Previous Year Question
In India, the term “Public Key Infrastructure” is used in the context of:
Digital security infrastructure
Food security infrastructure
Healthcare and education infrastructure
Telecommunication and transportation infrastructure
Correct Answer: A
Detailed Solution
Public Key Infrastructure—PKI is a framework used to secure digital communication and electronic transactions. It comprises technology, hardware, software, digital certificates, policies, procedures and trusted institutions.
PKI is primarily based on asymmetric cryptography. Under this system, every user or entity possesses two mathematically related keys:
Public Key: It can be shared publicly.
Private Key: It is kept secret and secure by its owner.
An operation involving a Public Key can generally be authenticated or completed only through its corresponding Private Key. In a digital-signature system, a signature created using the Private Key is verified using the corresponding Public Key.
A Digital Certificate binds the identity of a person, organisation or website to its Public Key. The certificate is issued by a trusted Certifying Authority—CA.
PKI fulfils the following digital-security objectives:
Authentication: Verifying the identity of a user or organisation.
Integrity: Ensuring that a message or document has not been altered.
Non-repudiation: Preventing a signatory from subsequently denying the digital signature.
Confidentiality: Preventing unauthorised persons from reading protected information.
In India, the Information Technology Act, 2000 provides legal recognition to electronic records and digital/electronic signatures. Under this framework, the Controller of Certifying Authorities—CCA licenses and regulates Certifying Authorities. The CCA also operates the trust chain associated with India’s Root Certifying Authority.
PKI is used in secure websites, digital signatures, e-governance, electronic documents, online tax processes, e-tendering and secure digital communication.