PKI works through the use of digital certificates, which are issued by a trusted CA. These certificates verify the identity of the entities involved in the communication. When toxicologists share sensitive data, PKI ensures that the data is encrypted and only accessible to those with the corresponding private key.