PKI

Stephen is a leading international authority on Public Key Infrastructure, a technology with a chequered history but which is now embedded in global credentialing frameworks such as mobile driver licenses, smart electricity grids, COVID vaccination and test reports, and electronic passports. Lockstep argues that PKI certificates were the original cryptographically verifiable credentials (VCs). They remain a practical VC option today, as proven by our MDAV digital wallet developed for the Department of Homeland Security. 

Lockstep is intimately involved with regulatory reforms internationally, new policy and awareness programs, and important new applications in healthcare, the law and smartcards.

Provocative, innovative and penetrating analyses of PKI

With better understanding of its business benefits and smarter governance approaches, PKI is everywhere. Lockstep is involved intimately with regulatory reforms internationally, new policy and awareness programs, and important new applications in healthcare, the law and smartcards.

Stephen’s experience in PKI is detailed in the profile below. Many of his writings on the topic are available in the PKI section of the Lockstep library.

Stephen has worked for, or consulted to, many of the world’s major PKI schemes over the past 25 years, including:

  • Project Gatekeeper
  • Medicare Australia Health eSignature Authority
  • Identrus
  • Cybersign Malaysia
  • ANZ Bank
  • Standard Chartered Bank
  • Australian Tax Office
  • PwC beTRUSTed UK & US (now Verizon Business, formerly Cybertrust)
  • Baltimore Certificates Australia (formerly CAPL, the first accredited CA in Australia)
  • KPMG Certification Authority
  • Hong Kong Post
  • Webtrust for CAs.

He has advised organisations on PKI adoption including:

  • U.S. Department of Homeland Security
  • World Health Organisation
  • The World Bank
  • South Australia Health
  • National eHealth Transition Authority (NEHTA)
  • Westpac Bank
  • NSW Health
  • Australian Medical Association
  • New Zealand Bankers Association
  • Australian Stock Exchange.

He has worked on technical PKIs (for non-human certificate subjects):

  • ISO 18013-5 & 7 mobile Driver Licence Digital Trust Services
  • IEEE 2030.5 smart grid devices.

He has given advice on PKI strategy, policy and governance to the governments of:

  • Australia
  • Hong Kong
  • Indonesia
  • Kazakhstan
  • Macau
  • Malaysia
  • Mongolia
  • New Zealand
  • Singapore
  • South Australia.

Stephen’s involvement in PKI industry development and professional associations includes:

  • member of the AU Gatekeeper PKI Policy Committee for its whole history
  • past chair of the OASIS PKI Adoption Technical Committee
  • past chair of the Certification Forum of Australasia
  • founding member of the National Electronic Authentication Council
  • OASIS liaison representative to the Asia PKI Forum
  • member of the Privacy Commissioner’s PKI Reference Group.
Stephen Wilson PKI profile March 2026