Estonian PKI concept

1
Estonian PKI concept solutions

• Digital signatures - reality for everyone

2
One Solution For Any Service

• National ID-card
• One trusted token
• Identifies person directly
• Free to use by anyone
• (both public private)

3
Legally Signed Documents

• We aim to facilitate synergy and efficiency
  through common national standards and practices
  regarding digital document format and exchange.
• Get rid from the papers
• Contracts
• Invoices
• Payment orders

4
Long-Term Validity

• Written evidence
• Common formats
• Non-repudiation in time
• (ID stolen, algorithms get weak)

Sign Verify Archive Court (t)
5
Digital Document Format

• Based on XML-DSIG standard
• Contains subset of ETSI TS 101 903 extensions
• Place, time and of signature
• Role of signature holder
• Validity confirmation and certificate of OCSP
  responder

6
E-Notary Service (time-stamps)

• Based on standard protocolOCSP (RFC 2560)
• confirmation for digitally signed document
  the certificate used for signing this particular
  document was valid at the time I saw it

7
Common Practices - DigiDoc

• DigiDoc
• complete set of protocols, formats, libraries
  and applications for digital signatures

8
DigiDoc Portal
9
DigiDoc Client

• Off-line verification of a signed document
• Signing documents without using DigiDoc portal

10
Useful Links

• Passport ID-card http//www.pass.ee
• CMB http//www.mig.ee
• PKI CA http//www.sk.ee
• ID-card practices http//www.id.ee
• Further information
• info_at_sk.ee
• ain.jarv_at_sk.ee