Feitian just won the bid for Jilin Province transportation card project. In the near future, residents of Jilin Province could take bus in Beijing, Shanghai, Chongqing and many other cities with the interconnection card. They could also enjoy preferential policies of local residents on public transportation. It brings great convenience and benefits for the cardholder’s traveling.

Feitian has been focused on smart card for many years and has many successful cases such as social security card, resident health card, residence permit card, ETC user card, PSAM card, city pass card, gas card, various kinds of cross-industry card and so on. In the future, Feitian will continue to deepen the research and development of smart card and expand domestic and international business.

We know that CC is accredited worldwide in IT products. Compared to the CC EAL 4+ testing standard, the CC EAL 5+ have higher level of security requirements and the testing standards are more stringent. Feitian Java card operating system platform FT-JCOS has strong security features. It could not only resist common attacks such as voltage, frequency, temperature, laser, profile and other invasive semi-invasive attacks, but also can effectively prevent the leakage caused by the electromagnetic field monitoring which is the so-called side channel attack (SCA). It could even resist high-level template attacks.

Since 2014, Norway SERTIT staff came to Feitian to research for three times. Feitian FT-JCOS performs well in all areas through a series of rigorous and complex evaluation tests and finally meets the highest test and review standards. The related certificate and testing report has been announced on SERTIT and CCRA official website.

Smart card plays an important role in people’s daily lives so that smart card security is important for the public. CC EAL 5+ certification proves that Feitian smart card products have reached high security level and makes Feitian products more competitive in global market.

About CC
Common Criteria(CC) is the abbreviation for information technology security assessment common criteria. CC is accredited worldwide in IT products. There are 26 countries from all over the world that join CC Mutual Recognition Arrangement(CCRA) and each country just establish the only certification authority that represents the country to jointly operate CCRA. According to CCRA, CC certificate is accredited by all the 26 member countries that makes it authoritative. CC authentication has 7 levels from EAL1 to EAL7 in accordance with Evaluation Assurance Level. As the product with high security requirements, Java card platform is worldwide accredited with EAL 4+ and higher level. Feitian Java card platform FT-JCOS obtains CC EAL4+ certificate in July, 2016. And now in December, it obtains CC EAL5+ certificate.

Ransomware and Distributed Denial of Service (DDoS) are just a glimpse of the next big cyber-attacks to come with the introduction of IoTin critical infrastructures including hospitals, financial services and FinTech

In “The 2016 Internet Organized Crime Threat Assessment (IOCTA),” Europol reports that DDoS attacks are becoming more widespread and more dangerous causing organizations billion dollar losses. The most common attack path is to flood the targeted victim’s servers with superfluous traffic to overload them and bring the service down. In the recent massive and sustained DDoS attacks hackers have used more than 150,000 hacked IOT devices, such as CCTV video cameras and digital video recorders, to generate exceptional data traffic. The malicious firmware used in these IOT devices can be remotely installed by cybercriminals when no efficient cryptographic based security mechanisms are in place to protect the upgrades. The WISeKey/Feitian Technologies partnership aims to directly reduce these risks.

A complete article about how to fight DDoS attacks from IoT devices can be found here:https://www.wisekey.com/solutions/secured-iot/#ddos .

WISeKey and Feitian Technologieshave decided to jointly develop innovative hardware and software solutions to enable users, applications and devices to securely authenticate the networks, verify the authenticity and integrity of firmware upgrades, and limit access to sensitive information to authentic users. Such enhanced cryptographic techniques, based on proven technologies like PKI (Public Key Cryptography), high-security chips and hardened middleware will offer a robust barrier against the DDoS attacks.

"We are excited about the opportunity that working with WISeKey brings to the market,” said Huang Yu, Founder and CEO of Feitian Technologies Co., Ltd. “The integration of our technology to WISeKey’sRoot of Trust, which is recognized by operating systems and applications to ensure the authenticity, confidentiality and integrity of online transactions, will help to significantly secure the IoT and deter cybercriminals."

"Our partnership with Feitian is a significant breakthrough to extend WISeKey’sfield of addressable applications and markets,” said Carlos Moreira, Founder and CEO of WISeKey. “Feitian’s recognized authentication and identification solutions are a perfect fit with our PKI expertise that will boost the deployment of secured IoT devices.Thispartnership between Swiss and Chinese technology companies to fight cyber-attacks is a powerful reference for the bilateral cooperation in areas including technology, research, economy and trade, investment and finance."

Feitian Technologies (booth Lerins D 011) and WISeKey will discuss the benefits of this strategic partnershipat Trustech 2016, the global and largest event dedicated to Trust-Based Technologies which will take place from November 29 to December 1, 2016, at the Palais des Festivals, Cannes on the French Riviera.

About WISeKey
WISeKey (SIX Swiss Exchange: WIHN) is a leading cybersecurity company and selected as a World Economic Forum Global Growth Company. WISeKey is currently deploying large scale Internet of Things (“IoT”) digital identity ecosystems and has become a pioneer of the “4th Industrial Revolution” movement launched this year at the World Economic Forum in Davos. WISeKey’s Swiss based cryptographic Root of Trust (“RoT”) integrates wearable technology with secure authentication and identification, in both physical and virtual environments, and empowers IoT and wearable devices to become secure transactional devices. The RoT serves as a common trust anchor, which is recognized by the operating system and applications, to ensure the authenticity, confidentiality and integrity of on-line transactions. With the cryptographic RoT embedded on the device, the IoT product manufacturers can use code-signing certificates and a cloud-based signature as a service to secure interactions among objects and between objects and people. WISeKey has patented this process in the USA as it is currently used by many IoT providers.
Interested about latest news about WISeKey subscribe to our Newsletter or visit WISeKey Investors Corner

About Feitian
Established in 1998, Feitian Technologies is a public company incorporated in China (SHE Shenzhen Stock Exchange: 300386). Feitian Technologies has focused on the innovation and development of the intelligent authentication industry. So far, Feitian has provided high-quality products and services for more than 6,000 customers and 180 banks all over the world. Feitian is a trusted leader, No. 1 supplier in China, and a leading supplier of strong authentication solutions that include OTP, PKI, FIDO U2F, software protection dongles Rockeys, smart cards with Java COS CCEAL4+/FIPS 140-2L3, smart card readers and mobile security solutions. Feitian has two manufacturing centers, offices in France and the USA. More information here: http://www.ftsafe.com/.

Feitian has been focused on building security since 1998 and has witnessed how the authentication landscape has developed and evolved. Feitian has Public Key Infrastructure, One Time Password and other multi-factor authentication products to protect users. However, many consumers are now tired of the complexities associated with using these “traditional” approaches. FIDO related products could fulfill these requirements. FIDO alliance released and perfected the FIDO authentication standard V1.0 in 2014 and 2015. In this standard, FIDO proposed two user authentication protocols: U2F and UAF.

U2F(Universal 2nd Factor Protocol) is proposed based on compatible with existing password verification system. The user must provide a verification device comply U2F protocol as a second authentication factor when online operation to ensure security. The verification device is called U2F equipment. With U2F equipment, users no longer need to remember a lot of complex passwords. Moreover, U2F protocol also supports multiple sites or services authentication by single U2F verification device.

UAF(Universal Authentication Framework Protocol) fully absorbed the new technology of mobile smart devices and fulfill mobile user’s habit. When users need to verify the identity, the smart devices will use biometric technology such as fingerprint, voice, facial and iris recognition to obtain user authorization, and then generates an encrypted authentication data for the backend server for user authentication operations through asymmetric encryption techniques. No password is needed during the whole process.

Feitian has many U2F authenticators, U2F server and UAF server and could provide complete identity authentication solutions and services for users from many industries.Feitian MultiPass FIDO® product supports BLE, NFC and USB which could greatly fulfill different users’ requirements and enhance the user experience.

FIDO Alliance developed rapidly since its inception. Huawei, Samsung and Lenovo support FIDO authentication in a variety of their devices. The current major browser Chrome and the most popular operating system Windows 10 also provide built-in support for FIDO. Meanwhile, FIDO entered into a collaboration with W3C. The web interface standard was submitted to the W3C organization and FIDO is expected to become the universal standard of browser in the future.

We believe that people will not be bothered with setting up, memorizing or modifying passwords and will not be worried about the security of login and transactions.Biological characteristics and devices (such as Key, mobile phone, computer, hand ring,etc) will be account passwords and security.

In the year of 2009, Nakamoto proposed the concept of Bitcoin. As its underlying technology, the block chain has rapidly covered many industries such as financial and information security in recent years. The block chain technology is being widely experimentation and implementation in digital currency, payment and settlement, credit financing, equity interest, securities, bills, financial transactions, credit, supply chain, insurance, public welfare, artificial intelligence, big data and other industries. In the field of Bitcoin, security incidents occur frequently. Recently, hackers successfully attacked the Bitcoin trading platform and caused irreparable loss for Bitcoin holders. The platform has thus closed. The key protection for digital currency is imminent.

The block chain technology could be centerless or multicenter, data maintenance and high transparency, while reducing levels of end-to-end transfer. More people accept, believe and start to use it to build new financial, livelihood and social service system. Feitian has been focused on advanced technology and experience in the field of security so that it could explore and develop the industry’s first block chain hardware wallet product CoinPass Bio.

Just like other information technologies, in block chain, data is also the basic elements and value is reflected by data. The block chain technology could build the system of data producing, using, transfer and storage. In this system, the most important feature is that the data can not be tampered with or forged, which means that the data needs anti-tampering and forgery process when producing and using. The process is data summary and signature. Most block chain technologies have followed the mature public and private key asymmetric cryptography system for data summary and signature under the security and using experience consideration for verification of the validity, effectiveness and safety. As a result, the private key security has become the fundamental of block chain security. In many current block chain applications, the common solution is to store the private key in application software or service provider's servers and it will be used through software or server directly. This could often meet the needs of application when the security level is not high. But when the block chain application and assets, especially large assets are closely related, the private key security solutions like that will become the target of hackers.

The first digital currency hardware wallet that Feitian released supports for fingerprint biometric identification.The product has secure chip platform and security protection mechanisms the same level as EMVCo and CC EAL4+ which makes it substantial increase in anti-attack capability. Feitian digital currency hardware wallet product supports a variety of applications based on block chain and comprehensive supports for multiple security algorithms. The users could flexible switch to the application currently in use through simple configuration. CoinPass Bio also supports multiple communication interfaces to meet the needs of all the PC and mobile users. The digital currency hardware wallet can quickly enter the market and provide full service for digital currency applications.

For block chain applications in other fields, digital assets need complete security solutions. Both server and service provider keys need to be stored and protected by hardware when the security level is high. It also needs to be used in hardware. The rules of building blocks or methods of using data, namely the intelligent contracts in block chain, need to be safety stored and used by hardware.