Ethiopia Launches National Public Key Infrastructure

Ethiopian Prime Minister Abiy Ahmed has inaugurated the country’s first Public Key Infrastructure (PKI) at the Information Network Security Agency (INSA) headquarters, marking a significant step in strengthening its digital security.

PKI provides a system of hardware, software, policies, and procedures to regulate the issuance of digital certificates and enable secure communication. This infrastructure can play a critical role in ensuring the security of online services, including banking, email, VPNs, and software distribution, by encrypting data so that only authorized recipients can access it.

The launch of the PKI comes as part of Ethiopia’s efforts to build a trustworthy digital ecosystem, with INSA designated as the sole recognized root certificate authority under the country’s six-year-old Electronic Signature Proclamation.

The proclamation requires the use of an asymmetric cryptosystem to ensure secure electronic signatures and prohibits private entities from issuing certificates. INSA will oversee the issuance and monitoring of digital certificates, which are essential for protecting sensitive data and ensuring secure communications.

Despite the advantages, PKI systems are not without vulnerabilities, such as the risk of rogue certificates and potential “backdating” issues, among others.

FaceTec’s Jay Meier has spoken at length about what he calls “The PKI Fallacy”, which refers to the mistaken belief that authenticating a device automatically means the device user or holder is also identified. Meier stresses that, while ensuring the integrity of a connection between devices is important, it’s equally crucial to verify that the correct individual is using the device before granting access.

Ethiopia has been building out its digital ecosystem for some time now. It was reported earlier this summer that its National ID Program had surpassed 7 million registrations, marking significant progress in its goal to enroll over 90 million citizens, and positioning it as one of the largest digital ID systems globally.

The initiative, centered around the principle of “one person, one ID,” involves capturing both demographic and biometric data to assign a unique ID number to each individual. This system aims to enhance efficiency in various sectors, including tax administration. In collaboration with the National Bank of Ethiopia, the digital ID is also being integrated into the financial sector as a “primary Bank ID” and used for electronic Know Your Customer (eKYC) processes to streamline service delivery and enable secure digital transactions.

Source: Shega

–

September 6, 2024 – by Tony Bitzionis