PKI solutions

Data and documents existing in electronic format can be protected using authentication, i.e. generating electronic signatures and timestamps. SDX product family is based on Public Key Infrastructure (PKI), a standard and widely popular technology of electronic signatures.

Public key infrastructure (PKI)

guarantees the identity of the signer (authenticity)
makes it impossible to deny the signature (non-repudiation)
makes it impossible to modify the document (integrity)
protects again unauthorized access using encryption (confidentiality)

PKI (Public Key Infrastructure) is a globally accepted system that uses asymmetric (i.e. public) encryption and digital verification to guarantee the authenticity of secure electronic documents (e.g. Internet services). PKI provides the technological basis for certified digital signatures. Currently, using the PKI system and smart cards together yields the highest security for electronic transactions. PKI represents physical ID verification (e.g. by an ID card), because it is published by an independent, reliable third party, and it is characteristic of its owner.

Its operation is based on a key pair. The private, secure key is owned by only the user, while the public key is available for everyone. Using the key pair together allows creating a digital signature and the verification of the authenticity of electronic documents.

Digital signatures in Hungary

In Hungary, by passing the „2001/XXXV Act on electronic signature” and by having established several local certification authorities, the conditions to use digital signatures in a large scale were realized. The SDX (Signed Document eXpert) product family, developed by E-Group is an application suite that works with all certificates issued by any of the local CAs (Certificate Authority), conforming to the Hungarian Act on digital signatures.

The SDX product family

The SDX product family provides management functions for authentic electronic documents and a solution for all tasks regarding electronic signatures:

on the document (.le) level
in messaging applications
in browser-based applications
in document management and archiving systems
and is capable of creating and verifying on-time and mass-produced digital signatures

Features of SDX

all of its components integrate with standard certificate authorities and timestamp authorities
it can be localized, i.e. it can be easily changed to meet the requirements of any legal and language environments
it is based on an Electronic Signature Policy (ESP): the ESP controls the application of electronic signatures in a given regulated organizational environment, and it regulates the generation and acceptation of electronic signatures
authenticity can also be checked using CRL or OCSP services