NDLI: Configuring enterprise public key infrastructures to permit integrated deployment of signature, encryption and access control systems

Content Provider	IEEE Xplore Digital Library
Author	Williams, C.K.
Copyright Year	2005
Description	Author affiliation: Sci. Applications Int. Corp., McLean, VA, USA (Williams, C.K.)
Abstract	With the emergence and widespread use of digital technology at all levels, from strategic bases and infrastructures down to the soldier on the ground, security of these systems and the networks that they connect to has taken on paramount importance. The past decade has seen widespread development, innovation, and growth within the DoD, Government, and commercial communities of public key infrastructure (PKI) to meet these security needs. PKI is a robust technology, supporting numerous applications, including user and computer authentication, secured communications, data encryption, and digital signature. As PKI technologies have moved from the laboratory and university into the mainstream, numerous operational issues have been realized that hamper their widespread adoption. These issues include: deployment and maintenance of certificate authority (CA) infrastructures; storage of digital certificates on computer servers and workstations; transportation of certificates from computer to computer; replacement of lost credentials; and "PKI-enabling" of applications. A burgeoning industry has arisen to meet these challenges, producing an alphabet soup of products; many of which have competing and mutually exclusive capabilities, limitations, and supporting requirements. This paper examines these problems, and proposes methods and techniques for the successful employment of PKI to support as wide a variety of end-user applications as possible. It discusses the following key engineering decisions that must be made, and best practices for making them: design of the CA infrastructure for maximum flexibility and vendor agnosticism; design of X.509 certificate templates to permit their proper selection and use for a wide variety of applications, including server security, user and computer authentication, digital signature, and data encryption; storage of certificates on hardware security modules (HSMs), smart cards, and removable tokens; and finally, PKI-enabling of networks and applications. Finally, it discusses "gotchas " and issues that must be dealt with in the process of operational deployment of these technologies.
Starting Page	2172
Ending Page	2175
File Size	4187254
Page Count	4
File Format	PDF
ISBN	0780393937
DOI	10.1109/MILCOM.2005.1605991
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2005-10-17
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Public key Cryptography Access control Application software Data security Authentication Digital signatures Computer security Technological innovation Government
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in