Manual de Bit4id per a Windows

11. Glossary

Certification Authority: it is the trusted entity, responsible for issuing and revoking the electronic certificates used in the electronic signature. The Certification Authority, by itself or through the intervention of a Registration Authority, verifies the identity of the applicant for a certificate before it is issued or, in the case of certificates issued with the condition of being revoked, removes the revocation of certificates when verifying this identity.

Expiration of the digital certificate: the digital certificate has a period of validity that is stated in the certificate itself. It is generally 2 years, although by law a validity of up to 5 years is allowed. Once the certificate has expired, you will not be able to use the services offered by the Administration that require an electronic signature, and any electronic signature made after that time will not be valid.

Digital certificate: document in computer support issued and signed by the Certification Authority, which guarantees the identity of the owner.

Recognized certificate: certificate issued by a Certification Service Provider that meets the requirements established in the Law regarding the verification of the identity and other circumstances of the applicants and the reliability and guarantees of the certification services they provide, in accordance with the provisions of Chapter II of Title II of Law 59/2003, of December 19, on electronic signatures.

Electronic signature: set of data, in electronic form, attached to other electronic data or functionally associated with them, used as a means to formally identify the author or authors of the document that collects it. There are 3 types of electronic signature: simple, advanced and recognized electronic signature.

Simple electronic signature: set of data, in electronic form, annexed to other data.

Advanced electronic signature: an electronic signature that allows the signer to be identified and any subsequent changes to the signed data to be detected, that is uniquely linked to the signer and the data it refers to, and that has been created by means that the signer can maintain under its exclusive control.

Recognized electronic signature: An advanced electronic signature based on a recognized certificate and generated using a secure signature creation device is considered a recognized electronic signature. The recognized electronic signature will have the same value with respect to the data entered in electronic form as the handwritten signature in relation to those entered on paper.

Hash function: is an operation that is performed on a data set of any size, so that the result obtained is another data set of fixed size, regardless of the original size, and that has the property of being uniquely associated with the data initials, that is, it is impossible to find two different messages that generate the same result when applying the hash function.

Hash or fingerprint: A fixed-size result obtained after applying a hash function to a message that satisfies the property of being uniquely associated with the initial data.

Integrity: integrity is the quality of a document or file that has not been altered and that also allows you to verify that no manipulation has occurred in the original document.

Certificate Revocation Lists or Lists of Revoked Certificates: the list that contains exclusively the relations of revoked or suspended certificates (not the expired ones).

Do not repudiate: the sender who electronically signs a document cannot deny that he sent the original message, since it is imputable to the sender by means of the private key that only he knows and that he is obliged to keep. Non-repudiation also allows you to check who participated in a transaction.

Non-repudiation or non-repudiation is a security service that is closely related to authentication and that allows to prove the participation of the parties in a communication. The essential difference with authentication is that the former occurs between the parties establishing the communication and the non-repudiation service occurs in front of a third party

Certification Service Provider or PSC: natural or legal person that issues electronic certificates or provides other services in relation to the electronic signature. See Certification Authority.

PIN: sequence of characters that allow access to certificates. Personal Identification Number, sometimes called NIP.

PUK: sequence of characters that allow changing or unlocking the PIN. Personal Unlocking Key.

Renewal: Renewal is applying for a new certificate using a certificate that is valid but is about to expire. In this way, before the expiry of a certificate you can apply for renewal and this means that a new valid certificate is issued.

Revocation: definitive cancellation of a digital certificate at the request of the subscriber, or at the Certification Authority's own initiative in case of doubt about the security of the keys. Revocation is an irreversible state. You can request the revocation of a certificate after a suspension situation or at the will of the persons authorized to request it. Likewise, in the case of a suspended certificate, if the maximum suspension period has passed, if the certificate has not been enabled, it becomes definitively revoked. When the certification body revokes or suspends a certificate, it must state this in the Certificate Revocation Lists (CRL), to make this fact public. These lists are public and must always be available.

Smart card (smartcard): q any card with integrated circuits that allow the execution of certain programmed logic.