 |
The Government of Albania has decided to grant the Public Key Infrastructure (PKI) with concession.
In the draft budget of Albania for this year, about 2 million dollars are planned for this project.
This service, which is currently provided by the National Agency of the Information Society, will be managed by a private company after the end of the tendering procedures, local media report.
This decision of the Government comes after the scandal of the publication of the salary database of more than 630 thousand employees in the private and state sector, as well as after the publication of the vehicle license plate database.
In the government's decision, it is determined only that the Ministry of Finance will be the contracting authority that will develop the procedures for awarding the concession/PPP of the project proposed by the National Agency of the Information Society "For the provision of public key infrastructure services".
With this project, it is envisaged that all the data of the entities that use public key technology will be entrusted to a private company. This service, i.e. the equipment with a public key, is an obligation for all businesses within the fiscalization process that started almost two years ago.
However, experts consider the inclusion of a private company in the data storage system or the contracting of a third party as a security threat, given the high level of security that must be guaranteed by the system.
What is Public Key Infrastructure (PKI)?
PKI is the community of all organizations, systems (hardware, software), personnel, processes, security policies and agreements, which enable the operation of technology with public keys for a certain number of users. Many organizations and governments have implemented various types of PKI systems.
An electronic signature based on PKI ensures security and integrity, while an encryption system based on PKI provides confidential assurance of operations involving sensitive data.
PKI uses public key cryptography, which provides a high level of security for the storage and transmission of information and data.