Digital signature experiences in the Defense Information Technology Company
Keywords:
actions, training, ignorance, digital signature, securityAbstract
In this research, the use of the digital signature is explored, which constitutes a technological solution that uses mathematical techniques to validate the authenticity and integrity of a message, software or digital document. It is still a new technology for the country, although in recent years its use has grown, especially in the economy and government sector. However, despite the boom it has had, a culture must be created around the subject. There is ignorance on the part of the users, of its use, the security it provides and the importance it represents to guarantee the validity of a digital document. In the work, the digital signature management process was characterized, taking as an example the Cryptographic Certification Services Provider of the company XETID. Interviews were conducted with managers and experts on the subject; and surveys of users who request the digital certificate issuance service, obtaining certain elements that will help improve the service and promote the culture of digital signatures in the country. To promote the use of this technology, it is necessary to draw up actions that encourage its use and highlight its importance to guarantee the security of the information that is shared on digital platforms.
References
Antón Rodriguez, S. (2023, enero 31). Firma digital, más que un garabato escaneado. Granma - Órgano oficial del PCC. https://www.granma.cu/doble-click/2023-01-31/firma-digital-mas-que-un-garabato-escaneado-31-01-2023-20-01-53
Consejo de Ministros (2019). Decreto N° 360 [Sobre la seguridad de las tecnologías de la información y la comunicación y la defensa del ciberespacio nacional]. https://www.mincom.gob.cu/sites/default/files/marcoregulatorio/d_360-2019_seguridad_tic_y_ciberespacio_nacional.pdf
Feghhi, J., Williams, P., & Feghhi, J. (1999). Digital Certificates: Applied internet security. Addison-Wesley.
Fritscher, M. (1999). Towards A Unique World-wide Digital Certificate. AMCIS 1999 Proceedings. https://aisel.aisnet.org/amcis1999/150
Minint (2016, septiembre 1). Resolución 2 de 2016 de Ministerio del Interior [Text]. Gaceta Oficial. https://www.gacetaoficial.gob.cu/es/resolucion-2-de-2016-de-ministerio-del-interior
Minjus (2019, septiembre 15). Decreto-Ley 370 de 2018 [Sobre la Informatización de la Sociedad en Cuba. GOC-2019-547-O45]. Gaceta Oficial. https://www.gacetaoficial.gob.cu/es/decreto-ley-370-de-2018-de-consejo-de-estado
Minjus (2022, noviembre 10). Resolución 23 de 2022 [Reglas generales para el establecimiento y empleo de los servicios de firma digital de documentos electrónicos basados en dispositivos y técnicas criptográficas. GOC-2022-1034-EX70]. Gaceta Oficial. https://www.gacetaoficial.gob.cu/sites/default/files/goc-2022-ex70_0.pdf
Rao, N., Srivastava, S., & K. S., S. (2017). PKI Deployment Challenges and Recommendations for ICS Networks. International Journal of Information Security and Privacy (IJISP), 11(2): 38-48. https://doi.org/10.4018/IJISP.2017040104
Sensuse, D. I., Syahrizal, A., Aditya, F., & Nazri, M. (2020). Information Security Risk Management Planning of Digital Certificate Management Case Study: Balai Sertifikasi Elektronik. 2020 Fifth International Conference on Informatics and Computing (ICIC), 1-7. https://doi.org/10.1109/ICIC50835.2020.9288593
XETID (s. f.). Prestador de Servicios de Certificación ACXETID. Recuperado 9 de abril de 2023, de https://certificados.xetid.cu/externalra-gui/descarga.xhtml
XETID (2020, junio 5). Declaración de Prácticas de certificación de la ACXETID. Prestador de Servicios de Certificación ACXETID. https://certificados.xetid.cu/externalra-gui/documentos/Declaracion_de_Practicas_Certificacion_de_la_ACXETID.pdf
XETID (2022). Contrato General de Certificación entre XETID y otras entidades. https://certificados.xetid.cu/externalra-gui/documentos/Contrato_del_PSC_General.pdf
Published
How to Cite
Issue
Section
License
Copyright (c) 2024 Jessica Ruiz Hernández
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.