21 Code For Federal Regulation Parts 1305, 1311 Page 6

ADVERTISEMENT

Certification Authority (CA). The coordinators will collect applications, ensure that they
include all of the required information, and send them to the CA. Part 1311 also specifies the
requirements that the digital signature software will have to meet to ensure that it is capable of
creating and validating digitally signed orders.
Procedures for Obtaining a Digital certificate
Procedures for enrolling to obtain a digital certificate are available on the DEA Diversion
Control Program web site, , and on the DEA E-Commerce
web site at Applicants can download the Diversion PKI CSOS
Enrollment document and the CSOS Subscriber’s Manual for guidance on enrollment
procedures. DEA will begin accepting applications to obtain digital certificates [Insert date 60
days from date of publication in the Federal Register]. Upon receiving a completed application
DEA estimates that it will take the Certification Authority 10 business days to process the
application. DEA’s Certification Authority will maintain a support line to assist applicants and
subscribers with issues pertaining to certificate enrollment, issuance, revocation, and renewal.
PKI and Digital Certificates
A public key infrastructure is comprised of a Certification Authority, which must verify
the identity of applicants before issuing digital certificates, and public-private key pairs. PKI
systems are based on asymmetric cryptography: the holder of the digital certificate has a private
key, which only the certificate holder can access, and a public key, which is available to anyone.
What one key encrypts, only the other key can decrypt. It is computationally infeasible for the
two keys to be derived from each other. Only one public key will validate signatures made using
its corresponding private key. Because the private key is held by only one person, it is that
person’s responsibility to ensure that it is not divulged or compromised.
6

ADVERTISEMENT

00 votes

Related Articles

Related forms

Related Categories

Parent category: Legal