The duration of the EDS is limited. And periodically they have to be renewed. How can I do that? Where should I go? Why do they have a very limited time for relevance? What are the benefits of this state of affairs? Read about this and more in this article.
general information
E-workflow is becoming increasingly important. But how to make sure that someone accidentally or with malicious intent did not edit the file so that a critical error crept in it? And the answer was found - digital signature! This toolkit allows you to provide a high level of protection against interference and increase personal responsibility.
But, as often happens, all good is limited. An electronic digital signature was no exception. The duration of an EDS is usually limited to a year or two. It all depends on the person’s choice. Why is this so? How can I extend my life? What needs to be done when it expires? We will now find the answer to these questions.
Why such a short time?
Initially, let's figure out why the validity period of the EDS certificate is limited to a year or two (time depends on our desire). The fact is that when an electronic digital signature is created, certain information about the owner is entered into it. This is the full name, address of residence, series and number of the civil passport, individual taxpayer number, as well as a number of other data (but not required). So, as additional information, the place of work, position and so on can be indicated. And this data changes quite often.
Therefore, it was decided that the digital signature should work for a short time. And if the data is out of date, it is necessary to create a new digital signature. If nothing has changed, then as an option, you can extend the validity of the EDS. Alas, the disadvantage of this state of affairs is that you have to regularly update your keys. And it takes time. But on the other hand, digital signatures have a number of advantages. So, for example, thanks to them, you can avoid the queues for public services. So let these standards, and not very comfortable, but still justify themselves.
What are the requirements for a person?
So, if you want to get your own digital signature, you must be capable, collect the required package of documents, get a carrier for EDS and go to an accredited key distribution center. After he receives all the necessary files, you should ensure their safety for the entire duration.
If the key is compromised, it is urgent to revoke it. The fact is that EDS is legally recognized as an analogue of a person’s signature. And using it, an attacker, for example, can easily get a loan. But to prove that it was not the owner of the signature that took him, but the criminal element, it will be extremely difficult. And this is just one example. Serious demands are being made on security. So, for example, it is highly recommended that the key is stored on an external medium. In this case, it will be more difficult for attackers to steal data from it when it infects a computer.
What are the benefits of one to two years?
At first glance, it might seem that this is clearly not enough. The same passport can be decades in humans. But there is also a certain reason. So, it should be noted that digital technologies are developing rapidly.Therefore, the encryption used one and a half decades ago can now be a minor problem. And regular updates ensure compliance with the technical level.
Consider a small example. In the late nineties, 32- and 64-bit encryption was widely used. Then they could provide a decent level of reliability. Nowadays, doubts about 128-bit ciphers are even more often heard. Indeed, having a reserve of time and a powerful computer, they can be hacked even at home. Therefore, it is recommended to choose 256-bit security keys.
When creating an electronic digital signature, it is possible to use a wide range of different ciphers. At present, even the special services will not be able to overcome such protection. Although, in secret, you can crack it, but it will take a considerable amount of time.
What to do after the end of the period?
So, let's say that the digital signature has expired. What should be done in this case? There are two ways: either create a new one, or extend an existing one. We will not consider the first option, but immediately move on to the second.
Initially, you should familiarize yourself with all the requirements that are put forward to renew the existing key. It is also necessary to ensure that the data contained in it are up to date. Then identification documents are collected, a special application is filled out. After that, you need to go to the key collection center. But this is not always necessary.
Many companies offer the service of remote extension of the EDS certificate. To do this, it is enough to have a special program or just access to an online service.
Finally
So, if the validity period of the EDS has expired - it does not matter. If you need to have a means of confirming the authenticity of documents, then, most likely, they can be extended remotely. In cases where this function is not available, you will have to go in person to an accredited key collection center. But, it is likely that it will be possible to extend the effect of EDS remotely in all specialized companies in the next few years.