| 摘要 |
The invention relates to a non-hierarchical infrastructure for managing paired security keys of natural persons comprising a public key and a private key having a public key certificate, said structure not comprising any certification authority separate from the natural persons, said structure comprising at least one registration authority and the trusted third party server thereof. At least one registration authority and the trusted third party server thereof are provided for each circle of trust, the registration authority includes local registration agencies. The local registration agency establishes, after face-to-face verification of identity, a public key certificate and a certificate of public key ownership which does not contain the public key of the person but rather the print thereof and which is transmitted securely to the associated trusted third party server which stores it securely. The public key ownership certificate is encrypted in atypical fashion with the private key of the physical person in order to render it unreadable except for the serial number thereof. The public key ownership certificate can be requested online on the trusted third party server to verify the authenticity of the corresponding public key certificate. The invention can be used for citizens, consumers and professionals. |
