                                README - IN3MK2.ZIP

	Command Corp. Inc. has taken some extra steps to help insure that this
IN CUBE Voice Command Demo, with unlockable product, reaches you across the
network without having been tampered with in any way.  You can help us insure
the benefits of these extra steps by reviewing this readme file and by
verifying that the IN CUBE file that reaches you is in its original form.

	This IN3MK2.ZIP file contains another zip file (in3net.zip), this
readme file, and a "Betsi" certificate.  The Betsi certificate is your
assurance that the files contained in the in3net.zip file have not been
tampered with.  The certificate contains the MD5 checksum of the in3net.zip
file accompanied by an encrypted signature from the BETSI project at
"bellcore.com".

	If you do not wish to verify the Betsi certificate, you can proceed to
unzip the files.  To install IN CUBE, unzip the in3net.zip into its own
directory.  Read and follow the instructions contained in the readme.txt file
for installation.

	If you wish to verify the in3net.zip file with the Betsi certification
information to insure the files have not been tampered with, you need the
following:

     1) PGP (Pretty Good Privacy) version 2.6 or above.
     2) The public key of the BETSI project, available from
           bellcore.com or any convenient keyserver and appended below.
           (DO NOT TRUST THE ONE BELOW!  GET AN INDEPENDENT COPY!)
     3) The "md5sum" program, available from bellcore.com and archive sites.
   
     Appended below is the automatic reply from the Betsi system at
bellcore.com to a help request.

===== Request to "certify@bellcore.com" =====
To: <certify@bellcore.com>
Subject: help

===== End of request =====

===== Automatic Reply from "certify@bellcore.com"  =====
From emory!faline.bellcore.com!certify Tue Nov 15 02:49:30 1994
From: emory!faline.bellcore.com!certify (Avi Rubin)
Message-Id: <199411150551.AAA11165@faline.bellcore.com>
Subject: Help on using Betsi

This is an automatic response to your request for help on
Bellcore's Trusted Software Integrity (Betsi) System.

Betsi is designed to offer a solution to a problem of software
distribution on the Internet. A copy of the paper can be found
by ftp at thumper.bellcore.com in /pub/certify/betsi.ps. This
paper will appear in the Internet Society 1995 Symposium on
Network and Distributed System Security.

It is strongly recommended that you obtain a copy of the paper
and read it.

Also, Betsi's mosaic home page is: 

    http://info.bellcore.com/BETSI/betsi.html

The three entities defined are Users, Authors, and Betsi, a trusted
third party. Authors are people who wish to distribute software
on the Internet. Users are people who would like to obtain this
software and are concerned with the integrity of the file.

The dangers of software distribution are discussed in the paper.
This message contains a brief description of how to use Betsi.

The implementation requires that users obtain the pgp public key 
of Betsi which is widely available. A copy of it exists in
the paper (which has been submitted for publication) on public
key servers, at the ftp site mentioned above, and in this message.
It is recommended that you obtain the key from at least two different
places to ensure you have the right one.

Betsi also requires the use of a hash function. A program called
md5sum is available at the ftp site mentioned above.

Instructions for authors who wish to distribute software:

1. You must have an identity that can be verified out of
   band. You must send a registration message that contains
   information as described below.

2. Bellcore will contact directory assistance for your phone
   number using the information you provide. 

3. You will receive a COLLECT call to verify your message. As
   this is being offered as a free service on the Internet
   (an experimental prototype), it expected that the author will
   bear the cost of the one-time verification. This is also a way
   of improving the signal to noise ratio in the responses.

*  Given the requirement of out of band confirmation over
   the phone, the initial deployment of Betsi is limited
   to the United States. 

4. You will register a public key in your registration message,
   so from then on, you can sign your requests for certificates.

Example registration message:

   To: certify@bellcore.com
   Subject: register

   Aviel D. Rubin
   Bellcore
   rubin@faline.bellcore.com
   Morristown, NJ
   201-555-1234
   -----BEGIN PGP PUBLIC KEY BLOCK-----
   Version: 2.6
   
   mQBtAi4dW9IAAAEDAMAlti1JPUEhU+ORT56TUuSr3eRtksTAJb5Zr4vW8uYOZZux
   2ttIUIDCIFSG3jqoBcDEoTIk4pSmrY2dKWpVpwvAbdcI23lyXfvKQwRdces6Yzct
   TcaU/EebYv3kpAuW2QAFEbQqQXZpZWwgRC4gUnViaW4gPHJ1YmluQGZhbGluZS5i
   ZWxsY29yZS5jb20+
   =D1Kj
   -----END PGP PUBLIC KEY BLOCK-----


You will receive a response informing you that your phone number
will be obtained using directory assistance, and you will be
contacted. 

Once you have registered, you can obtain a certificate by sending
a signed message such as the following:

           To: certify@bellcore.com
           Subject: certify

           -----BEGIN PGP SIGNED MESSAGE-----

           Aviel D. Rubin
           Trusted.Dist.tar.Z
           thumper.bellcore.com
           MD5
           5026b3f7e68fc405744e9fafc37d1341
           Version: 2.1

           -----BEGIN PGP SIGNATURE-----
           Version: 2.6

           iQB1AgUBLj5DtJti/eSkC5bZAQGE+AL+JpKdi5IaQFMbTiPYwUehf8J0isb2WK4r
           WfE3eqB2/JovtpiXU0zcDgdFWVdWQ7a60f89cmabZY3fOPvVngZHVjRZQ8SHJ3Dc
           kImkoVXu8AhRDIOXmenuWK2/o2aB5Ryy
           =F5Da
           -----END PGP SIGNATURE-----

You will receive a certificated, signed by Betsi, which you can
make available with the file.

Instructions for users:

1. Obtain a copy of the public key of Betsi and the md5sum program
   as described above.

2. Download the file you want along with a certificate.

3. calculate the checksum on the file and verify the signature

If there is a problem, notify the author of the software.

If you have further questions, send e-mail to rubin@faline.bellcore.com.

-------------------------------------------------------
The public key of Betsi:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.7

mQCNAi5I0LwAAAEEAJZi970w+Lb7onAmrnExWKrgUFbjJku29qVRlBY6/UtUH+fW
s7MtAEUKIhktJ0cDpE+5Tbi6Lev2RXmXhT1hEjwxSwVFOMJmOuMZxlj+586IKigC
vVjF+hCFKQWRXsleM/axVbpH+pNUmWcK6QMdBDFlzS/9pxdAiBPcEwSgd4ahAAUR
tBxCZXRzaSA8Y2VydGlmeUBiZWxsY29yZS5jb20+iQB1AgUQLkjREpti/eSkC5bZ
AQFzNwL8CVk6J8jhHukKKjrkdZX5VZMwuvgs7+ZIVR8fY+vpEBs6EbWAQpmm4ekV
C4D6UOYCRxARpQN09M1aE9qSz6XKkYQjs9Ul/xRLtazDAuYOAkRxO3mnrFa2u6Tc
+qXcZame
=68fV
-----END PGP PUBLIC KEY BLOCK-----

Fingerprint:

5F 34 26 5F 2A 48 6B 07  90 C9 98 C5 32 C3 44 0C

===== End of Reply =====
