Complete PKI Solution
A reliable and scalable solution for securing digital data, documents, and transactions.
Public Key Infrastructure Technology (PKI)
PKI Standards
PKI technology can be implemented according to different technical standards, most commonly X509 PKI and ICAO PKI. X509 PKI is used to protect data in public and private systems, while ICAO PKI focuses on identity documents, particularly Machine Readable Travel Documents (MRTDs). Both standards play a critical role in enabling secure digital identities and building trust in electronic communications and transactions.
PKIStar Platform
Veridos Netset PKIStar provides a comprehensive set of services for online authentication, digital signature creation and secure document protection. The platform supports the issuance and management of X509 digital certificates, aligned with European (eIDAS) and local regulations governing electronic documents and digital signatures. Sensitive cryptographic elements are securely stored in Hardware Security Modules (HSMs), with support for integration with various HSM types.
PKI technology can be implemented according to different technical standards, most commonly X509 PKI and ICAO PKI. X509 PKI is used to protect data in public and private systems, while ICAO PKI focuses on identity documents, particularly Machine Readable Travel Documents (MRTDs). Both standards play a critical role in enabling secure digital identities and building trust in electronic communications and transactions.
Veridos Netset PKIStar provides a comprehensive set of services for online authentication, digital signature creation and secure document protection. The platform supports the issuance and management of X509 digital certificates, aligned with European (eIDAS) and local regulations governing electronic documents and digital signatures. Sensitive cryptographic elements are securely stored in Hardware Security Modules (HSMs), with support for integration with various HSM types.
Qualified X509 Digital Certificates on Smart Cards
PKIStar enables the management of digital certificates and asymmetric cryptographic keys stored on smart cards. The platform supports the following processes for issuing and using electronic certificates:
- Registration of new clients and creation of Certificate Signing Requests (CSRs)
- Netset’s Certificate Authority (StarFish)
- Optical and electronic personalization of smart cards
- Netset X509 applet suite and middleware (Windows, Linux, macOS)
- Printing user PINs in closed envelopes
- Certificate issuance and PIN unblocking procedures
Cloud ID
Digital Signatures in the Cloud
Cloud ID enables the digital signing, exchange, verification and archiving of documents, including contracts, invoices and authorizations, while preserving their legal standing. The platform operates through a private cloud under the control of the certificate-issuing institution, with users’ cryptographic keys securely stored in Hardware Security Modules (HSMs) instead of smart cards. This enables remote digital signatures and reduces the need for printing, manual signing and physical document transport.
Electronic Personalization and Applets
ICAO PKI Suite
Veridos Netset's ICAO PKI Suite is a comprehensive set of components for implementing secure access to sensitive chip data on electronic ID documents. Fully compliant with ICAO and BSI EAC specifications, it supports BAC, SAC, and EAC protocols.
Core Components:
- CSCA - Country Signing Certificate Authority
- DS - Document Signer
- CVCA - Country Verifying Certificate Authority
- DV / DVCA - Document Verifier
- IS System - Inspection System with Card HSM
- TCC - Terminal Control Center
- SPOC - Single Point of Contact for certificate exchange
- nPKD - National Public Key Directory
Applets & Middlewares
Veridos Netset started using smart card technology more than two decades ago, primarily to protect electronic identification documents. Since then, our team has developed several generations of JavaCard applets and middleware components for use in a variety of government and business secure information systems.
The most common JavaCard applets and middleware components are:
- Citizen eIDentification and QES Applet
- ICAO EAC/SAC ePassport Applet
- Vehicle Registration License Applet
- Employee ID Applet
- eHealth Insurance Applet
- Public Servant eID Applet
- Weapon Certificate Applet
- Weapon Carrying License Applet
- Military eID Applet
- CAST (Authentication and Signature) Applet
To smoothly integrate applets in PKI applications, Veridos Netset developed the Trust Edge middleware package. Trust Edge contains support for regular cryptographic functions according to PKCS standards and is implemented as Microsoft CSP (Crypto Service Provider) and PKCS # 11 cryptographic middleware.
Proven Javacard Technology
Veridos Netset offers a portfolio of 10+ JavaCard applets, several of which have been in use for over 15 years and have experienced several generations. The two applets used to implement the eHealth Insurance Card are ROM- coded in collaboration with NXP Semiconductors.
