THE ORDER OF OPERATIONAL ANALYTICAL CENTER IN CASE OF THE PRESIDENT OF THE REPUBLIC OF BELARUS

of February 8, 2019 No. 45

About additional measures for implementation of the Law of the Republic of Belarus of December 28, 2009 No. 113-Z "About the electronic document and the electronic digital signature"

Based on Article part three 26, parts four of Article 26-1, of parts five and the seventh article 29 of the Law of the Republic of Belarus of December 28, 2009 No. 113-Z "About the electronic document and the electronic digital signature" PRIKAZYVAYU:

1. Determine that:

1.1. in case of the appeal of the organization or physical person, including individual entrepreneur (further - the applicant), to the service provider behind the edition of the certificate of public key of verification of the electronic digital signature (further - the certificate) which personal key of the electronic digital signature the applicant developed independently (without use of technical means of the registration center) by means of the certified means of the electronic digital signature, the applicant represents to the service provider the applications of certificates of the service provider this according to policy and public key of verification of the electronic digital signature which need to be included in the certificate.

For confirmation of ownership of the applicant of personal key of the electronic digital signature service provider:

checks completeness and accuracy of the provided data of the applicant, including the identity of physical person this about state registration of the organization according to policy of application of certificates of the service provider;

based on the provided data creates request for receipt of the certificate according to requirements of STB 34.101.17-2012 "Information technologies and safety. Syntax of request for receipt of the certificate" in electronic form.

The applicant with use of the certified means of the electronic digital signature signs the created request for receipt of the certificate personal key of the electronic digital signature which public key of verification of the electronic digital signature is included in this request.

The service provider with use of the certified means of the electronic digital signature checks signed request for receipt of the certificate according to STB 34.101.17-2012.

If authenticity and integrity of request for receipt of the certificate prove to be true, it is considered that the applicant owns the specified personal key of the electronic digital signature;

1.2. in case of the address to the service provider behind the edition of the attribute certificate the applicant provides information about (about):

the certificate with which the attribute certificate, the physical person which is the owner of this certificate will be connected and to which on behalf of the applicant powers on signing of certain types of electronic documents are conferred, and also on other powers (further - powers), the applicant who conferred powers to physical person;

the powers conferred to physical person.

Information specified in part one of this subitem can be presented in the form of the electronic document signed by the electronic digital signature of the applicant.

For the edition of the attribute certificate the service provider shall:

check communication of physical person to which powers, with the applicant, and also these powers are conferred;

establish certificate accessory to physical person to which powers are conferred, and also be convinced actually this certificate at the time of rendering service;

in case of positive results of all checks to publish the attribute certificate according to policy of application of attribute certificates;

save all basic data provided by the applicant for the edition of the attribute certificate and results of check of validity of the certificate;

1.3. establishment of trust to the certificate published by the service provider of foreign state is performed by the republican unitary enterprise "National Center of Electronic Services" (further - the company) and includes assessment:

procedure for development, storage, backup, recovery, deposition, use of personal key of the electronic digital signature;

registration procedure of ultimate users, edition of certificates and certificate revocation lists, response, suspension, renewal of action of certificates, provision of information on the status of certificates;

availability of the infrastructure necessary for rendering services in management of certificates;

the used means of the electronic digital signature, cryptographic algorithms and mechanisms, protocols of information exchange, data exchange formats;

managements of operating activiies, system access, implementation and servicing of safe trusted information systems, recovery in case of failures and providing going concern, safety of personnel, physical protection and protection against impacts of the environment, information protection taking into account urgent safety hazards of information and actions of the violator according to the legislation of foreign state;

procedure and conditions of the termination of activities of the service provider of foreign state.

By results of assessment the company with the service provider of foreign state signs the agreement on establishment of trust to the certificates published by it.

The company in coordination with Operational analytical center in case of the President of the Republic of Belarus develops and approves regulations of the confidential third party in which the order of interaction with the service provider of foreign state and subjects of information exchange of the Republic of Belarus, holding procedures of check of authenticity of the electronic digital signature, requirement to technical, program, information exchange, and also measures for information protection is determined.

2. Make changes to the following orders of Operational analytical center in case of the President of the Republic of Belarus:

2.1. in the order of Operational analytical center in case of the President of the Republic of Belarus of November 29, 2013 No. 89 "About approval of the Instruction about procedure for carrying out accreditation of service providers in the State management system public keys of verification of the electronic digital signature of the Republic of Belarus and control of observance of conditions of accreditation":

state preamble in the following edition:

"Based on part seven of article 29 of the Law of the Republic of Belarus of December 28, 2009 No. 113-Z "About the electronic document and the electronic digital signature" PRIKAZYVAYU:";

in the Instruction about procedure for carrying out accreditation of service providers in the State management system public keys of verification of the electronic digital signature of the Republic of Belarus and control of observance of conditions of the accreditation approved by this order:

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info