AeroTrust Digital Certification Service

Secure communications and servers with encryption to provide a tamper-proof exchange

WebTrustAeroTrust is a turnkey solution that allows you to provision your users, servers and application code with certificates to prove identity and secure exchange of information. The certificates allow your users to securely access confidential information stores, exchange sensitive information over e-mail, access corporate networks onsite or remotely, and single sign-on to networks and applications.

Overview

Digital certificates can be used in place of username and passwords to prevent unauthorized access to the resources of a document, programs, IT processes and systems, or even physical access to secure areas.

AeroTrust digital certificates offer: 

  • A dedicated certificate authority for the air transport industry
  • Security policies in strict compliance with Public Key Infrastructure (PKI) and industry standards
  • Local registration authority who carries out administrative tasks required to assure the identity of person issued the highest level of certificate
  • The benefits of digital certificates without the cost of building your own certificate authority

The Certification Authority (CA) is the heart of AeroTrust. The CA is where SITA acts as a trusted third party - a neutral broker between companies participating in any transaction. To fulfill this role, SITA regularly has our policies, procedures and implementation methods assessed by external auditors.

Benefits

AeroTrust benefits include

  • 24x7 operational facilities and extensive support procedures
  • Reduced costs - no need to build your own certificate authority
  • Strict security policies keep data safe

Features

AeroTrust uses digital certificates in lieu of usernames and passwords to prevent unauthorized access to restricted resources, documents, programs, IT processes and systems - even physical access to secure areas.

AeroTrust Digital Certification Service provides:

  • A dedicated certificate authority for the air transport industry
  • Security policies in strict compliance with Public Key Infrastructure (PKI) and industry standards
  • Local registration authority that implements administrative tasks necessary to assure the identity of anyone issued the highest level of certificate
  • Real-time certificate status updates
  • The ability to quickly remove access for former employees and partners
  • 100% redundant infrastructure
  • Hardware tokens to store the highest level of certificates
  • The benefits of digital certificates without the cost of building your own certificate authority

Certificates

Gold certificates

Gold certificates offer the highest level of protection. They are appropriate for securing very high-value items. They are also required by an organization to self-administer Silver certificates.

SITA's registration process for Gold certificates involves a face-to-face meeting and official documentation. The registration is carried out by security-cleared, highly trained SITA personnel.

Silver certificates

Silver certificates are economical, self-service certificates that enable you to manage and maintain your certificate usage. They offer self-assurance, suspension and revocation via a simple Web-based interfaced.

Versions of Silver certificates are available for individuals or servers. They are typically issued, managed, revoked and renewed by the your Gold-certificate holding administrators.

Typical uses for AeroTrust certificates

Digital certificates are flexible for many practical uses but tend to fall into three main categories:

  1. To prove identity
    Digital certificates are a vital part of many Internet protocols where one or both parties' identities need to be established before sensitive data is exchanged.
  2. In lieu of usernames and passwords
    Digital certificates provide the same level of protection as usernames and passwords without the hassle.
  3. To sign documents or data
    A digital signature can be used for legally binding documents and contracts.

CertiPath

CertiPath is a joint venture between SITA, ARINC and Exostar to create the first PKI-based bridging mechanism for the aerospace and defence industry and makes personal identity verification possible across the industry. It helps enable the transfer of secured and authenticated information between subscribing users, including companies, their partners and government agencies worldwide.


SITA Gold certificates are cross-certified with the CertiPath medium Commercial Best Practice (CBP) policy.

Listen to article

Please, rate this page: