Public Key Infrastructure

Public Key Infrastructure
PKI: Public-Key Infrastructure)
Public Key Infrastructure (PKI) is a system that provides Public Key creation and management based on the concept of Public Key encryption Public Key Cryptography. It supports efficient data encryption and Key exchange processes.
The PKI system is developed by the Internet standards group and NIST. In the PKI structure, a key Certification Authority (CA) is a third-party organization. It is an authority responsible for issuing and managing digital certificates. The PKI system mainly supports the following functions:
System Security Enhancement Service allows you to establish user identities and associate them with their operations in the PKI system.
Encryption primitives and services-supports encryption. Public Key Security is built on this function, including private key primitives, such as the International Data Encryption Algorithm IDEA ).
Long-term key service-allows users to manage their own long-term keys and authentication, and to retrieve and verify the validity of other major certifications.
Protocol Security Service provides security functions, such as data origin authentication, data integrity protection, data private protection, and approval.
Security protocol-enhances the security of communications in applications with unknown or limited known security.
Security Policy Service-enhances access control through security policy information, guides access control, and forcibly verifies the effectiveness of known security applications. Support Services-security operations but not mandatory security policy functions)
PKI system: