Public Key Infrastructure (PKI) of ANF AC

RECOGNIZED REGISTRATION AUTHORITY

International Network of Public e-Administration Official Offices

ANF AC officially accredits as recognized Registration Authority (AR) to professional offices, business organizations, and public institutions.

These offices have the ability to process all kinds of electronic certificates and provide Enabled PKI solutions and products. Its management is remunerated according to official rates.

The AR of ANF AC has an international projection as Public e-Administration Official Offices. ANF AC promotes its activity through web services Map Network AR and App for SmartPhones Network AR.

 
 

Legal framework

Regulation (EU) 910/2014 of the European Parliament and of the Council, of July 23rd, 2014, on electronic identification and trust services for electronic transactions in the internal market (eIDAS Regulation).

“Article 24 Requirements for qualified trust service providers 2.b) employ staff and, if applicable, subcontractors who possess the necessary expertise, reliability, experience, and qualifications and who have received appropriate training regarding security and personal data protection rules and shall apply administrative and management procedures which correspond to European or international standards;;”

Law 59/2003, of December 19, on Electronic Signature

“Article 13 Verification of the identity and other personal circumstances of the applicants of a recognized certificate.

1. The identification natural person requesting a recognized certificate will require their personalization before those in charge of verifying it… ”

The Registration Authorities (also known as Public e-Administration Official Offices), for the performance of their functions use natural persons who have completed the training course of “Operator AR” of ANF AC, and have passed the training tests as "AR Operator", this is a mandatory requirement for the performance of these functions.

AR Operators are trained to determine the suitability of applicants to the types of certificates they request. Their responsibility is to process applications for electronic certificates and other services. Basically:

  • Applicant Identification,
  • Authentication of the original and current documents provided,
  • Processing of certificates, and
  • Information on the obligations and rights of the subscribers.


ANF AC provides the Registration Authorities with specific equipment called AR Manager, which allows them to perform their functions according to the requirements established within their infrastructure or PKI.

ANF AC has initiated a technological renewal plan that includes the incorporation of new identification instruments, specifically:

  • Applicant image capture.
  • Capture of the applicant's fingerprints.
  • e-DNI reader that incorporates authenticity validator.


The final assessment related to the sufficiency of the verification carried out by the ARR, as well as of the documents provided, will always be the responsibility of the Head of Emission Opinions ANF AC.

English