DEVELOPMENT OF VERIFICATION SUBSYSTEM TO ENSURE AUTHENTICITY AND INTEGRITY OF DIGITAL SIGNATURES ON PDF DOCUMENTS USING PUBLIC KEY INFRASTRUCTURE TECHNOLOGY

• Main Author: Christadi, Alberth
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/66562
• Institution: Institut Teknologi Bandung

Currently, the use of physical documents is no longer practical and the world has moved towards the use of digital documents. Digital documents have many advantages, namely digital documents are simpler, efficient in cost and storage space, environmentally friendly, and better accessibility than physical documents. Like physical documents, digital documents also have a signature. Although electronic documents have many advantages, electronic documents also have serious drawbacks in terms of security, especially for documents that have a digital signature as a sign of the validity of the document. The signature can be forged by copy-pasting from another document, overwriting it with a new signature, or making changes to the document in order to manipulate a document and take advantage of it. The aim of this final project is to create a system that verifies the validity of digital signatures on a PDF document. More specifically, the system must be able to verify the validity of the digital signature on a PDF document and ensure that after the document is digitally signed, there is no change in the content of the document. The approach of this project is literature study, design, implementation, and testing. The whole system is built using open source software. The system is deployed on a cloud infrastructure and can be accessed as a web service. The system has two subsystems, namely a digital certificate registration system and a digital signature verification system. The digital certificate created by the system utilizes public key infrastructure technology where EJBCA acts as PKI management software. Then the main method used to verify digital signatures is the hash comparing method. All subsystems are tested according to the system flow diagram. The results of the tests carried out show that the system is able to reduce problems related to the authenticity and integrity of electronic documents.