Electronic Digital Signature Research Articles

Верификация безопасности протокола электронной цифровой подписи с помощью AVISPA

Верификация безопасности протокола электронной цифровой подписи с помощью AVISPA

DOKUMENTŲ VALDYMAS UKRAINOJE: NUO POPIERINĖS LINK SKAITMENINĖS PRAKTIKOS ČERKASŲ REGIONO PAVYZDŽIU (anglų kalba)

The Ukrainian Research Institute of Archival Affairs and Records Keeping Solomíanska St., 24. Kyiv, 03110, Ukraine E-mail: Otamas@mail.ruAfter the formation of the independent state, the Ukrainian people’s interest in their own history and events of the past has significantly increased.. The shaping of national identity and preservation of historical collective memory plays an increasingly important role in these processes. This is to some extent true of the Cherkasy region which is one of the richest in Ukraine. Scientific research of historians and archival material which reflect the development of the workflow management systems in the society of the region is sufficient proof of this. Special role in the study of the region history is given to the State Archives of Cherkasy region, the leading experts of which during 1970-2013 period made a significant contribution to the implementation of recordkeeping standards and normative document regulation acts such as the Laws of Ukraine “On Electronic Documents and Electronic Document Management” and “On Electronic Digital Signature”, dated May 22th, 2003, etc. As document management traditions are being produced during the centuries, investigation of electronic records management is practically possible from its initial formation stage. On the one hand, the main task of the electronic records keeping, as a relatively new phenomenon, is to adopt the best principles of traditional document management; on the other hand, it is no less important to develop new approaches to recordkeeping management, taking into account the use of electronic documents. Therefore it is important, in our opinion, to consider the main problems that accompany the practices of electronic document management as the investigated object, taking the example of Cherkasy region.

DOKUMENTŲ VALDYMAS UKRAINOJE: NUO POPIERINĖS LINK SKAITMENINĖS PRAKTIKOS ČERKASŲ REGIONO PAVYZDŽIU (anglų kalba)

The Ukrainian Research Institute of Archival Affairs and Records Keeping Solomianska St., 24. Kyiv, 03110, Ukraine E-mail: Otamas@mail.ru After the formation of the independent state, the Ukrainian people’s interest in their own history and events of the past has significantly increased.. The shaping of national identity and preservation of historical collective memory plays an increasingly important role in these processes. This is to some extent true of the Cherkasy region which is one of the richest in Ukraine. Scientific research of historians and archival material which reflect the development of the workflow management systems in the society of the region is sufficient proof of this. Special role in the study of the region history is given to the State Archives of Cherkasy region, the leading experts of which during 1970-2013 period made a significant contribution to the implementation of recordkeeping standards and normative document regulation acts such as the Laws of Ukraine “On Electronic Documents and Electronic Document Management” and “On Electronic Digital Signature”, dated May 22th, 2003, etc. As document management traditions are being produced during the centuries, investigation of electronic records management is practically possible from its initial formation stage. On the one hand, the main task of the electronic records keeping, as a relatively new phenomenon, is to adopt the best principles of traditional document management; on the other hand, it is no less important to develop new approaches to recordkeeping management, taking into account the use of electronic documents. Therefore it is important, in our opinion, to consider the main problems that accompany the practices of electronic document management as the investigated object, taking the example of Cherkasy region.

The method of the internet authorization for the protection of shareware programs

The possibility of providing users with a shareware version of the program is promising for software developers. In this case, the user may use a fully working version for a limited period, or only part of the program functions, but without time limitation. However, this possibility is often a weak point in the software protection. There are many cases of unauthorized use of shareware programs.The authors have developed a software protection protocol, including shareware programs, which is based on using the electronic digital signature mechanism.In developing the program, its paid features are placed in a separate dynamic-link library DLL. The original file of the library is stored only on a remote server and is not distributed with the program upon its purchase. The file is loaded into the program memory at the time of its launch by the authorization over the Internet.Description of the protocol of data transfer between the program and the remote server, as well as the method of the paid functional protection in the software, is given in the paper. In addition, the software implementation of the protocol was executed and, on its basis, the computer program protection module was developed.This method in contrast to the existing allows a developer easily distribute software through the Internet without the worry about the possible appearance of illegal copies. Developer has the opportunity to monitor the process of using the licenses provided, reveal offenses and block licenses. The server part allows to "follow" the user's actions such as starting a program, creating a new document, using the data handler, generating a report, etc. and block the program in case of unauthorized use. Providing licenses over the Internet allows the user quickly renew the license or replace one license with another.

The use of electronic digital signatures in banking relationships in the Russian Federation

Olga I. Kudryavtseva provides an outline of banking relationships in the Russian Federation, and considered two cases relating to the misuse of electronic digital signature.

Secure Messaging Implementation in OpenSC

Smartcards are used for a rapidly increasing number of applications including electronic identity, driving licenses, physical access, health care, digital signature, and electronic payments. The use of a specific smartcard in a environment generally provides a high level of security. In a closed environment no other smartcards are employed and the card use is restricted to the smartcard's own firmware, approved software applications, and approved card reader. However, the same level of security cannot be claimed for open environments where smartcards from different manufacturers might interact with various smartcard applications. The reason is that despite a number of existing standards and certification protocols like Common Criteria and CWA 14169, secure and convenient smartcard interoperability has remained a challenge. Ideally, just one middleware would handle the interactions between various software applications and different smartcards securely and seamlessly. In our ongoing research we investigate the underlying interoperability and security problems specifically for digital signature processes. An important part of such a middleware is a set of utilities and libraries that support cryptographic applications including authentication and digital signatures for a significant number of smartcards. The open-source project OpenSC provides such utilities and libraries. Here we identify some security lacks of OpenSC used as such a middleware. By implementing a secure messaging function in OpenSC 0.12.0 that protects the PIN and data exchange between the SC and the middleware, we address one important security weakness. This enables the integration of digital signature functionality into the OpenSC environment.

Interoperability of the national system of electronic digital signatures

The reasons of the absence of interoperability of the National system of electronic digital signatures (EDS) are analyzed based on systems analysis. An attempt is made to substantiate the minimax (minimum costs and maximum results) way of solving interoperability problems in EDS infrastructure in both Ukraine and foreign states.

New Begining of Cyberlaw in India

Justice KG Balakrishnan, Chief Justice of India, who inaugurated the CRAT court room, said the increase of computers pose question for legal system. Union Law Minister of India Dr. M Veerappa Moily has opined that he would like to see more Acts to deal with the increasing volume and variety of cybercrimes. In December 2009, Government amended IT Act 2000, which was mainly intended to give legal recognition to e-commerce, including electronic filing of documents. It is only chapter 11 of the said Act that covers a few offences relating to use and abuse of computer system which invites penalty of fine or imprisonment or both. While other developed states for e.g. USA has several Acts including the Computer Fraud and Abuse Act, Computer Misuse Act, Electronic Fund Transfer Act and Child Online Protection Act. We require well defined laws to deal with the fast emerging issues of cyber crimes in future. Present Indian Penal Codes are quite helpful in tackling IT related offences, but that may not be enough, Information Technology Act 2000 of India addresses some basic aspects such as legal recognition of electronic cards and digital signature for the purpose of entering in to contract. There are grey areas in forming contract in cyberspace. We are still trying to apply the Indian Contract Act 1872 in the contract entered through Internet. Of course there are some provisions in IT Act 2000, but those are not sufficient to deal with cyber contracts. Justice Rajesh Tandon the would be presiding officer of CRAT ( first cyber court room ) in India very rightly expressed concern to organize an international conference for the enforcement of cyber laws as most of the cyber crimes originate outside the country. Probably the next world war would be fought in cyber space. Cyber terrorist and Mafias are emerging, whose activities are growing to threaten the sovereignty of India and the world over. Terrorists often take over us in the cyber space, which is a product of technical innovation. This we can only prevent by putting proper regulation everywhere. An appellate tribunal at national level and cyber courts in various states will also be established soon. This is really a great initiative of the Govt. which will pave the way for fast growth of cyberlaw in India.

Algorithms of information authentication for the automatic control systems on the basis of structures in finite vector spaces

New algebraic structures differing from the existing ones in new kinds of operations over finite sets of m-dimensional vectors (m ? 2) with discrete components were developed to construct information authentication algorithms for the automatic control systems. The operation of vector multiplication including multiplication and summation of the coordinates of the multiplied vectors modulo simple number p was defined. Depending on the structure of module p, dimensionality m, and value of the "extension" coefficients defined in terms of the rules of multiplication of the base vectors, the vector spaces were shown to include high-order finite groups or be extended fields that can be efficiently used to construct effective algorithms of electronic digital signature.

AN EMPIRICAL SURVEY OF THE UK CONSTRUCTION SMEs' E-PROCUREMENT READINESS FROM THE E-LEGAL ASPECTS

Empirical evidence shows that e-commerce activities such as electronic transactions, project monitoring and tracking have all been successfully implemented in the banking, retail and manufacturing sectors. However, the benefits in the construction industry remain relatively new and have yet to be fully harnessed, particularly in small to medium-sized (SME) construction firms. Currently the construction industry has little knowledge and expertise of how to deal with the legal aspects of e-procurement when trading on-line. Recognising this, the research aims to explore the current state of knowledge and the differences in opinion held by SME contractors with regard to the legal issues about formation of a legal contract when trading on-line. The discussion will focus on the acceptance (or otherwise) of electronic mail, digital signatures and EDI for use in construction e-procurement, compared to the conventional (paper-based) methods in construction contracting environments. Results from the UK SMEs survey ...

Fair exchange in E-commerce

Many business transactions over the Internet involve the exchange of digital products between two parties - electronic mails, digital audio and video, electronic contract signing and digital signatures, to name a few. Often these transactions occur between players that do not trust each other. To facilitate such transactions, a number of secure protocols have been proposed. The main objective of these protocols is: either both the parties obtain each other's items or none do. Sometimes it is not possible to meet the above objective and researchers have aimed for a weaker objective: gather evidence during protocol execution using which an honest party can prove his case. Protocols which meet any of the two objectives are collectively termed fair exchange protocols. In this paper we review some of the work done on such fair exchange protocols and identify areas that still need to be addressed.

Вплив цифрових технологій на трудове право: виклики та завдання

У статті досліджено вплив цифрових технологій на трудове право. Глобальні процеси інформатизації визначають специфіку сучасної праці, нових форм її організації і соціально-трудових відносин. Гнучка зайнятість, формування електронної самозайнятості характеризують сучасний ринок праці, на якому інтелектуальна праця визнається основною. У сучасному світі зростає роль інтерактивних платформ, за допомогою яких реалізується онлайн-зайнятість. До найбільш затребуваних цифрових інструментів онлайн-зайнятості належать Uber, Lyft, TaskRabbit, UpWork і Amazon Mechanical Turk. Зазначено, що електронний трудовий договір – це договір, укладений між роботодавцем і дистанційним співробітником не в паперовому, а в електронному вигляді з використанням електронного підпису. Передбачається, що в майбутньому будь-яка людина зможе зайти через портал держпослуг і заповнити трудовий договір. Те саме має зробити і роботодавець. У такому разі достатньо буде заповнити відповідні поля й поставити позначки в потрібному місці. Після завершення процесу документ набуде законної сили. Для цього не потрібен буде електронно-цифровий підпис. Важливо також зауважити, що електронний договір матиме безумовну юридичну силу. Його обов’язковість не можна буде оскаржити в суді. Але покладаючи на працівників обов’язок застосовувати електронний підпис, законодавство має надати їм право отримати (якщо є бажання) завірені копії документів і на паперовому носії.

Публічне адміністрування землеустрою в Україні: проблеми та шляхи їх вирішення

Досліджуються проблеми публічного адміністрування землеустрою в Україні та надаються шляхи їх вирішення. Зроблено порівняльно-правовий аналіз землеустрою з використанням міжнародного досвіду. Запропоновано нову інноваційну модель механізму публічного адміністрування землеустрою та програму розвитку й використання, охорони земельних ресурсів. Організаційно-правовий механізм публічного управління в сфері землеустрою в Україні не є ефективним повною мірою, недостатньо вивченим та потребує удосконалення. Запропоновано удосконалення зазначеного механізму.