Public Key Infrastructure

1st Peruvian Workshop on IT Security 29.Dic.2003 PKI aplicada http://escert.upc.es Instituto de Investigación UNI-FIIS http://www.uni.edu.pe Colaboración Roger Carhuatocto Miembro esCERT-UPC Responsable de Servicios Educacionales esCERT-UPC C/ Jordi Girona, 1-3. Campus Nord, UPC 08034 Barcelona ~ España Tel. (34)934015795 ~ Fax. (34)934017055

Servicio de seguridad ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],Servicios de Seguridad

[object Object],[object Object],[object Object],Infraestructura. ¿Por qué?.

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Infraestructura. Conclusión

Certificado y CA Almacén seguro Autoridad de Certificación (CA) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],NO HAY INFORMACIÓN CONFIDENCIAL.

Certificado y CA Almacén seguro Autoridad de Certificación (CA) ,[object Object],[object Object],[object Object],NO HAY INFORMACIÓN CONFIDENCIAL. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],Certificado, Firma y cifrado KAlice privada KAlice pública SI? Almacén seguro Autoridad de Certificación (CA) Firma Digital Verificación de Firma Digital

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Validación de mensajes firmados

[object Object],[object Object],[object Object],Infraestructura. Ldap

Infraestructura. Ldap X.500 Usuario A Usuario B Almacén seguro Autoridad de Certificación (CA)

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Ldap CA Raíz CA Sub A CN=Roger Carhuatocto CA Sub B CA Sub A.1 C=PE C=ES O=UNI-FIIS OU=ACME

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Certificados y CRLs

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Certificados, CRLs y verificación

[object Object],[object Object],[object Object],[object Object],[object Object],Conclusiones

[object Object],Certificado X.509 Certificate::= SIGNED SEQUENCE { version [0] Version DEFAULT v1, serialNumber CertificateSerialNumber, signature AlgorithmIdentifier, issuer Name, validity Validity, subject Name, subjectPublicKeyInfo SubjectPublicKeyInfo, issuerUniqueId [1] IMPLICIT UniqueIdentifier OPTIONAL, subjectUniqueI [2] IMPLICIT UniqueIdentifier OPTIONAL, extensions [3] Extensions OPTIONAL }

[object Object],[object Object],Certificado Reconocido (Qualified Cert.)

[object Object],Certificado Reconocido (Qualified Cert.) AuthorityKeyId SubjectKeyId KeyUsage CertPolicies CRLDistributionPoint Certificate::= SIGNED SEQUENCE { version [0] Version DEFAULT v1, serialNumber CertificateSerialNumber, signature AlgorithmIdentifier, issuer Name, validity Validity, subject Name, subjectPublicKeyInfo SubjectPublicKeyInfo, issuerUniqueId [1] IMPLICIT UniqueIdentifier OPTIONAL, subjectUniqueI [2] IMPLICIT UniqueIdentifier OPTIONAL, extensions [3] Extensions OPTIONAL }

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Public Key Cryptography Standards

Public Key Cryptography Standards Public-Key Cryptography Standards http://www.rsasecurity.com/rsalabs/pkcs/index.html

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Aplicaciones. email

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Aplicaciones. Web seguro

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Aplicaciones. Transacciones seguras

PKI: Ejemplos ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

June 2003 Survey on PKI Obstacles ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Ver encuesta http://www.ietf.org/proceedings/03nov/slides/pkix-2/pkix-2.ppt

Public Key Infrastructure

Recommandé

Recommandé

Contenu connexe

En vedette

En vedette (15)

Similaire à Public Key Infrastructure

Similaire à Public Key Infrastructure (20)

Plus de Roger CARHUATOCTO

Plus de Roger CARHUATOCTO (20)

Dernier

Dernier (15)

Public Key Infrastructure