Digital Certificates

Digital certificates are data files used to establish the identity of people and electronic assets on the Internet. They allow for secure, encrypted online communication and are often used to protect online transactions.

By Ann Harrison

August 14, 2000 12:00 PM ET

Recommended

Computerworld - Digital certificates are issued by a trusted third party known as a certification authority (CA). The CA validates the identity of a certificate holder and "signs" the certificate to attest that it hasn't been forged or altered in any way.

			New Uses For Digital Certificates Digital certificates are now being used to provide security and validation for wireless connections, and hardware manufacturers are one of the latest groups to use them. Last month, VeriSign Inc. in Mountain View, Calif., announced its Cable Modem Authentication Services, which allow hardware manufacturers to embed digital certificates into cable modems to help prevent the pirating of broadband services through device cloning. Using VeriSign software, hardware makers can generate cryptographic keys and corresponding digital certificates that manufacturers or cable service providers can use to automatically identify individual modems. "It appears that this is the very first time that certificates are being used at the point of manufacture in electronics products, where they are burned right into the read-only memory of [a] cable modem," says analyst Michael Harris, president of Kinetic Strategies Inc. in Phoenix. According to VeriSign, the Data Over Cable System Interface Specification standard, which calls for the embedding of digital certificates in cable modems, sets the stage for next-generation broadband services such as pay-per-view, digital rights management and online software delivery and ensures interoperability among products from cable modem manufacturers and operators. "This 'last-mile' authentication not only protects the value of existing content and services but also positions cable system operators to bring a broad new range of content, applications and value-added services to market," says Stratton Sclavos, president and CEO of VeriSign.

When a certificate is digitally signed by a CA, its owner can use it as an electronic passport to prove his identity. It can be presented to Web sites, networks or individuals that require secure access.

Identifying information embedded in the certificate includes the holder's name and e-mail address, the name of the CA, a serial number and any activation or expiration data for the certificate. When a user's identity is verified by the CA, the certificate uses the holder's public encryption key to protect this data.

Public keys are also employed by certificates that a Web server uses to confirm the authenticity of a Web site for a user's browser. When a user wants to send confidential information to a Web server, such as a credit-card number for an online transaction, the browser will access the public key in the server's digital certificate to verify its identity.

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Jump to comments

CRM

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Informatica 9 Launch: Transform your Business. Transform your world.

LIVE Nov 10, 2009 12:00 PM ET

Architecting Business Intelligence Applications for Change: The Open Solution

LIVE Nov 12, 2009 02:00 PM ET

Forrester Consulting - Optimizing Users and Applications in a Mobile World
Learn how to successfully deploy a WAN optimization solution that is specifically tuned for a mobile environment!

Top to Bottom Performance Management Excellence at the City of Chicago
View now.

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?

Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!

The State of PCI DSS Compliance at Organizations Today
Download this resource today!

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

IDC Research Report: The Business Value of Consolidating on Energy-Efficient Servers
Download this Resource Now!

Strategies for Driving Down IT Support Costs with Lite ITIL Practices
View this now!

HP Technology Guide for Scalable Business Solutions
Download This Resource Now!

Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.

All White Papers | All Webcasts