Page 117 - DCAP309_INFORMATION_SECURITY_AND_PRIVACY

Unit 8: Cryptography and Encryption

5. ........................... are a means of supplying a lawfully binding transaction between two or Notes
more parties.
6. ........................... systems are systems intended to permit use only if a minimal number of
parties consent to said use.

8.3 Digital Certificates

E-commerce has flourished because of the ability to perform secure transactions online using
the proper tools. These tools are public key encryption and digital certificates.
The digital equivalent of an ID card used in conjunction with a public key encryption system.
Also called a “digital ID,” “digital identity certificate,” “identity certificate” and “public key
certificate,” digital certificates are issued by a trusted third party known as a “certification
authority” (CA) such as VeriSign (www.verisign.com) and Thawte (www.thawte.com).
Digital certificates are issued by an independent, recognized and mutually trusted third party
that guarantees that the website operating is who it claims to be. This third party is known as a
Certification Authority (CA). Without digital certificates, the public has little assurance as to the
legitimacy of any particular website.

Figure 8.1: Digital Certificate

LOVELY PROFESSIONAL UNIVERSITY 111