E-cert (Digital Certificate) 电子证书 (電子證書)

On the Internet, nobody knows you’re a dog. Extracted from http://scienceblogs.com/effectmeasure/internet_dog.jpg

What is it? An electronic file Considered as “electronic passport” CA (Certificate Authority) Issuing body in Hong Kong Hong Kong Post (香港邮政) HK$50/year

Digital Certificate file Electronic file with extension “p12” xxxxxx.p12 Consist of Private key Public key Signature of the Certificate Authority

Functions Authentication Encryption Decryption Verify the identity of someone Encryption Convert ordinary data into unreadable code Decryption Convert encrypted message to plaintext (the original message)

Other functions Digital Signature Prove the identity of the sender The document has not been modified after it is signed Non-repudiation Sender cannot deny that he/she signed the document

E-banking two-factor authentication In addition to account name and password

Problems of account name and password Bad passwords Birthday Name of wife/husband/pets Word from dictionary Etc. User wrote it down and stick it on the monitor User tells others Re-use passwords in different sites (with week security)

From Hongkong Post White memory stick Memory stick + card reader With your e-cert inside (done by Hong Kong Post) Two programs inside Hongkong Post smart card (not included this time) With your e-cert inside Password envelope Digital signature is as good as a signature on a paper (legally binding)

From Hang Seng Bank Green Bank Card Copy your e-cert to this card later

Look up someone’s public key Personal e-Cert www.hongkongpost.gov.hk/pc A electronic file with extension “cer” xxxxxx.cer

Liability Keep your password and Hong Kong post card in a safe place. Report to Hong Kong post if you lose your e-cert. Revoke the e-cert

Barriers to cashless society Individuals Need more training and education Organizations Need more technical support Need more training and education for their staff Need the infrastructure

Digital signatures Arguments with payments (between banks and Clients) Better protection for client Better protection for Banks / financial companies Solution for Micropayment Small amount of payment

Application with digital signatures Many organizations received fake certificates from job applicants. Difficult and time consuming to verify certificates Universities will issue certificate (a file) with digital signature (of the universities) to 0

Other applications Banks Government Others Two factor authentications Tax return (Inland Revenue Department) Renew license Others http://www.hongkongpost.gov.hk/product/ecert/usage/index.html

Green Computing Reduce consumptions of resources More environmental friendly Examples Less papers Less heat Reduce travelling Teleconference

Reengineering Rethinking or radical redesign of business process

Renew of car license (1st version) Submit documents in one counter Verify the documents A long queue Paid the Amount in another counter Distribute the new license in another counter Another long queue

problems At least two or three hours waiting time Overcrowded Everyone stayed there for several hours Air pollutions (people are allowed to smoke in the old days) Noisy environment

Renew of car license (2st version) Everything is done in one counter Verify the document Key in data Accept payment Print the new license Benefits Waiting time reduced 5 to 30 minutes

Renew of car license (3rd version) Scan documents Fill in the form online Provide credit card numbers Digitally signed the application (with e-cert) Submit everything with Internet New license will be sent by registered mail

Renew of car license (future version) Scan documents Fill in the form online Provide credit card numbers Digitally signed the application (with e-cert) Submit everything with Internet Electronic License will be sent to the applicant With the digital signature of the government With QR code? Applicant can print a hard copy (if necessary)

E-cheque consumer accesses the merchant’s server and select goods consumer sends electronic checks to the merchants. E-cert is used to encrypted and digitally sign the e-cheque. merchants verify the consumer’s electronic signature. merchants forward the e-cheque to the clearing house. The clearing house works with banks and transfer money’s to merchants’ account.

What are the benefits? Discuss in groups and present your answers