Trusted Electronic Signature using Hybrid Public Key Infrastructures

Pitchya Tangsombatvichit, Utharn Buranasaksee, Sittikorn Mangkala, Ekachai Naowanich

Abstract


Electronic signatures make electronic transactions to be legally valid. One of the electronic transactions for government agencies is the issuance of electronic certificates. An electronic certificate is a document issued by government agencies to individuals or legal entities to certify the transactions from that government agency. The advantage of choosing a PDF document is that the document format supports storing documents and electronic signatures in a single file. This makes the process of creating, verifying, and keeping documents simple. However, government agencies are required to purchase the certificates from a certificate authority. The existing method is that government agencies need to purchase digital certificates for every user. This method has a high annual cost. Therefore, this paper proposed a method for generating e-signatures for electronic certificates by combining the certificates from certificate authority which is based on the centralized public key infrastructure, and the certificates from blockchain protocol which is based on a decentralized public key infrastructure. The proposed method does not only reduce the cost of the certificates from a certificate authority, but the signing process for the users is also more convenient while the electronic certificate remains compatible with the existing software. 


Full Text:

PDF

References


Electronic Transactions Development Agency, “Electronic Transaction Act. (1) 2001.” https://ictlawcenter.etda.or.th/laws/detail/eta-act-2544 (accessed Oct. 01, 2021).

Electronic Transactions Development Agency, “Electronic Transaction Act. (2) 2008.” https://ictlawcenter.etda.or.th/laws/detail/eta-2-act-2551 (accessed Oct. 01, 2021).

Electronic Transactions Development Agency, “Electronic Transaction Act. (3) 2019.” https://ictlawcenter.etda.or.th/laws/detail/eta-3-act-2562 (accessed Oct. 01, 2021).

Electronic Transactions Development Agency, “Electronic Transaction Act. (4) 2019.” https://ictlawcenter.etda.or.th/laws/detail/eta-4-act-2562 (accessed Oct. 01, 2021).

Electronic Transactions Development Agency, “ETDA Recommendation on ICT Standard for Electronic Transactions: Electronic Certificate,” 2017.

PDF Association, “ISO 32000 (PDF) – PDF Association.” https://www.pdfa.org/resource/iso-32000-pdf/ (accessed Oct. 14, 2022).

Thailand National Root Certification Authority, “Thailand National Root Certification Authority.” https://www.nrca.go.th/ (accessed Oct. 02, 2021).

Fusion Solution Co.Ltd., “Design and Implement Digital E Signature Solution.” https://www.fusionsol.com/products/digital-signature-solution/ (accessed Oct. 02, 2021).

Creden Asia Co.Ltd., “Creden.co.” https://creden.co/ (accessed Oct. 02, 2021).

Buranasaksee U., Tangsombatvichit P., “Trusted Electronic Signature According to Thai Laws using UTXO Blockchain,” International Journal of Applied Computer Technology and Information Systems, vol. 11, pp. 26–31, 2021, Accessed: Oct. 14, 2022. [Online]. Available: http://203.158.98.12/actisjournal/index.php/IJACTIS/article/view/401

Electronic Transactions Development Agency, “ETDA Recommendation on ICT Standard for Electronic Transactions: Digital Identity - Identity Proofing Requirements,” 2021.

Electronic Transactions Development Agency, “ETDA Recommendation on ICT Standard for Electronic Transactions: Digital Identity - Authentication Requirements,” 2021.

Electronic Transactions Development Agency, “ETDA Recommendation on ICT Standard for Electronic Transactions: Electronic Signature Guideline,” 2020.

PDF Association, “ISO 19005 (PDF/A).” https://www.pdfa.org/resource/iso-19005-pdfa/ (accessed Oct. 14, 2022).

R. Perlman, “Overview of PKI trust models,” IEEE Netw, vol. 13, no. 6, pp. 38–43, Nov. 1999, doi: 10.1109/65.806987.

L. Axon and M. Goldsmith, “PB-PKI: A Privacy-aware Blockchain-based PKI,” 2017, doi: 10.5220/0006419203110318.

E. Karaarslan, E. A.-I. C. Standards, and undefined 2018, “Blockchain based DNS and PKI solutions,” ieeexplore.ieee.org, Accessed: Oct. 14, 2022. [Online]. Available: https://ieeexplore.ieee.org/abstract/document/8515149/

F. Li, Z. Liu, T. Li, H. Ju, H. Wang, and H. Zhou, “Privacy-aware PKI model with strong forward security,” International Journal of Intelligent Systems, 2020, doi: 10.1002/INT.22283.

L. Axon, “Privacy-awareness in blockchain-based PKI,” 2015.

K. Lewison and F. Corella, “Backing Rich Credentials with a Blockchain PKI *,” 2016, Accessed: Oct. 14, 2022. [Online]. Available: https://pomcor.com/blog/

A. Yakubov, W. Shbair, A. Wallbom, D. Sanda, and R. State, “A Blockchain-Based PKI Management Framework,” 2018, Accessed: Oct. 01, 2021. [Online]. Available: https://orbilu.uni.lu/handle/10993/35468

J. L. Ferrer-Gomila, M. Francisca Hinarejos, and A. P. Isern-Deyà, “A fair contract signing protocol with blockchain support,” Electron Commer Res Appl, vol. 36, p. 100869, Jul. 2019, doi: 10.1016/J.ELERAP.2019.100869.

L. Zhang, H. Zhang, J. Yu, and H. Xian, “Blockchain-based two-party fair contract signing scheme,” Inf Sci (N Y), vol. 535, pp. 142–155, Oct. 2020, doi: 10.1016/J.INS.2020.05.054.

M. Mut-Puigserver, M. Magdalena Payeras-Capella, and M. A. Cabot-Nadal, “Blockchain-based contract signing protocol for confidential contracts,” Proceedings of IEEE/ACS International Conference on Computer Systems and Applications, AICCSA, vol. 2019-November, Nov. 2019, doi: 10.1109/AICCSA47632.2019.9035363.

J. L. Ferrer-Gomila and M. F. Hinarejos, “A Multi-Party Contract Signing Solution Based on Blockchain,” Electronics 2021, Vol. 10, Page 1457, vol. 10, no. 12, p. 1457, Jun. 2021, doi: 10.3390/ELECTRONICS10121457.

Z. Wan, R. H. Deng, D. Kuo, and C. Lee, “Electronic Contract Signing without using Trusted Third Party,” Proc West Mark Ed Assoc Conf, vol. 9408, pp. 386–394, 2015, doi: 10.1007/978-3-319-25645-0.


Refbacks

  • There are currently no refbacks.