2021년 2월 17일 (수) 08:00에 Pythagoras0님의 편집

2021-02-17T08:00:36Z

Pythagoras0: /* 메타데이터 */ 새 문단

2020-12-26T12:13:39Z

메타데이터: 새 문단

Pythagoras0: /* 노트 */ 새 문단

2020-12-21T14:34:13Z

노트: 새 문단

새 문서

== 노트 ==

===위키데이터===
* ID : [https://www.wikidata.org/wiki/Q658476 Q658476]
===말뭉치===
# The most distinct feature of Public Key Infrastructure (PKI) is that it uses a pair of keys to achieve the underlying security service.<ref name="ref_0a9e5bff">[https://www.tutorialspoint.com/cryptography/public_key_infrastructure.htm Public Key Infrastructure]</ref>
# PKI provides assurance of public key.<ref name="ref_0a9e5bff" />
# The most crucial concept involved in PKI is, as its name implies, the public cryptographic keys that are at its core.<ref name="ref_0f6e1165">[https://www.csoonline.com/article/3400836/what-is-pki-and-how-it-secures-just-about-everything-online.html What is PKI? And how it secures just about everything online]</ref>
# The most important concepts to understand to grasp how PKI works are keys and certificates.<ref name="ref_0f6e1165" />
# PKI gets its name because each participant in a secured communications channel has two keys.<ref name="ref_0f6e1165" />
# So that covers how data is encrypted within a public key infrastructure.<ref name="ref_0f6e1165" />
# Our system of trust is based on a Public Key Infrastructure (PKI) using internally-hosted Certificate Authorities (CAs).<ref name="ref_60a072fb">[https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/ How to build your own public key infrastructure]</ref>
# In this post we will describe how we built our PKI, how we use it internally, and how to run your own with our open source software.<ref name="ref_60a072fb" />
# Public key cryptography provides many mechanisms for trust, including PGP’s “web of trust” and HTTPS’s public key infrastructure (PKI) model.<ref name="ref_60a072fb" />
# We chose the PKI model because of ease of use and deployment.<ref name="ref_60a072fb" />
# To understand how PKI works, it’s important to go back to the basics that govern encryption in the first place.<ref name="ref_adca3991">[https://info.keyfactor.com/what-is-pki What is PKI? A Public Key Infrastructure Definitive Guide]</ref>
# PKI resolves this challenge by issuing and governing digital certificates that confirm the identity of people, devices or applications that own private keys and the corresponding public keys.<ref name="ref_adca3991" />
# In short, PKI assigns identities to keys so that recipients can accurately verify the owners.<ref name="ref_adca3991" />
# PKI governs encryption keys by issuing and managing digital certificates.<ref name="ref_adca3991" />
# The purpose of a PKI is to facilitate the secure electronic transfer of information for a range of network activities such as e-commerce, internet banking and confidential email.<ref name="ref_cb62f82c">[https://en.wikipedia.org/wiki/Public_key_infrastructure Public key infrastructure]</ref>
# In cryptography, a PKI is an arrangement that binds public keys with respective identities of entities (like people and organizations).<ref name="ref_cb62f82c" />
# The PKI role that may be delegated by a CA to assure valid and correct registration is called a registration authority (RA).<ref name="ref_cb62f82c" />
# this is incorrect according to the X.509 PKI standards.<ref name="ref_cb62f82c" />
# Public key infrastructure, or PKI – despite being a frequently used term, the mechanisms behind it can be quite difficult to understand.<ref name="ref_51612996">[https://www.pentasecurity.com/blog/how-pki-work/ How Does Public Key Infrastructure (PKI) Work? An Easy Guide]</ref>
# PKI is a general term that defines the technology used to encrypt and authenticate data during transmissions.<ref name="ref_51612996" />
# To explain how PKI works, we need to start by explaining its usage for authentication.<ref name="ref_51612996" />
# PKI works by encrypting data (in this case, digital certificate) with a cryptographic key, while having a separate key for decrypting it.<ref name="ref_51612996" />
# PKI (or Public Key Infrastructure) is the framework of encryption and cybersecurity that protects communications between the server (your website) and the client (the users).<ref name="ref_3d77e20f">[https://www.venafi.com/education-center/pki/how-does-pki-work How Does PKI Work [Public Key Infrastructure Guide]]</ref>
# Through encryption and decryption, PKI is based on digital certificates that verify the identity of the machines and/or users that ultimately proves the integrity of the transaction.<ref name="ref_3d77e20f" />
# So how does PKI authentication work?<ref name="ref_3d77e20f" />
# Public Key Infrastructure is a complex subject, so you may be wondering if it actually performs encryption.<ref name="ref_3d77e20f" />
# Public Key Infrastructure (PKI) is a technology for authenticating users and devices in the digital world.<ref name="ref_8a457871">[https://www.ssh.com/pki/ What is PKI (Public Key Infrastructure)?]</ref>
# A public key infrastructure relies on digital signature technology, which uses public key cryptography.<ref name="ref_8a457871" />
# The main weakness of public PKI is that any certificate authority can sign a certificate for any person or computer.<ref name="ref_8a457871" />
# We participated in the standardization work for X.509v3 and proposed an alternative approach called Simple Public Key Infrastructure (SPKI) to address some of the trust issues with the X.509 standard.<ref name="ref_8a457871" />
# CAs underpin the security of a PKI and the services they support, and therefore can be the focus of sophisticated targeted attacks.<ref name="ref_60072c57">[https://cpl.thalesgroup.com/faq/public-key-infrastructure-pki/what-public-key-infrastructure-pki What is Public Key Infrastructure (PKI)?]</ref>
# Users (also known as “Subscribers” in PKI parlance) can be individual end users, web servers, embedded systems, connected devices, or programs/applications that are executing business processes.<ref name="ref_60072c57" />
# A public key infrastructure (PKI) supports the distribution, revocation and verification of public keys used for public key encryption, and enables linking of identities with public key certificates.<ref name="ref_40341f71">[https://searchsecurity.techtarget.com/definition/PKI What is PKI (public key infrastructure)?]</ref>
# A PKI enables users and systems to securely exchange data over the internet and verify the legitimacy of certificate-holding entities, such as webservers, other authenticated servers and individuals.<ref name="ref_40341f71" />
# PKI certificates include a public key used for encryption and cryptographic authentication of data sent to or from the entity that was issued the certificate.<ref name="ref_40341f71" />
# Without PKI, sensitive information can still be encrypted, ensuring confidentiality, and exchanged between two entities, but there would be no assurance of the identity of the other party.<ref name="ref_40341f71" />
# Public key infrastructure (PKI) is an example of a security infrastructure that uses both public and private keys.<ref name="ref_d576521d">[https://www.sciencedirect.com/topics/computer-science/public-key-infrastructure Public Key Infrastructure - an overview]</ref>
# PKI is targeted toward legal, commercial, official, and confidential transactions, and includes cryptographic keys and a certificate management system.<ref name="ref_d576521d" />
# PKI uses one or more trusted systems known as Certification Authorities (CA), which serve as trusted third parties for PKI.<ref name="ref_d576521d" />
# PKI trust is established by a certificate authority, which is an organization or governing body that can issue certificates and verify the identity of the certificate requestor.<ref name="ref_acd80d7c">[https://docs.aws.amazon.com/crypto/latest/userguide/awspki-whatis-toplevel.html What is public key infrastructure?]</ref>
# To learn more about the terms and concepts used in PKI, see PKI Concepts.<ref name="ref_acd80d7c" />
# The purpose of a PKI is to manage the public keys used by the network for public key encryption, identity management, certificate distribution, certificate revocation, and certificate management.<ref name="ref_5f50b316">[https://www.securew2.com/blog/public-key-infrastructure-explained/ Public Key Infrastructure: Explained]</ref>
# The PKI allows users and systems to verify the legitimacy of certificate-holding entities and securely exchange information between them over the air.<ref name="ref_5f50b316" />
# In a PKI system, the client generates a public-private key pair.<ref name="ref_5f50b316" />
# A Hardware Security Module isn’t a mandatory component of a PKI, but it improves the security of the PKI as a whole when implemented.<ref name="ref_5f50b316" />
# PKI (Public Key Infrastructure), is a framework that enables the encryption of public keys and includes their affiliated crypto-mechanisms.<ref name="ref_67bb1f76">[https://www.appviewx.com/education-center/pki/ Role of Certificates in PKI]</ref>
# The underlying purpose of any PKI setup is to manage the keys and certificates associated with it, thereby creating a highly secure network environment for use by applications and hardware.<ref name="ref_67bb1f76" />
# Assists the PKI cycle by verifying that the body requesting a certificate is legitimate.<ref name="ref_67bb1f76" />
# Certificates are the gatekeepers to ensuring that the underlying PKI works properly.<ref name="ref_67bb1f76" />
# Ever wondered what public key infrastructure (PKI) is and how it works?<ref name="ref_b258a27a">[https://www.thesslstore.com/blog/what-is-pki-a-crash-course-on-public-key-infrastructure-pki/ What Is PKI? A Crash Course on Public Key Infrastructure (PKI)]</ref>
# But what is PKI and what does it entail for organizations and data privacy?<ref name="ref_b258a27a" />
# PKI is an infrastructure that has become an essential part of our everyday lives — and the overwhelming majority of us don’t even know what it is!<ref name="ref_b258a27a" />
# But before we move on to answering the “what is PKI?” question and talking about how it works, let’s first consider a simple scenario.<ref name="ref_b258a27a" />
# A Public Key Infrastructure (PKI) is a combination of policies, procedures and technology needed to manage digital certificates in a public key cryptography scheme.<ref name="ref_2222afa5">[https://www.enisa.europa.eu/topics/csirts-in-europe/glossary/public-key-infrastructure-pki Public Key Infrastructure (PKI)]</ref>
# Public keys are the basis for a Public Key Infrastructure when decrypting highly-sensitive data.<ref name="ref_b1535d87">[https://hubsecurity.io/what-is-public-key-infrastructure-pki/ What Is Public Key Infrastructure (PKI)?]</ref>
# Many of today’s emerging technologies, especially within the fintech space, are becoming more and more reliant on PKI technology to guarantee security and protection of sensitive data.<ref name="ref_b1535d87" />
# In PKI, digital certificates are used to associate a public key of a private-public key-pair (i.e. RSA, ECC) with the identity of its owner.<ref name="ref_a34a1b54">[https://doubleoctopus.com/security-wiki/digital-certificates/public-key-infrastructure/ What is Public Key Infrastructure (PKI?)]</ref>
# The Microsoft PKI assessment provides an insight into the health of your organization’s Microsoft Active Directory Certificate Services (ADCS) environment.<ref name="ref_cdcb6c19">[https://www.sss.co.nz/solutions/identity-and-access-management/machine-identity-protection/public-key-infrastructure/ Public Key Infrastructure]</ref>
# Our design process incorporates a risk-based approach to ensure the right amount of security is incorporated to match the risk profile for current and future PKI use cases.<ref name="ref_cdcb6c19" />
# SSS has extensive experience creating and reviewing policy artefacts required to establish a trusted PKI that are required to meet the current and future business needs.<ref name="ref_cdcb6c19" />
# Policies and procedures for the establishment of a PKI provide the certainty that the PKI has been established securely, has integrity and if necessary, can be re-built with confidence.<ref name="ref_cdcb6c19" />
# Read our whitepaper, "Securing Your PKI" for an in-depth discussion on PKIs and their management.<ref name="ref_35143a1c">[https://www.entrust.com/digital-security/hsm/solutions/use-case/credentialing-and-pki-applications/pki-and-digital-certificates PKI and Digital Certificates]</ref>
# In creating certificates, CAs act as agents of trust in a PKI.<ref name="ref_a4a05a47">[https://www.entrust.com/resources/certificate-solutions/learn/what-is-pki What is PKI?]</ref>
# PrimeKey uses open standards for our PKI and signing software, providing you with crypto agility.<ref name="ref_3e57b2b7">[https://www.primekey.com/about-primekey/public-key-infrastructure-pki/ PKI and Public Key Infrastructure technology from PrimeKey]</ref>
# With our open source PKI and signing software, you have access to the source code of the software and this protects you from unforeseen events.<ref name="ref_3e57b2b7" />
# The term public key infrastructure is derived from public key cryptography, the technology behind PKI.<ref name="ref_9383ca55">[https://web.uanataca.com/en/blog/digital-transformation/pki What is a PKI or public key infrastructure?]</ref>
# In a PKI environment, two different cryptographic keys are used for encryption and decryption purposes, known as public and private keys.<ref name="ref_9383ca55" />
# PKI encompasses a complex set of technologies.<ref name="ref_9383ca55" />
# Do you want to get the benefits of PKI technology without having your own infrastructure?<ref name="ref_9383ca55" />
# The principles of a PKI are based on asymmetric encryption.<ref name="ref_4d5158fc">[https://www.bsi.bund.de/EN/Topics/ElectrIDDocuments/securPKI/securitymechanismsPKI.html Public Key Infrastructres (PKIs)]</ref>
# Further certificates in this PKI will be signed with the private key belonging to the root certificate.<ref name="ref_4d5158fc" />
# Not all PKI certificates must be signed with the private key of the root certificate.<ref name="ref_4d5158fc" />
# This document identifies continuing areas of concern and provides recommendations to the Internet community for additional improvements, moving toward a more robust and secure Web PKI.<ref name="ref_b622827b">[https://tools.ietf.org/html/draft-iab-web-pki-problems-05 Improving the Public Key Infrastructure (PKI) for the World Wide Web]</ref>
# Over the years, many technical improvements have been made to the Web PKI, but several challenges remain.<ref name="ref_b622827b" />
# While in its simplest form, the Web PKI is fairly straightforward, there are a number of concepts that can complicate the relationships and the behavior.<ref name="ref_b622827b" />
# Browsers install numerous trust anchors associated with many different CAs in the Web PKI.<ref name="ref_b622827b" />
# Using a combination of private (e.g., secret) key and public key cryptography, PKI enables a number of other security services, including data confidentiality, data integrity and non-repudiation.<ref name="ref_206e6a0d">[https://www.fedidcard.gov/faq/what-pki-public-key-infrastructure-and-why-do-i-need-it What is PKI (Public Key Infrastructure) and why do I need it?]</ref>
# As a government employee or contracted worker, you may need now, or at some time in the future, a PKI certificate to gain access to the agency information network and systems.<ref name="ref_206e6a0d" />
# Non-repudiation PKI can be used to provide non-repudiation through digital signatures.<ref name="ref_eaff301f">[https://docs.oracle.com/cd/B10501_01/network.920/a96582/pki.htm The Public Key Infrastructure Approach to Security]</ref>
# The PKI approach to security does not take the place of all other security technologies; rather, it is an alternative means of achieving security.<ref name="ref_eaff301f" />
# PKI allows delegated trust.<ref name="ref_eaff301f" />
# The Secure Sockets Layer (SSL) is an industry standard protocol that provides authentication, data encryption, and data integrity, in a public-key infrastructure.<ref name="ref_eaff301f" />
# From 7 December 2020, you won't be able to log on to HPOS using a PKI certificate.<ref name="ref_b998ca5b">[https://www.servicesaustralia.gov.au/organisations/health-professionals/services/medicare/public-key-infrastructure Public Key Infrastructure]</ref>
# If your software doesn’t automatically renew your PKI certificate, we’ll send you a letter 60 days before your certificate expires.<ref name="ref_b998ca5b" />
# The Healthcare Public Directory lists individuals and organisations with active or revoked PKI certificates.<ref name="ref_b998ca5b" />
# Such a structure is known as a Public Key Infrastructure (PKI).<ref name="ref_73b6b895">[https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GCAS_PKIABOUT About PKI (Public Key Infrastructure)]</ref>
# As a result of this, next generation business applications are becoming more reliant on Public Key Infrastructure technology to guarantee high assurance.<ref name="ref_efe3e261">[https://www.asiapki.org/about-pki.html Asia PKI Consortium]</ref>
# Gemalto's Luna is a line of hardware security module (HSM) products that generate the root key in a PKI system and keep the private key secure.<ref name="ref_539bd397">[https://www.pcmag.com/encyclopedia/term/pki Definition of PKI]</ref>
# The foundation of a PKI is the certificate authority (CA), which issues digital certificates that authenticate the identity of organizations and individuals over a public system such as the Internet.<ref name="ref_539bd397" />
# A PKI can also be implemented by an enterprise for internal use to authenticate employees accessing the network.<ref name="ref_539bd397" />
# The PKI establishes the encryption algorithms, levels of security and distribution policy to users.<ref name="ref_539bd397" />
# Definition - What does Public Key Infrastructure (PKI) mean?<ref name="ref_6a836360">[https://www.techopedia.com/definition/4071/public-key-infrastructure-pki What is Public Key Infrastructure (PKI)?]</ref>
# The Certificate Policy and PKI Disclosure Statement for the NHS Root Certificate Authority (CA) make up the complete policy under which the NHS Root CA is operated.<ref name="ref_0a44937c">[https://digital.nhs.uk/cyber-and-data-security/guidance-and-assurance/public-key-infrastructure-pki-documentation Public Key Infrastructure (PKI) documentation]</ref>
# If you’ve wondered what public key infrastructure (PKI) is, you’ve come to the right place.<ref name="ref_578f7e95">[https://sectigostore.com/blog/what-is-pki-a-laymans-guide-to-public-key-infrastructure/ What Is PKI? A Layman’s Guide to Public Key Infrastructure]</ref>
# Just so we don’t undermine the complexity of PKI, let’s start with a riddle.<ref name="ref_578f7e95" />
# Think of public key infrastructure as the almighty helping hand.<ref name="ref_578f7e95" />
# PKI is the helping hand that makes online banking, paying taxes online, shopping on Amazon and so much more safe and secure!<ref name="ref_578f7e95" />
# Various companies are involved in developing PKI, with the step involving a subject verifying their own identity using a digital certificate.<ref name="ref_8c76d2f6">[https://www.itpro.co.uk/security/31775/what-is-public-key-infrastructure-pki What is public key infrastructure (PKI)?]</ref>
# This process requires the work of a registration authority (RA), which is demanded under PKI in order to verify the subject.<ref name="ref_8c76d2f6" />
# Public Key Infrastructure use features in a large range of applications, but it is most frequently used to protect digital platforms and services.<ref name="ref_8c76d2f6" />
# You may also encounter a variant of PKI when accessing e-documents and online forms that require user signatures.<ref name="ref_8c76d2f6" />
# A Public Key Infrastructure (PKI) is used to manage and distribute keys and digital certificates in publicly accessible networks to ensure secure digital communications.<ref name="ref_78fd7484">[https://en.ryte.com/wiki/Public_Key_Infrastructure Public Key Infrastructure]</ref>
# The exchange of data, information and messages via the Internet takes place in a PKI through a key pair consisting of a public key and a private key.<ref name="ref_78fd7484" />
# The public-key infrastructure issues certificates, passes them on to the communication participants and checks the certificates for authenticity.<ref name="ref_78fd7484" />
# The standard protocol on the Internet is called PKIX (Public Key Infrastructure Exchange).<ref name="ref_78fd7484" />
===소스===
<references />

@@ 112번째 줄: / 112번째 줄: @@
   <references />
-== 메타데이터 ==
+==메타데이터==
 ===위키데이터===
 * ID :  [https://www.wikidata.org/wiki/Q658476 Q658476]

← 이전 판		2020년 12월 26일 (토) 12:13 판
111번째 줄:		111번째 줄:
	===소스===		===소스===
	<references />		<references />
		+
		+	== 메타데이터 ==
		+
		+	===위키데이터===
		+	* ID : [https://www.wikidata.org/wiki/Q658476 Q658476]

공개 키 기반 구조 - 편집 역사

2021년 2월 17일 (수) 08:00에 Pythagoras0님의 편집

Pythagoras0: /* 메타데이터 */ 새 문단

Pythagoras0: /* 노트 */ 새 문단