The application of 3rd party certification programme in Malaysia



3rd party certification programme is simply a means that will increase the confidence level of customers when surfing the web and this is especially important when they are making online transactions, in which they are required to reveal private and confidential information such as credit card particulars, personal details and etc.

With the increase in phishing (the crimal fradulant process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication) and spoofing attacks (a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining an illegitimate advantage) on the internet, people need to be sure that they are dealing with trusted parties when making online transactions each and every time. They need to ensure that their information reaches only to the intended recipients and is safe from intruders.

Application: Global Server ID (VeriSign)
Technically, Digital IDs, also known as digital certificates, bind the identity of your organization to a pair of electronic keys that can be used to encrypt and sign digital information. A Digital ID makes it possible to verify someone's claim that they have the right to use a given key, helping to prevent people from using phony keys to impersonate other users. Used in conjunction with encryption, Digital IDs provide a complete security solution, assuring the identity of one or all parties involved in a transaction. A Digital ID is issued by a trusted third party called a Certification Authority (CA) - in this case, VeriSign.
This 3rd party certificate programme is mainly used in the banking industry in Malaysia as well as online purchasing websites and transactions (paying bills, booking air tickets and accommodations and etc.).
Application: SSL Certificate (Msc TrustGate)
PKI for SSL service is available in both 40 bit and 128 bit certificate strengths. The primary difference between the two types of SSL Certificates is the strength of the SSL session that each enable in browsers. SSL strengths - 40-bit and 128-bit - refer to the length of the "session key" generated by every encrypted transaction. The longer the key, the more difficult it is to break the encryption code. 128-bit SSL encryption is the world's strongest: it would take a trillion-trillion years to crack using today's technology.
*Reference:
Retrieved on 22th June 2009,
https://digitalid.msctrustgate.com/global/globalserver/about/globalFAQ.htm
Retrieved on 22th June 2009,
http://www.wikipedia.org/

0 comments:

Post a Comment