How do you update and adapt your PKI strategy to changing business needs and technologies?

由人工智能和领英社区提供技术支持

Online transactions are essential for many businesses and individuals, but they also pose significant security risks. How can you ensure that your data and money are safe from hackers, fraudsters, and identity thieves? One of the most effective solutions is to use cryptography, the science of encoding and decoding information, in the context of public key infrastructure (PKI). PKI is a system that uses digital certificates, keys, and protocols to authenticate and encrypt online communications. In this article, you will learn the basics of cryptography and PKI, and how to update and adapt your PKI strategy to changing business needs and technologies.

此文章中的业界达人

由社区从 6 条内容中精选。了解更多

Israr Ahmed

PKI & Cryptography Professional | PKI Setup & Deployment | Digital Signature Specialist | TSP | eIDAS | HSM | Trust…
Jerry Kickenson

Principal Engineer at SWIFT (retired)
Shreyansh Mishra

Founder & Entrepreneur | Intern MKU Limited | Topmate.io Counsellor | Aerospace & Defence | Geopolitics | Animal…

1 What is cryptography?

Cryptography is the art and science of creating and breaking secret codes. It has two main functions: encryption and decryption. Encryption is the process of transforming plain text (the original message) into cipher text (the encoded message) using a key (a secret code). Decryption is the reverse process of transforming cipher text back into plain text using the same or a different key. Cryptography can be used to protect the confidentiality, integrity, and authenticity of data and communications.

添加您的观点

Israr Ahmed

PKI & Cryptography Professional | PKI Setup & Deployment | Digital Signature Specialist | TSP | eIDAS | HSM | Trust Services | Development services
举报内容
To adapt your PKI strategy to changing business needs and technologies: Conduct Regular Reviews: Assess your PKI infrastructure periodically to align with evolving requirements. Stay Updated: Follow industry trends and integrate new technologies and standards. Design for Scalability: Ensure your PKI can grow and adapt to technological advancements. Update Policies: Revise PKI policies and procedures to match new security practices and compliance needs. Implement Feedback: Use feedback and audits to continuously improve your PKI system and address gaps. These practices ensure your PKI remains effective and aligned with current and future needs.

已翻译

赞
Jerry Kickenson

Principal Engineer at SWIFT (retired)
举报内容
Besides encryption and decryption (mechanisms to provide confidentiality), cryptography also can provide integrity (usually with a cryptographic digest or hash, e.g. SHA3) and authentication (often by combining digest and encryption into a digital signature).

已翻译

赞

2 What is PKI?

PKI stands for public key infrastructure, and it is a system that uses cryptography to secure online transactions. PKI involves three main components: digital certificates, public and private keys, and certificate authorities. A digital certificate is a document that contains information about the identity and public key of a person or entity. A public key is a code that can be used to encrypt or verify data, while a private key is a code that can be used to decrypt or sign data. A certificate authority (CA) is a trusted third party that issues and validates digital certificates. PKI enables users to exchange data securely and reliably over the internet, without having to share or store passwords or keys.

添加您的观点

Jerry Kickenson

Principal Engineer at SWIFT (retired)
举报内容
A complete PKI also includes a means to distribute certificates (usually with a directory), and a means to create trusted certificates via a Registration Authority and a registration process. The CA also must provide a means to renew certificates when they expire (or, better, when they are about to expire) and revoke certificates when there is knowledge or suspicion that the certificate private key has been compromised or the certificate subject can no longer be trusted. Along with this is a means to inform PKI users of revoked certificates. The two main approaches are via an online status check (e.g. via OCSP - Online Certificate Status Protocol) or a periodic download of a Certificate Revocation List.

已翻译

赞

3 How does PKI work?

PKI works by combining the advantages of both symmetric and asymmetric cryptography. Symmetric cryptography is fast and efficient, but it requires a secure way of distributing and managing the keys, which can be challenging over the internet. Asymmetric cryptography, also known as public key cryptography, is more secure and flexible, but it is slower and more complex than symmetric cryptography. To illustrate how PKI works in an online transaction, take Alice wanting to buy something from Bob's website that has a digital certificate issued by a CA. Alice's browser verifies the validity of Bob's certificate using the CA's public key, generates a random symmetric key, and encrypts it with Bob's public key. This encrypted key is sent to Bob's website which decrypts it with his private key. The transaction data is then encrypted with the symmetric key and sent to Alice's browser, which decrypts it with the symmetric key to complete the transaction.

添加您的观点

4 Why is PKI important?

PKI is a crucial security measure for online transactions, as it can prevent various types of cyberattacks such as eavesdropping, tampering, spoofing, and repudiation. Additionally, PKI can ensure the confidentiality, integrity, authenticity, and non-repudiation of data. These benefits provide a high level of trust for online transactions and protect users from unauthorized access.

添加您的观点

5 How to update and adapt your PKI strategy?

PKI is not a static or one-size-fits-all solution, as it requires constant monitoring, maintenance, and improvement to keep up with changing business needs and technologies. Factors that can affect your PKI strategy include the size and complexity of your organization and network, the type and volume of data and transactions you handle, the level and frequency of security threats and vulnerabilities you face, the legal and regulatory requirements and standards you have to comply with, and the availability and cost of PKI products and services. To update and adapt your PKI strategy, you should conduct regular audits and assessments of your PKI environment and performance, identify and prioritize your security goals and risks, evaluate different PKI options and vendors, implement new PKI solutions and features, train staff on PKI best practices, review policies and procedures, as well as test any new solutions.

添加您的观点

Jerry Kickenson

Principal Engineer at SWIFT (retired)
举报内容
Some factors to consider in periodic reviews: - certificate policies (crypto algorithms, key sizes, acceptable uses) - is the revocation approach (OCSP or CRLs) still working for you? - CA architecture (is it time to add or change sub-CAs, Cross certify with other CAs, scale your CA?) - directory architecture (is scalability and availability still sufficient?) - is it time for a CA root key renewal (very painful, but sometimes necessary)? Sooner or later, you may need to consider the impact of quantum computing and a transition to quantum resistant cryptography.

已翻译

赞
Shreyansh Mishra

Founder & Entrepreneur | Intern MKU Limited | Topmate.io Counsellor | Aerospace & Defence | Geopolitics | Animal Activist
举报内容
To update and adapt your PKI strategy to changing business needs and technologies, regularly review your PKI infrastructure and policies to ensure they align with evolving requirements. Stay informed about technological advancements and industry trends to incorporate relevant innovations. Conduct periodic risk assessments to identify new threats and adjust your strategy accordingly. Implement flexible and scalable solutions to accommodate growth and changes. Engage with stakeholders to understand their needs and integrate their feedback into your strategy. Lastly, update your PKI documentation and training materials to reflect any changes in processes or technologies.

已翻译

赞
Brad Sterkenburg

Avanade, a joint venture between Accenture and Microsoft.
举报内容
An effective governance program which sets the policies, standards, and procedures for the organization should contain a cross-functional review team (CFRT) whose charter is to review and approve all PSPs, perform annual or semi-annual recertification of the PSPs, and ensure that all stakeholders are heard and have an appropriate level of influence over the future of the organization and its governance. When this type of program exists, the CFRT will ensure that the cryptographic standard which dictates the way PKI is to be used remains current and effective in the context of the enterprise.

已翻译

赞

PKI

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you update and adapt your PKI strategy to changing business needs and technologies?

1

2

3

4

5

1 What is cryptography?

2 What is PKI?

3 How does PKI work?

4 Why is PKI important?

5 How to update and adapt your PKI strategy?

PKI

给文章评分

感谢您的反馈

更多PKI相关文章

更多相关阅读内容