2 Public Key Infrastructure (PKI) and Public Key Technology

1. Throughout this document, the terms Public Key Infrastructure and Public Key Technology are used.

2. A Public Key Infrastructure (PKI) is a distribution system for the public keys used in Public Key Cryptography. A PKI makes secure and authenticated transactions possible where the persons or entities are not known to each other by providing digitally signed certificates that bind a person or other entity's name with their public key.

3. A PKI is generally made up of

• one or more Certification Authorities (CAs) for creating and distributing Public Key Certificates and maintaining their status,

• several distributed Registration Authorities (RAs) for managing CA to user interactions,

• an electronic directory or group of directories for distribution of the certificates,

• a set of policies, standards and guidelines to ensure an appropriate level of protection and trust is provided by the infrastructure, and

• the governance and communications structure to ensure that the policies, standards and guidelines are enforced and are adapted as required.

4. Public Key technology (PKT) is the hardware and software used for encryption, signing, verification etc as well as the software for managing digital certificates. PKT is founded on Public Key Cryptography.