Национальная система электронных цифровых подписей

Title Тип Анотація
Signing policy description languag . Scheme and the facilities Стаття

The aim and functional filling of a signature policy is described. The OWL-scheme of its representationis presented and use of a signature policy on an example of the state tender purchases is shown.

Testbed for interoperability of digital signatures Стаття

The paper identified key building blocks of tests of CA Trustworthy system for construction testbed of interoperable NSES(National system for electronic signature). Verification block of compliance DSTU ETSI TS 101 862 demonstrated the basic principles of the test stand and its software implementation.

The role of signatures suites for qualified public key infrastructure Стаття

Article shows possible solutions of existing problems of interoperability based on signature suite GOST 34.311 + DSTU 4145 implementation, provide suggestions on profiling of GOST 34.311 + DSTU 4145 paramenters, as well as to integrate it into modern operation systems.

Crosscertification of Ukraine Стаття

Article deals withexisting ways of crosscertification of Ukrainewith the European Union, their technological and organizational requirements are analysed. Measures for achievement of internal interoperability in Ukraine for automatic possibility of crosscertificationwith the European Unionare offered.

Tools and methods for interoperability of national systems of digital signatures Автореферат


Melashchenko Andrii. Tools and methods for interoperability of national systems of digital signatures. - Manuscript

Thesis for Ph.D. degree in physics and mathematics by specialty 01.05.03 - Mathematical and software of computers and systems. - VM Glushkov Institute of Cybernetics of the National Academy of Sciences of Ukraine, Kiev, 2010.

Identified the main problems of interoperability of NSES through a comparison of it with a reference QPKI model. Proposed standard representation of the signing policy as a basic component of the business model of QPKI according to Directive 1999/93/EC. Proposed security profiles of signature suite GOST 34.311 + DSTU 4145 for interoperability of its implementation in cryptomodules. Implemented security profile for signature suite GOST 34.311 + DSTU 4145 as a crytomodule «UPGCryptoProviderBasic» which was implemented according to the Microsoft CryptoAPI specifications. Was proposed formal procedure of accreditation of CA, based on national standards of Ukraine, harmonized with the European. Developed and implemented the specification testbed for assessing the interoperability of implementations of the standard model QPKI on the basis of a formal accreditation procedure CA. Was proposed directions of development of public key infrastructure, based on the analysis of the homomorphic transform notation in the ASN.1-XSD-schema XML-document.