Digital certificates and information security
Download as PPTX, PDF•2 likes•3,531 views
Digital certificates are electronic counterparts to traditional identification methods that authenticate identities in online communications by binding them to a pair of electronic keys. They are structured with essential information such as the owner's public key, issuer details, and expiration date, and play a crucial role in public key infrastructure (PKI) for secure key distribution. PKI automates the use of public key encryption and includes components like certificate authorities and revocation methods to maintain security during electronic transactions.
Digital certificates and information security
- 2. Introduction What is cryptography? The art of secret writing • Cryptosystems • keys
- 3. Problem Problem: How does Alice know that the public key she received is really Bob’s public key?
- 4. Digital Certificate • Electronic counterparts to driver licenses, passports • Prove your identity or right to access information or services online • Bind an identity to a pair of electronic keys • Provide a more complete security solution • Role of Certification Authority (CA)
- 5. Digital Certificates • Structure of Digital Certificate – Owner's public key – Owner's name – Expiration date of the public key – Name of the issuer (the CA that issued the Digital Certificate) – Serial number of the Digital Certificate – Digital signature of the issuer • Defined by CCITT X.509 international standard
- 6. Digital Certificates • Provide support for public key cryptography (PKC) • Digital certificates contain the public key of the entity • It rely on PKC for their own authentication • Used on handheld devices, mobile phones, on portable cards, smart cards
- 7. public key infrastructure (PKI) A public key infrastructure (PKI) consists of the components necessary to securely distribute public keys It consists of: – Certificates – Certificate authorities (CAs) – A repository for retrieving certificates – A method for revoking certificates – A method of evaluating a chain of certificates
- 8. Public Key Infrastructures (PKIs) • To use public key methods, an organization must establish a comprehensive Public Key Infrastructure (PKI) – A PKI automates most aspects of using public key encryption and authentication – Uses a PKI Server
- 9. Public Key Infrastructures (PKIs) • PKI Server Creates Public Key-Private Key Pairs – Distributes private keys to applicants securely – Often, private keys are embedded in delivered software PKI Server Private Key
- 10. Public Key Infrastructures (PKIs) • PKI Server Provides Certificate Revocation list (CRL) Checks – Distributes digital certificates to verifiers – Checks certificate revocation list before sending digital certificates PKI Server Digital Certificate
- 11. Public Key Infrastructures (PKIs) • CRL Checks – If applicant gives verifier a digital certificate, – The verifier must check the certificate revocation list PKI Server OK? OK or Revoked CRL
- 12. Generating the digital certificate
- 13. Digital Certificate : Example
- 14. Use of Digital Certificates • Electronic transactions – E-mail – Electronic commerce – Groupware – Electronic funds transfers • Netscape's Enterprise Server
- 15. Message Encryption Message Decryption Use of Digital Certificates
- 16. Need of Digital Certificates • Proper Privacy and Security • Trust • Special safeguards • Assuring the identity of all parties • To provide legitimate content
- 17. Digital Certificate Services • Services – Issuing – Revocation – Status services • Types of Digital Certificates – Server – Developer (For softwares) – personal
- 18. Digital Signature • Function as hand written signature electronically • Non repudiated • Enable "authentication" of digital messages
- 19. DC used for Digital signature and Encryption
- 20. DC used for Digital signature and Decryption