepare you to manage your security posture.

SANS Log Management Survey Report
Organizations are increasingly dependent on log management to support core business functions, including cost management, service level and line-of-business application monitoring, as well as traditional IT- and security-focused activities.

Cut the Time and Effort of Troubleshooting and Reporting
Organizations generate millions of logs a day and struggle with centralized collection, storage and analysis of those logs. ArcSight Logger is a universal log management solution that unifies searching, reporting, alerting and analysis across any type of IT data. It consolidates silos of logs into a single indexed repository for fast detection and mitigation of operational issues.

Get Turnkey and Automated PCI Compliance
PCI compliance monitoring is seamless with the self-contained ArcSight PCI Logger solution for log collection, storage and analysis. No database administration expertise is required and a web-based interface simplifies deployment and ongoing management.

Swiss Bank Meets Compliance Requirements and Protects Customer Data
Due to long-term data retention requirements, Swiss bank EFG needed a cost-effective way to collect, secure and store audit-quality log data in an easily accessible log repository. ArcSight Logger helps EFG meet key requirements of Switzerland?s banking laws fast and cost-effectively.




Featured Webcasts
Featured Whitepapers
Featured Reports