Implementación de una infraestructura de clave pública (PKI) para la Universidad Técnica Particular de Loja

Abstract

A PKI1 is the frame of reference that allows the development of security services that are based on encryption, using a public key and a private key. Other infrastructures using symmetric encryption have been tested and failed due to management, scalability and life cycle problems they present. PKI allows the creation of the entities and the confidence that is needed for the processes of identification, authentication, integrity and non-repudiation through the appropriate issuance and administration of Digital Certificates 2 and Private Keys, which offer an infinitely more scalable solution than encryption infrastructures Symmetric, more information in [Annex 1] The use of keys (public and private) and certificates for: signing emails, authenticating to websites, validating transactions, etc., are only successful when there is transparency between the applications and mechanisms that PKI used to ensure safety [1]. Hence, it is important to perform a study of the applications that are already in their production stage and that need to be effectively integrated into a Public Key Infrastructure.