A complex solution for unified use of certificates across an organisation and centralisation of PKI (Public Key Infrastructure) services in a secure environment.

OBELISK Trust Services is “security middleware” with broad integration options. The solution is based on services for creation and verification of documents with electronic signature or seal including time stamp. The solution covers a wide range of standard formats including support for long-term formats of the extended electronic signature (AdES) pursuant to ETSI standards and the European eIDAS regulation.

WHAT PROCESSES CAN BE STREAMLINED?

Issue of trustworthy electronic documents

Receipt and processing of electronically signed documents

Protection and security of electronic documents

BASIC FUNCTIONS

Electronic signing and electronic signature verification including support for time stamps and extended electronic signatures (AdES)
Component for electronic signing at user workstations
Signature log for access to electronic signature

Support for encoding/decoding of data for business application environment through web services
Asynchronous queue for processing encryption services requirements
Proxy gateway for controlled access to time stamp service

PROPERTIES OF OBELISK Trust Services

Support for relational databases for audit and metadata administration purposes – Oracle, MS SQL Server, MySQL
Connections to external directory services as identity sources – LDAP, MS AD and use of various authentication mechanisms
Support for network HSM modules through PKCS#11 interface

Support for standard interfaces and protocols
Strict separation of roles assuring separation of infrastructure administration from the actual security mechanisms
Integration of services of trustworthy third parties (internal and external) – certification authorities, validation authorities, time stamp providers

PKI SERVICE INTEGRATION OPTIONS

Centralisation of PKI services is based on service-oriented architecture (SOA), with prerequisites for quick integration of this technology.
Thanks to it the individual applications, business processes and services using the public key infrastructure can share these services via standardised interfaces.