Public Key Infrastructure (PKI)

Definition: PKI stands for Public Key Infrastructure, which refers to the standards for managing the infrastructure of secure electronic transactions. It represents a set of policies, devices, software, and functional roles necessary to issue, store, manage, reissue, distribute, and revoke digital certificates and encrypted digital signatures using public keys. Each individual within the PKI system has a unique public key and private key, which are not duplicated anywhere in the world, representing a unique identity for the individual. This, in turn, represents another definition of the digital signature provided by Masdar Technology Company.

Elements of the PKI System and Their Functions:

The basic elements of the PKI system include Digital Certificates, Root Certificate Authority (Root CA), Certificate Authority (CA), Registration Authority (RA), Public Keys, and Private Keys. Digital certificates contain information that verifies the identity of the legal user or digital entity, while the Certificate Authority provides trust and verification of the certificates. The public and private key pairs are used in the digital signature process, where the private key is the signing tool, and the public key is the tool for verifying the identity of the signer.

The Importance of PKI in Iraq:

The national PKI system plays a crucial role in protecting information and ensuring data confidentiality and integrity in the digital age. PKI allows for strong authentication of parties and secure communication in commercial and administrative transactions. It provides means to verify the authenticity and legal validity of digital signatures before Iraqi courts and confirms the authenticity of electronic documents. Thanks to PKI, confidentiality, credibility, and integrity can be achieved in electronic communication processes.

PKI Infrastructure Provided by Masdar Technology Company:

Standards and Specifications of Digital Certificates and Digital Signatures in the Tawqee Project:

The infrastructure of the PKI system includes X.509 v3 (PKIX) certificates, asymmetric public-key cryptography (PKCS), and a variety of other internationally recognized standards.

  • Infrastructure for Public Keys with X.509 v3 (PKIX) certificates
  • Public-Key Cryptography System (PKCS) for asymmetric encryption
  • ADSS Server SAM Appliance is CC EAL4 + certified to EN 419241-2
  • ADSS PKI Server is CC EAL4 + in process
  • ADSS Server is PKITS and FIPS 201 certified
  • Plug test participation for ETSI PAdES, XAdES & CAdES