The challenge
An international organisation needed to distribute publications under control, while letting every recipient prove, on their own desktop, that a publication was authentic and that they were entitled to use it. That demanded cryptographic signing, persistent identifiers and records, and mutually authenticated connections, all maintained and evolved as requirements changed.
Role
Vicknesh was Senior Consultant and Lead Solution Architect from 2011 to 2023, with principal responsibility for the architecture and software development, and for the infrastructure, cybersecurity, integration and deployment work around them.
What was built
- Signed digital publications with controlled distribution.
- Desktop software that verifies authenticity and entitlement.
- Persistent identifiers and record services.
- Mutual TLS for authenticated connections.
- Clean-room implementations of open standards using ECDSA, SHA3-256, JWS and JWT/JWK.
- Standards-conformance and security testing.
- Operational documentation and handover.
Outcome
A secure digital publication and verification platform that supports controlled distribution, authenticity verification and entitlement management, handed over with full operational documentation.