Enhanced Public Key Infrastructure for Public e-Services in India
DOI:
https://doi.org/10.46243/jst.2022.v7.i06.pp20-30Keywords:
Digital keys, Certificate Authority, Encryption key management, AuthenticationAbstract
Public Key Infrastructure (PKI) is enabling infrastructure that provides authentication processes, public-key cryptography, and digital signatures to ensure confidentiality, data integrity, authentication and non-repudiation. PKI offers these "trust and security" services by using distinctive components like Certificate Authority, Encryption key management, end-user encryption software tools for storing, renewing, and revoking digital keys and secure socket layer certificates. This paper will present an architectural model to provide pki as a service in India for e-governance to provide public services in a secure way by addressing several shortcomings of the current infrastructure and its proposed extensions.
References
B. Klicek and D. Plantak Vukovac, “Information society and e-Government developments in Croatia,” Informatica 31, 2007, pp 367-372
https://cca.gov.in/pki_framework.html, last access date 17.06.2022
R.Housley, T. Polk “Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructure”, Wiley; 1 edition, 2001
Barbara Lörincz and group of authors, “Digitizing Public Services in Europe: Putting ambition into action,” 9th Benchmark Measurement, European Comission, Directorate General for Information Society and Media, December 2010
Yazdanpanah S, Saman SC, Mazdak Z, Reza K. Security features comparison of master key and IKMcryptographic key management for researchers and developers. In: International Conference on SoftwareTechnology and Engineering; 2011:365‐369
E. Winjum and A. Fongen, “Model and specification for analyzing the scalability of a public key infrastructure,” Norwegian Defence Research Establishment, Tech. Rep. 2009/01546, 2009
Harn L, Hsu C, Xia Z. Lightweight group key distribution schemes based on pre‐shared pairwise keys. IETCommun. 2020;14(13):2162‐ 2165
R. Vacca, “Public Key Infrastructure: Building Trusted Applications and Web Services”, Auerbach Publications, 1 edition, 2004
a. Openssl, https://www.openssl.org/ b. EJBCA, http://www.ejbca.org/index.html. c. OpenCA, http://www.openca.org/ d. OCSPD, https://www.openca.org/projects/ocspd/ e. Apache mod_ssl module, https://httpd.apache.org/docs/current/mod/ mod_ssl.html f. OpenXpki, https://www.openxpki.org/ g. SSL toolkit application, https://github.com/SuryaTeja-N/SSL-Tools
Levy-Abegnoli, G. Van de Velde, C. Popoviciu and J. Mohacsi, “IPv6Router Advertisement Guard”, RFC6105, Internet Engineering TaskForce, February 2011
Ahmad Sanmorino and Setiadi Yazid, “ DDoS Attack Detection Methodand Mitigation Using Pattern of the Flow”, ICoICT’13, InternationalConference of Information and Communication
