ESYAE-imza Kütüphaneleri

Bu sayfa salt okunur. Kaynağı görebilirsiniz ama değiştiremezsiniz. Bunun yanlış olduğunu düşünüyorsanız yöneticiye danışın.

<h1>Public Key Infrastructure (PKI)</h1> <div class="level1"> <p> Public Key Infrastructure provides services like authentication, message integrity and confidentiality by using both asymmetric and symmetric cryptography enabling a practical and secure way of key distribution, signing ,and encryption. </p> <p> Two main motivation for using PKI technologies are: </p> <ul> <li class="level1"> To implement asymmetric cryptography systems</li> <li class="level1"> To provide a practical key management solution</li> </ul> <p> In this section, basic information about public key infrastructure is presented. Digital certificates, the most important components of PKI , are described as well as Certificate Revocation Lists (CRL), Online Certificate Status Protocol (OCSP), Certificate Authority (CA). </p> <p> <a href="/esya-api/doku.php?id=en:esya:aaa:sertifika" class="wikilink1" title="en:esya:aaa:sertifika">Digital Certificates</a> </p> <p> In asymmetric cryptography a key pair , including private and public keys, is defined for each subject. The public key can be accessible by everyone who wants to communicate with the owner of that key. In order to make public key easily accessible by everyone, it is published within the corresponding certificate. </p> <p> <a href="/esya-api/doku.php?id=en:esya:aaa:sertifika-makam%C4%B1" class="wikilink1" title="en:esya:aaa:sertifika-makamı">Certificate Authority</a> </p> <p> Certificates authorities (CA) are the authorized institutions for creating and managing digital certificates. A CA consists of Certificate Authority software, required hardware and physical environment and people who operate the system </p> <p> <a href="/esya-api/doku.php?id=en:esya:aaa:sil" class="wikilink1" title="en:esya:aaa:sil">Certificate Revocation List</a> </p> <p> Once a certificate is published it is impossible to make it totally inaccessible due to its revocation. For this reasons CAs publish Certificate Revocation Lists(CRL) in order to announce everyone that the certificates in the CRL are revoked. </p> <p> <a href="/esya-api/doku.php?id=en:esya:aaa:cisdup" class="wikilink1" title="en:esya:aaa:cisdup"> Online Certificate Status Protocol</a> </p> <p> Since CRLs are issued periodically, they do not provide a real time information about the status of certificates. In cases like financial operations where real time validation is required, using CRLs as the source of revocation information is not considered to be secure enough and unacceptable. As a remedy, Online Certificate Status Protocol (OCSP) is used. </p> <p> <a href="/esya-api/doku.php?id=en:esya:aaa:akilli-kart" class="wikilink1" title="en:esya:aaa:akilli-kart"> Smartcards</a> </p> <p> Smartcards are the most popular devices for storing digital certificates and private keys in a secure way. They have programmable processors and secure memory and they are extremely solid and portable. They are used in systems where information security, identity confidentiality and mobility are the main concerns. </p> <span class='np_break'> </span> <div class="table"><table class="inline"> <tr class="row0"> <td class="col0"><a href="/esya-api/doku.php?id=start_en" class="wikilink1" title="start_en">Home</a></td><td class="col1">Next <a href="/esya-api/doku.php?id=en:esya:eimza:elektronik-imza" class="wikilink1" title="en:esya:eimza:elektronik-imza">Electronic Signature</a></td> </tr> </table> <span class='np_break'> </span> </div> </div>