Digital signature and encryption of emails from desktop, web, and mobile clients.Secure connections (SSL/TLS) to DoD servers.
Smart card logon to DoD networks and certificate-based authentication to systems.Public Key Enablement (PKE) is the process of ensuring that applications can use certificates issued by a PKI to support identification and authentication, data integrity, confidentiality and/or technical non-repudiation. Technical non-repudiation can be considered a form of attribution, namely that the digitally signed information can be attributed to the entity identified in the certificate used to generate the signature. Technical Non-Repudiation: PKI assists with technical non-repudiation through digital signatures.If the public key in a certificate is used to encrypt information, only the associated private key, held (and kept secret) by the entity named in the certificate, can decrypt that information.
Confidentiality: PKI provides confidentiality through encryption. If the recipient of digitally signed information is able to verify the signature on the information using the public key of the certificate used to generate the signature, then the recipient knows that the content has not changed since it was signed. Data Integrity: PKI provides for data integrity through digital signature of information. If the signature is valid, then the Relying Party (the person or system relying on the presented certificate for authentication or other security services) has assurance that the entity participating in the transaction is the Subscriber (the identity asserted by the certificate). Identification and Authentication: PKI provides for identification and authentication through digital signature. Public key certificates provide digital signature and encryption capabilities, which can be used to implement the following security services: Public Key Infrastructure (PKI) is a framework established to issue, maintain, and revoke public key certificates, including systems, processes and people.
0 kommentar(er)
