On the Security of Mexican Digital Fiscal Documents
Fuente:
Redalyc
Saved in:
| Main Author: | |
|---|---|
| Format: | Artículo científico |
| Language: | en |
| Published: |
Instituto Politécnico Nacional
2008
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1876451098765557760 |
|---|---|
| author | Vladimir González García |
| author_facet | Vladimir González García |
| contents | On the Security of Mexican Digital Fiscal Documents Vladimir González García Francisco Rodríguez Henríquez Nareli Cruz Cortés Computación Digital Notary Information Security Digital Certificates Mexican Tributary Administration System In January 2005, the Mexican Tributary Administration System (SAT) introduced an official norm that stipulates how to generate electronic invoices that were termed by SAT, Comprobante Fiscal Digital (CFD). Supporting the CFD service implies the exchange of confidential information over Internet and other communication channels that are intrinsically highly vulnerable. Therefore, it becomes indispensable to incorporate to this service reliable and sound information security mechanisms. In the case of SAT's CFD, its security guarantees depend on customary cryptographic mechanisms such as, digital signatures, hash functions, etc. In this paper we point out several security flaws in the procedure specified by SAT for generating such electronic invoices. Furthermore, we provide recommendations for avoiding the security problems detected, which include the usage of more robust cryptographic mechanisms, alternative authentication protocols, time stamps authorities and a safe storage system. 2008 artículo científico 1405-5546 https://www.redalyc.org/articulo.oa?id=61513253003 en http://www.redalyc.org/revista.oa?id=615 Computación y Sistemas application/pdf Instituto Politécnico Nacional Computación y Sistemas (México) Num.1 Vol.12 |
| format | Artículo científico |
| id | redalyc_61513253003 |
| institution | Redalyc |
| language | en |
| publishDate | 2008 |
| publisher | Instituto Politécnico Nacional |
| spellingShingle | On the Security of Mexican Digital Fiscal Documents Vladimir González García Computación Digital Notary Information Security Digital Certificates Mexican Tributary Administration System On the Security of Mexican Digital Fiscal Documents Vladimir González García Francisco Rodríguez Henríquez Nareli Cruz Cortés Computación Digital Notary Information Security Digital Certificates Mexican Tributary Administration System In January 2005, the Mexican Tributary Administration System (SAT) introduced an official norm that stipulates how to generate electronic invoices that were termed by SAT, Comprobante Fiscal Digital (CFD). Supporting the CFD service implies the exchange of confidential information over Internet and other communication channels that are intrinsically highly vulnerable. Therefore, it becomes indispensable to incorporate to this service reliable and sound information security mechanisms. In the case of SAT's CFD, its security guarantees depend on customary cryptographic mechanisms such as, digital signatures, hash functions, etc. In this paper we point out several security flaws in the procedure specified by SAT for generating such electronic invoices. Furthermore, we provide recommendations for avoiding the security problems detected, which include the usage of more robust cryptographic mechanisms, alternative authentication protocols, time stamps authorities and a safe storage system. 2008 artículo científico 1405-5546 https://www.redalyc.org/articulo.oa?id=61513253003 en http://www.redalyc.org/revista.oa?id=615 Computación y Sistemas application/pdf Instituto Politécnico Nacional Computación y Sistemas (México) Num.1 Vol.12 |
| title | On the Security of Mexican Digital Fiscal Documents |
| topic | Computación Digital Notary Information Security Digital Certificates Mexican Tributary Administration System |
| url | https://www.redalyc.org/articulo.oa?id=61513253003 |