DECISION OF BOARD OF THE EURASIAN ECONOMIC COMMISSION

of July 9, 2018 №110

About certification center of the Eurasian economic commission

For the purpose of realization of Item 18 of the Protocol on information and communication technologies and information exchange within the Eurasian Economic Union (appendix №3 to the Agreement on the Eurasian Economic Union of May 29, 2014) the Eurasian economic board decided:

1. Approve the enclosed Regulations on certification center of the Eurasian economic commission.

2. This Decision becomes effective after 30 calendar days from the date of its official publication.

Approved by the Decision of Board of the Eurasian economic commission of July 9, 2018 № 110

Regulations on certification center of the Eurasian economic commission

I. General provisions

1. This Provision determines appointment, the main objectives and functions of certification center of the Eurasian economic commission (further – the Commission), and also its rights, obligation, responsibility and procedure for the termination of activities.

2. Basic purpose of certification center of the Commission is creation of certificates of keys of verification of the digital signature of members of Board of the Commission, officials and the staff of the Commission for possibility of signing of electronic documents by them (including the documents of limited distribution transferred on electronic communication channels within local area network of the Commission).

3. The concepts used in this Provision mean the following:

"the cryptographic standard" – set of the technical specifications establishing rules and algorithms of transformation of information with use of cryptographic key (cryptographic transformation) including forming and verifications of the digital signature;

"the certificate of key of verification of the EDS" – the electronic document published by certification center, signed by the digital signature of certification center with use of key of the EDS and containing information confirming accessory of the key of verification of the EDS specified in the certificate, to certain subject of electronic interaction and other information provided by the corresponding cryptographic standards and requirements to creation, development and functioning of cross-border space of trust;

"certification center" – the authorized body or the organization providing according to acts of the Commission, the legislation of state member of the Eurasian Economic Union provision of services according to the edition, distribution, storage of certificates of keys of verification of the EDS and check of validity of these certificates;

"certification center of the Commission" – the certification center intended for ensuring verification of the EDS of members of Board of the Commission with certificates of keys, officials and the staff of the Commission;

"digital signature" – information in electronic form which is attached to other information in electronic form or is otherwise connected with such information serves for control of integrity and authenticity of this information, provides impossibility of refusal of authorship, is developed by application concerning this information of cryptographic transformation with use of the closed (personal) key (EDS key) and checked with use of open key (key of verification of the EDS).

Other concepts used in this Provision are applied in the values determined by the Protocol on information and communication technologies and information exchange within the Eurasian Economic Union (appendix №3 to the Agreement on the Eurasian Economic Union of May 29, 2014) and the requirements to creation, development and functioning of cross-border space of trust approved by Council of the Commission.

4. Requirements to execution of electronic documents are determined in the requirements to creation, development and functioning of cross-border space of trust approved by Council of the Commission and in Regulations on exchange of electronic documents in case of cross-border interaction of public authorities of state members of the Eurasian Economic Union among themselves and with the Eurasian economic commission, approved by the Decision of Board of the Eurasian economic commission of September 28, 2015 №125.

5. The digital signature (further – the EDS) members of Board of the Commission, officials and the staff of the Commission is recognized valid in case of simultaneous observance of the following conditions:

a) the certificate of key of verification of the EDS is created and issued by certification center of the Commission;

b) integrity of the data signed by the EDS is not broken;

c) The EDS is developed with use of the closed (personal) key which appropriate certificate of open key (the certificate of key of verification of the EDS) is specified as a part of this EDS;

d) the certificate of key of verification of the EDS is valid for the moment of signing of the electronic document;

e) the certificate of certification center of the Commission is valid for the moment of signing of the electronic document.

II. Tasks and functions of certification center of the Commission

6. The main objectives of certification center of the Commission are:

a) the certificate of compliance of open key of verification of the EDS to the closed (personal) key, and also confirmation of authenticity of the certificate of key of verification of the EDS of the member of Board of the Commission, the official or employee of the Commission;

b) providing guarantees of trust to certificates of keys of verification of the EDS of members of Board of the Commission, officials and the staff of the Commission in case of the international (cross-border) exchange of electronic documents;

c) edition, distribution, storage of certificates of keys of verification of the EDS of members of Board of the Commission, officials and staff of the Commission and check of validity of these certificates;

d) confirmation of reliability of the data specified in certificates of keys of verification of the EDS of members of Board of the Commission, officials and the staff of the Commission.

7. The certification center of the Commission performs according to the right of the Union the following functions:

a) creation and issue of certificates of keys of verification of the EDS conforming to the requirements approved by the Commission, members of Board of the Commission, officials and the staff of the Commission;

b) ensuring check of the identity of members of Board of the Commission, officials and the staff of the Commission in case of issue of certificates of keys of verification of the EDS;

c) the publication on the Internet in the mode of general access of information on conditions of use of services of certification center of the Commission, including information on restrictions on their use;

d) timely provision to all subjects of electronic interaction of information on the status (relevance) of all issued certificates of keys of verification of the EDS of members of Board of the Commission, officials and the staff of the Commission. Such information shall be available at any time including after cancellation of the certificate of key of verification of the EDS of the member of Board of the Commission, the official or the employee of the Commission, and to be provided by the automated method;

e) entering of information into the register of certificates of keys of verification of the EDS of members of Board of the Commission, officials and staff of the Commission and certificate revocation list of keys of verification of the EDS of members of Board of the Commission, officials and staff of the Commission. The certificate of key of verification of the EDS of the member of Board of the Commission, the official or employee of the Commission is considered withdrawn from the moment of the publication of the certificate revocation list containing information on the corresponding status (relevance) of such certificate and available at any time to subjects of electronic interaction;

e) documentation and storage of information on issue, obtaining and change of the statuses (relevance) of certificates of keys of verification of the EDS of members of Board of the Commission, officials and the staff of the Commission (including after the termination of activities for providing the EDS of members of Board of the Commission with certificates of keys, officials and the staff of the Commission) for production of evidence in case of analysis of the conflict situations connected using the issued certificates of keys of verification of the EDS. Storage of the specified information can be performed in electronic form;

g) ensuring confidentiality, integrity of the cryptographic keys created and stored by certification center of the Commission;

h) informing authorized bodies of state members of the Eurasian Economic Union on intention to stop activities for providing the EDS of members of Board of the Commission with certificates of keys, officials and staff of the Commission or about other cases of the termination of activities.

8. The organization of works on creation, development and functioning of certification center of the Commission is performed by structural division of the Commission to which sphere of maintaining the matters are carried. Functioning of certification center of the Commission is performed according to regulations according to appendix.

III. Rights, obligation and responsibility of certification center of the Commission

9. For accomplishment of the functions the certification center of the Commission has the right:

a) perform the data represented by members of Board of the Commission, officials and the staff of the Commission for the purpose of receipt of certificates of keys of verification of the EDS;

b) refuse to members of Board of the Commission, officials and the staff of the Commission receipt of certificates of keys of verification of the EDS in case of provision of false information or data by them not in full for receipt of certificates of keys of verification of the EDS;

c) stop or cancel action of the issued certificates of keys of verification of the EDS in case of disclosure of data which can affect possibility of further use of certificates of keys of verification of the EDS, loss of their legal force, loss of appropriate means of the EDS, cancellation of documents based on which certificates of keys of verification of the EDS, and in other cases established by acts of bodies of the Union are drawn up essentially;

d) organize, provide and control accomplishment by officials and staff of the Commission of requirements of information security in case of operation of means of certification center of the Commission;

e) take part in development and approval of the documents regulating questions of activities of certification center of the Commission;

e) establish effective period of the root certificate of key of verification of the EDS of certification center of the Commission and certificates of keys of verification of the EDS of members of Board of the Commission, officials and the staff of the Commission.

10. In case of accomplishment of the functions the certification center of the Commission shall:

a) provide procedure and terms of registration of members of Board of the Commission, officials and the staff of the Commission in certification center of the Commission based on the documents submitted by them with obligatory verification of the data specified in them;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info