About ECI - Public Key Infrastructure (PKI)

Public Key Infrastructure (PKI)	Life Span
Downloading	Organisation Certification Authority
Maintaining	Use of PKI by Government agencies
Revocation & re-issue

As part of ATO's Public Key Infrastructure (PKI) technology, a unique electronic identity is allocated to an authorised individual within a business entity. This electronic identity is assigned to a digital Certificate.

Complex mathematical algorithms, called authentication and encryption keys (hereafter referred to as Keys), enable authentication and high level encryption of messages sent over the Internet.

Public Key Infrastructure (PKI) technology involves two Certificates and two sets of Keys (also known as Key pairs) being generated for the Public Officer or Authorised Person. One Certificate and Key pair is for authentication purposes, the other Certificate and Key pair is for encryption (confidentiality) purposes. Although there are two Certificates and sets of Keys, they are managed as one by the ECI software.

Each set of Keys consists of a private Key and a public Key. Your private Keys are protected with a single password that you, as the Certificate Holder, select and maintain. You must not disclose this password to anyone.

In contrast to the private Keys, in the normal e-commerce environment you may send your public Keys to anyone with whom you are communicating electronically. Your public Keys are contained within your Certificates. Each time you attach your Certificates to an electronic transmission, you send your public Keys to the transacting party. The ECI software automatically sends your Certificates with the communication to the ECI Server once you have entered the appropriate password. Your Keys and Certificates must only be used for dealing electronically with the Tax Office.

A Certificate is an electronic document that binds your identity to your Keys. Your Keys and Certificates are issued to you only after the Tax Office has conducted rigorous identity checks that will positively identify you as a Certificate Holder on behalf of a business entity. Your Certificates will contain your full name and the Australian Business Number (ABN) and entity name of the business you represent.