Authenticity by using Digital Certificate and Secure Communication through Key Agreement Protocol

Mamatha vayelapelli; P.S. Avadhani

doi:10.37591/jomtra.v1i1.94

Abstract

An essential component of Internet security is based on public key cryptography, the twopart encryption scheme where one part of the key is held privately and the other is madepublic. This technology has given rise to a small but growing industry that provides Certificate Authority services (CA). These companies verify that a server computers public key is valid and combine it with their own public key to create a unique Digital Certificate. A digital certificate is simply an electronic “statement”, signed by an independent and trusted third party, in a format that is standardized so that its contents can be decoded by a client programs such as Web browsers. The most common digital certificates on the Internet follow a standard named X.509.The technical anddocumentary relationships for certifying the authenticity of the public keys of server(and client) computers on the Internet is referred to collectively as public key infrastructure(orPKI).It is a secure system that is used to manage and control certificates . Digital signatures can be used to protect the authenticity and integrity of data objects. Key agreement is achieved by using secret key cryptography. If two or more entities want to employ and want to make use of secret key cryptography, then they must share a secret parameter or cryptographic key. Consequently, in a large system many secret keys must typically be generated, stored and managed, destroyed in a secure way. Key agreementprotocols are proposed in this paper basing on the concept of digital signature. Discrete logarithm (DL) based protocol is analyzed in detail further.Keywords: Public-key, digital certificate, user authentication, key negotiation, certification authority, secure communication