 |
|
| Middleware | Identity Management | Directory Service | Authentication | Authorization | Digital IDs | |
|
Enabling High Security
At Any Time, Only You MUST be Able to Access Your Private KeyYour digital signature is your legal signature. You are totally and legally responsible for its use. Additional information regarding legal and password issues associated with your private key are contained in Prerequisites to Obtaining a Digital ID.Preventing Access by Others to Your Private KeysYour private/public key set is password protected within a Personal Security Environment (PSE) - sometimes called a key store. The PSE is contained in your personal computer(s) and/or within smart card(s). This key store can only be accessed by a password that must be known only to you.Security alert: Depending on how your browser and E-mail client are configured, it is possible to inadvertently leave your personal security environment open for use while your computer system is unattended! That is why you must make sure you export the private key off your computer, or at the very least, keep your computer and your office door locked so that no one else has access to your computer. Also, please note that the backup copy of your digital ID must be secured with the same vigilance as your key store:
Security Alert: No one should have access to this backup except you! Therefore, your backup should never be kept on a shared network drive or even your own personal PC! Use a floppy disk or CD and keep this in a secure physical location for maximum security!
Securing Your Personal Security EnvironmentsOffice of Academic Computing Copyright © 2003 The University of Texas Health Science Center at Houston |
|