The ease of copying digital materials creates difficulty in detecting the theft of digital certificates. Uneducated users frequently fail to protect their digital certificate keys by not encrypting them, storing them in insecure places, and using them unwisely. In addition, there is no way to prove that protocols involving certificates are completely secure. This thesis introduces a system to ameliorate these problems by detecting the compromise of digital certificates. It leverages dual logging messages sent via side channels to a trusted third party. This third party correlates these messages and automatically detects when an imposter presents a certificate based on the collected evidence.

This work deals with the possibilities of using digital certificates and certification authorities or analysis of alternatives and their use to create secure communication in information systems. In practical examples is demonstrated by the CA implementation on different platforms and generate various types of digital certificates. Based on the findings is made recommendations for choosing the appropriate certification authority.

Digital certificates have long been used for traditional Internet applications, and have now entered into widespread use for the Internet of Things. However, constrained devices currently have no means to verify the revocation status of certificates. Without the ability to revoke certificates, network administrators have no recourse in the event of a private key compromise. This thesis explores three alternatives to solve this problem: (1) implement the Online Certificate Status Protocol (OCSP) as is on a CoAP network stack, (2) compress certificate revocation lists (CRLs) using Bloom filters, and (3) design an optimized version of OCSP (referred to here as TinyOCSP). This work concludes that TinyOCSP reduces the message overhead of online validation by at least 73%. This reduced the energy consumption of certificate validation by 50% relative to OCSP in the experiments on constrained hardware, which shows that it may be a feasible solution for the IoT / Digitala certifikat har länge tillämpats inom traditionella internetappliceringar och har numera även omfattande användningsområden inom IoT. Begränsade apparater har i nuläget dock inga metoder för att verifiera återkallningsstatusar av certifikat. Utan förmågan att återkalla certifikat har nätverksadministratörer inga alternativ att återfalla till när en hemlig nyckel har blivit stulen. Denna uppsats undersöker tre alternativ för att lösa detta problem: (1) tillämpning av Online Certificate Status Protocol (OCSP) med CoAP, (2) komprimering av certificate revocation lists (CRLs) som använder Bloom filters, och (3) skapa en optimerad version av OCSP (TinyOCSP). Arbetet drar slutsatsen att TinyOCSP minskar message overhead av onlinevalidering med åtminstone 73%. Detta minskade energikonsumtion av certifikatsvalidering med 50% jämfört med OCSP i experimentet med begränsade apparater, vilket visar att detta är en tänkar lösning för IoT.

Com base no estudo da Lei 11, 419 de 19 de dezembro de 2006, conhecida como “Lei do processo eletrônico”, decretada pelo Congresso Nacional, pretende-se contextualizar o desenvolvimento da informatização do judiciário no Brasil, levando em conta as experiências que já vêm ocorrendo não apenas no Supremo Tribunal Federal, mas em diferentes instâncias judiciais do país, por exemplo, nos tribunais localizados na cidade de Porto Alegre, Estado do Rio Grande do Sul: o Tribunal Regional Federal da 4ª Região, Tribunal Regional do Trabalho da 4ª Região e o Tribunal de Justiça do Estado do Rio Grande do Sul que, em uso de sistemas informáticos, operacionalizam a prestação jurisdicional mediante a transmissão eletrônica de dados com base na Lei 11.419/06. Destaca-se também que a informatização do judiciário comporta celeridade na tramitação de peças processuais, sem desconhecer a adoção de cautelas que garantam suficientemente a segurança das informações relativas ao processo e às partes, o que se constata através da aplicação de assinaturas eletrônicas respaldadas por certificado digital que atende aos requisitos de autenticidade, validade jurídica e interoperabilidade da Medida Provisória 2.200-2/2001 relativa à criação da Infraestrutura de Chaves Pública Brasileira. Como resultado destas considerações, formula-se um diagnóstico situacional para a implantação de um processo eletrônico em El Salvador. / Based on the study of Law 11, 419 of 19 December 2006, known as the "Law of the electronic process," enacted by Congress, seeks to contextualize the development of computerization of the judiciary in Brazil, taking into account not also the experiences into the Supreme Federal Court, but in differents courts around the country, such as the courts located in Porto Alegre, Rio Grande do Sul: The Federal Court of the 4th Region, the Regional Labor Court of the 4th Region and the Court of the State of Rio Grande do Sul, in use of computer systems, effectuate the adjudication by the electronic transmission of data based on the Law 11.419/06. Also noteworthy is that the computerization of the judiciary behaves quickly, without ignoring the adoption of safeguards to ensure sufficient security of information relating to the proceedings and the parties, which is verified through the application of electronic signatures supported by digital certificate that meets requirements of authenticity, the legal validity and interoperability of Provisional 2.200-2/2001 on the creation of the Brazilian Public Key Infrastructure. As a result of these considerations, it makes up a situation analysis for the deployment of an electronic process in El Salvador.

Com base no estudo da Lei 11, 419 de 19 de dezembro de 2006, conhecida como “Lei do processo eletrônico”, decretada pelo Congresso Nacional, pretende-se contextualizar o desenvolvimento da informatização do judiciário no Brasil, levando em conta as experiências que já vêm ocorrendo não apenas no Supremo Tribunal Federal, mas em diferentes instâncias judiciais do país, por exemplo, nos tribunais localizados na cidade de Porto Alegre, Estado do Rio Grande do Sul: o Tribunal Regional Federal da 4ª Região, Tribunal Regional do Trabalho da 4ª Região e o Tribunal de Justiça do Estado do Rio Grande do Sul que, em uso de sistemas informáticos, operacionalizam a prestação jurisdicional mediante a transmissão eletrônica de dados com base na Lei 11.419/06. Destaca-se também que a informatização do judiciário comporta celeridade na tramitação de peças processuais, sem desconhecer a adoção de cautelas que garantam suficientemente a segurança das informações relativas ao processo e às partes, o que se constata através da aplicação de assinaturas eletrônicas respaldadas por certificado digital que atende aos requisitos de autenticidade, validade jurídica e interoperabilidade da Medida Provisória 2.200-2/2001 relativa à criação da Infraestrutura de Chaves Pública Brasileira. Como resultado destas considerações, formula-se um diagnóstico situacional para a implantação de um processo eletrônico em El Salvador. / Based on the study of Law 11, 419 of 19 December 2006, known as the "Law of the electronic process," enacted by Congress, seeks to contextualize the development of computerization of the judiciary in Brazil, taking into account not also the experiences into the Supreme Federal Court, but in differents courts around the country, such as the courts located in Porto Alegre, Rio Grande do Sul: The Federal Court of the 4th Region, the Regional Labor Court of the 4th Region and the Court of the State of Rio Grande do Sul, in use of computer systems, effectuate the adjudication by the electronic transmission of data based on the Law 11.419/06. Also noteworthy is that the computerization of the judiciary behaves quickly, without ignoring the adoption of safeguards to ensure sufficient security of information relating to the proceedings and the parties, which is verified through the application of electronic signatures supported by digital certificate that meets requirements of authenticity, the legal validity and interoperability of Provisional 2.200-2/2001 on the creation of the Brazilian Public Key Infrastructure. As a result of these considerations, it makes up a situation analysis for the deployment of an electronic process in El Salvador.

Com base no estudo da Lei 11, 419 de 19 de dezembro de 2006, conhecida como “Lei do processo eletrônico”, decretada pelo Congresso Nacional, pretende-se contextualizar o desenvolvimento da informatização do judiciário no Brasil, levando em conta as experiências que já vêm ocorrendo não apenas no Supremo Tribunal Federal, mas em diferentes instâncias judiciais do país, por exemplo, nos tribunais localizados na cidade de Porto Alegre, Estado do Rio Grande do Sul: o Tribunal Regional Federal da 4ª Região, Tribunal Regional do Trabalho da 4ª Região e o Tribunal de Justiça do Estado do Rio Grande do Sul que, em uso de sistemas informáticos, operacionalizam a prestação jurisdicional mediante a transmissão eletrônica de dados com base na Lei 11.419/06. Destaca-se também que a informatização do judiciário comporta celeridade na tramitação de peças processuais, sem desconhecer a adoção de cautelas que garantam suficientemente a segurança das informações relativas ao processo e às partes, o que se constata através da aplicação de assinaturas eletrônicas respaldadas por certificado digital que atende aos requisitos de autenticidade, validade jurídica e interoperabilidade da Medida Provisória 2.200-2/2001 relativa à criação da Infraestrutura de Chaves Pública Brasileira. Como resultado destas considerações, formula-se um diagnóstico situacional para a implantação de um processo eletrônico em El Salvador. / Based on the study of Law 11, 419 of 19 December 2006, known as the "Law of the electronic process," enacted by Congress, seeks to contextualize the development of computerization of the judiciary in Brazil, taking into account not also the experiences into the Supreme Federal Court, but in differents courts around the country, such as the courts located in Porto Alegre, Rio Grande do Sul: The Federal Court of the 4th Region, the Regional Labor Court of the 4th Region and the Court of the State of Rio Grande do Sul, in use of computer systems, effectuate the adjudication by the electronic transmission of data based on the Law 11.419/06. Also noteworthy is that the computerization of the judiciary behaves quickly, without ignoring the adoption of safeguards to ensure sufficient security of information relating to the proceedings and the parties, which is verified through the application of electronic signatures supported by digital certificate that meets requirements of authenticity, the legal validity and interoperability of Provisional 2.200-2/2001 on the creation of the Brazilian Public Key Infrastructure. As a result of these considerations, it makes up a situation analysis for the deployment of an electronic process in El Salvador.

Made available in DSpace on 2016-12-01T19:18:35Z (GMT). No. of bitstreams: 1 Sumario e Resumo.pdf: 45506 bytes, checksum: cd9544192e5430afbcb12944adc4244c (MD5) Previous issue date: 2013-04-30 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / Resumo protegido

1 Abstract As a topic of the diploma thesis I have chosen the issue of electronic signature in relation to administrative proceedings. The field of electronic communication is incredibly diverse and it is growing very dynamically. For this reason, I found the topic interesting and usable in the future. There have not been many theses on this topic yet, so I did not have to solve the problem that it was not original. I have always had a positive attitude towards digital technology. At the same time, I was fortunate that I could have always been informed about information technologies by someone who was interested in the issue much earlier. No matter whether it was more experienced family member, high school teacher who by far exceeded the capacities of the educational institution, or patient colleague at work. As stated at the beginning, this work could not have been finished without the contribution of my father, who has been involved in the issue of electronic signatures for a long time, and who brought me to the idea of choosing this topic. The aim of this work was to describe possibilities of application of electronic signing in administrative proceedings, or in communication with public authorities. However, a simple description of the legislation, which is presently in practice, would not be...

There is a lot of available services on the internet those need to be more secured and trusted. Public key infrastructure is used in sectors where are higher expectations in case of authentication, integrity and confidentality. It is almost impossible to imagine how internet banking or electronic signatures of important documents would work without PKI. There is a lot of open-source realisations of PKI created by users. Digital certificates as a part of PKI are issued by certificate authorities. This diploma thesis consists of open- source realisation of certificate authority and timestamping authority to demonstrate services which they provide.

Getting incorrect website content has increased in recent years, which is a reflection of the web security status on the Internet. However, when It comes to government and other professional organisations websites, they should have the best security requirements and follow security recommendations. This research will study websites located in the SE zone. The total number of investigated websites is 1166. The testing process was done in two ways. The firstway is a Dutch test website tool called Internet.nl. The second is using a tool developed as part of the research. The investigation focuses on Swedish websites and nine security extensions. These extensions prevent Man in the middle attack(MITM), downgrade attacks, Cross-Site Scripting (XSS), Click-jacking, and ensure that the correct information is obtained when a client requests a website. The paper evaluated the security between 2014 and 2022. What are the types of security taken and which sector has the best security awareness. The using of security headers had increased in 2022, the total use of tested security standards in the SE zone is around 50%, and banks have the best security awareness.