ENCRYPTING DATA FOR TRANSMISSION
The UKDA has tested a number of software applications for encrypting data which allow data to be securely passed from government departments to the UKDA, and uses a program called Pretty Good Privacy (PGP). PGP is an industry-standard encryption technology. UKDA recommends its use if it is necessary to encrypt files for transmission, either to the UKDA or to other organisations.
To secure a file using PGP you will need appropriate encryption software. This is available either as open source (e.g. GnuPG) or as a commercial product (e.g. PGP). At present, larger organisations which carry out many such file encryptions probably prefer to use the commercial software for ease of use and additional functionality.
Once you have the software installed, you first need to create your own Public and Private Key pair and passphrase. The Private PGP Key is necessary for you to digitally sign the encrypted file, and thus allow the recipient to validate your (the sender's) identity. Once this has been created it is then necessary to download and install the recipient's Public PGP Key (which should be freely available) in order to encrypt the files so that only the authorised recipient can decrypt them.
The following steps guide you through the process.
Once only:
- install PGP software
- create your own Public/Private Key pair and passphrase
- download the UKDA Public Key and unzip it
- import UKDA Public Key into PGP software
Every time files need encryption:
- select files for encryption
- select the UKDA Public Key
- digitally sign the files to be encrypted using your Private Key and passphrase
- encrypt selected files using the UKDA Public Key
- send files to UKDA by the usual means
