Certification on demand

Certification on Demand refers to a process where digital certificates are issued for a specific service order. They have a short validity time span and are only used to document the consent for one particular buyer & seller interaction.

Heiko Rossnagel from University Frankfurt, Chair of Mobile Business and Multilateral Security specifically mentioned Certification on Demand in connection with Mobile Signatures mobile signature.

The mobile operator could sell SIM-cards equipped with a key generator for one or more key pair(s) which can be used for the signing functionality. After obtaining the SIM-card from the mobile operator, the customer can then generate the keys and activate the signature component and the public key(s) can be certified by any Certification Service Provider on demand. Through the separation of the telephone functionality and the (possibly later) certification of the user’s identity by a certification service provider, both functions can be sold separately and can be obtained from different providers. The carrier will probably face increased costs for the signature capable SIM-card but can also expect increasing traffic caused by signature services. All distribution channels will remain unchanged.

Sources:

http://www.wiiw.de/publikationen/MobileQualifiedElectronicSigna917.pdf