PKI Service Integration Guidelines (For Developers)
Public Key Infrastructure (PKI) services keep digital systems secure and trustworthy. RISA provides essential services for certificate validation and timestamping, which form the foundation of a secure digital signature service.
Any system that uses digital signatures or other PKI services must follow these guidelines. They ensure that signatures are authentic, documents stay intact, and the services remain reliable.
This guideline covers: certificate revocation, certificate expiration, signature validation, password management, timestamp validation, processing time, signature appearance, protection of signed documents, prevention of untrusted signatures, prevention of unauthorized changes, and verification after signing.
Certificate Revocation
Objective: Make sure your system checks whether a certificate is still valid and has not been re...
Certificate Expiration
Objective Prevent expired certificates from being used in your system. Guidelines Automatic...
Signature Validation
Objective: Confirm that digital signatures are authentic (made by the right person) and that the...
Password Management
Objective: Keep user certificate passwords safe. Guidelines: Never store user certificate pa...
Timestamp Validation
Objective: Make sure the date and time attached to a digital signature are accurate and can be t...
Signature and Certification Processing Time
Objective Set clear expectations for how long signing and certification operations should ta...
Signature Appearance
Objective Make sure the visible signature on a document looks professional and never hides the d...
Protection of Signed Documents Against Unauthorized Modification
Objective Once a document is signed or certified, protect it so that any later change can be det...
Prevention of Additional Untrusted Signatures
Objective Stop anyone from quietly adding an unauthorized or untrusted signature to a document t...
Prevention of Unauthorized Document Changes
Objective Protect signed documents from any action that could damage their integrity or trustwor...
Verification After Signing
Objective Every system that integrates with the PKI service must offer a way to verify a documen...
Closing: Compliance and Integration Assessment
By following these guidelines, developers can be confident that their PKI integration meets the r...