| 摘要 |
The invention relates to a non-hierarchical infrastructure for managing twin-security keys of physical persons or of elements comprising a public key and a private key with a public key certificate, said structure not comprising any certification authority distinct from the physical persons or elements, said structure comprising at least one registering authority and its electronic notary server. There is provided at least one registering authority and its electronic notary server for a circle of trust. The registering authority comprises local registering agencies. The local registering agency establishes, after face-to-face verification of the identity of the physical person or of the identification of the element, a public key certificate, and a "public key ownership certificate", which does not contain the public key of the person or of the element but the print thereof, and which is transmitted in a secure manner to the associated electronic notary server which stores it in a secure manner. The public key ownership certificate is signed with the private key of the physical person or of the element, or else encrypted with the private key of the physical person or of the element according to an atypical use of this key in order to render it opaque with the exception of its serial number. The public key ownership certificate can be requested online on the electronic notary server to verify the authenticity of the corresponding public key certificate and the authenticity of its public key. Application to citizens, consumers and professionals and beyond this to other elements, living or otherwise, requiring secure digital exchanges. |
