Tunnuskortit

Tunnuskortit are authentication cards containing cryptographic credentials used to verify a person’s identity when accessing information systems, networks or services. They are typically issued by an organization and rely on public key infrastructure (PKI). A user inserts the card into a reader and authenticates with a personal identification number (PIN); the card then performs cryptographic operations such as digital signing or certificate-based authentication.

Tunnuskortit can be based on smart card technology, USB security tokens, or other form factors, and may be implemented as contact, contactless, or hybrid solutions. The credentials stored on the card are usually X.509 certificates and private keys that remain protected inside the card’s secure element, enabling strong authentication and, in some cases, legally binding digital signatures.

Common applications include logging into corporate networks and VPNs, accessing government or enterprise e-services, and signing documents or emails. They are used in environments where password-based authentication alone is considered insufficient for security, offering non-repudiation and auditability.

Advantages of tunnuskortit include strengthened security through strong, certificate-based authentication, resistance to password theft, and support for digital signing. Limitations encompass the need for card issuance and lifecycle management, potential loss or theft of the card, dependency on card readers or compatible devices, and ongoing maintenance such as certificate renewal and revocation.

In Finland and elsewhere, tunnuskortit have historically played a significant role in organizational security infrastructure, although many institutions are expanding toward mobile, software-based, or cloud-based authentication alternatives. See also PKI, digital signing, and e-ID systems.