Electronic signature is of fundamental importance for the development of the electronic economy and the information society. Using the Internet in communication between companies, individuals, and institutions significantly reduces business operating costs, accelerates and automates processes, and contributes to increasing the efficiency of economic activities. Electronic identification of communicating parties is a key issue. This need provided the impetus for creating legal and technological mechanisms that would allow for the creation of valid evidence of the parties’ declarations of intent in electronic commerce. The electronic signature meets these requirements through unambiguous identification of the parties, confidentiality of communication, and integrity of the transmitted data.
The electronic signature is based on asymmetric cryptography, which uses two pairs of keys – private and public. These keys are linked by a mathematical relationship. The public key is available to everyone, while the private key is known only and exclusively to the person to whom it has been assigned. Most often, the private key is protected by a PIN and placed on a microprocessor card. We sign data with the private key, and the public key is used to verify the correctness of the signature. Personal data, i.e., first name,
last name, and residential address are assigned to the public key, creating a certificate that is certified by authorized institutions called certification authorities. On August 16, 2001, the Act on Electronic Signature came into force, equating the legal effects of an electronically placed signature with the legal effects of a handwritten signature. The Act introduced technical and legal requirements for the use of electronic signatures. An important element of the Act is the definition of secure devices for protecting the private key. It was accepted that these requirements are best met by a microprocessor card, which is inserted into a microprocessor card reader connected to a computer. The private key is protected by a PIN and only the card owner has access to it.
The article comes from the magazine “e-Fakty” 5/2005.