Unofficial transfer (c) Soyuzpravoinform LLC

ORDER OF THE MINISTRY OF DIGITAL TRANSFORMATION OF UKRAINE

of January 18, 2024 No. 12

About approval of Features of provision of qualified electronic confidential service of forming, check and confirmation owing to the qualified certificate of enciphering

According to part four of article 20 of the Law of Ukraine "About electronic identification and electronic confidential services", Items 4, of 8, 10 Regulations on the Ministry of digital transformation of Ukraine, the Cabinet of Ministers of Ukraine approved by the resolution of September 18, 2019 856, ORDER to No.:

1. Approve Features of provision of qualified electronic confidential service of forming, check and confirmation owing to the enclosed qualified certificate of enciphering.

2. To provide to management of development of digitalization (Haleev A. P.) in the procedure established by the legislation submission of this order on state registration in the Ministry of Justice of Ukraine.

3. This order becomes effective from the date of its official publication.

4. To impose control over the implementation of this order on the First Deputy Minister Vyiskuba of A. A.

Approved by the Order of the ministry of digital transformation of Ukraine of January 18, 2024 No. 12

Features of provision of qualified electronic confidential service forming, checks and confirmations of action of the qualified certificate of enciphering

1. These Features determine requirements to provision of qualified electronic confidential service of forming, check and confirmation of action of qualified certificates of the public keys intended only for use in the protocol of approval of encrypting key (further - the qualified certificate of enciphering), requirements to procedures of forming, storage, canceling, blocking, updating, provision of information on the status of qualified certificates of enciphering, provision of access to the created qualified certificates of enciphering, and also the requirement to the means of cryptographic information protection used by provision of qualified electronic confidential service of forming, check and confirmation of action of the qualified certificate of enciphering which provide use of qualified certificates of enciphering (further - means of enciphering).

Action of these Features does not extend to provision of services of electronic identification and electronic confidential services according to provisions of paragraph two of part one of article 2 of the Law of Ukraine "About electronic identification and electronic confidential services" (further - the Law).

2. In these Features terms are used in the values given in the Law and other regulatory legal acts in spheres of electronic identification and electronic confidential services.

3. The qualified certificate of enciphering issued to physical persons and legal entities by the skilled supplier of electronic confidential services (further - users), and the personal key corresponding to it are used only in protocols of enciphering (approval of encrypting key).

4. The skilled supplier of electronic confidential services and its isolated registration Items providing forming and issue of qualified certificates of enciphering shall:

To carry out 1) during forming, storage, canceling, blocking, updating, provision of information on the status of qualified certificates of enciphering, provision of access to the created qualified certificates of enciphering of the requirement to the same procedures for qualified digital signature certificates or the seals established by the Cabinet of Ministers of Ukraine according to part three of article 20 of the Law;

To establish 2) when forming the qualified certificate of enciphering in the "use of key" expansion the object id-ce-keyUsage OBJECT IDENTIFIER identifier:: = {id-ce 15} is exclusive with "approval of key" value ("keyAgreement");

3) to use and provide to users of means of enciphering, conforming to requirements of Item 5 of these Features.

5. Means of enciphering shall realize format according to RFC 5652 "CryptographicMessageSyntax (CMS)" (further - cryptocommunication format) with use of cryptographic algorithms according to RFC 3370 "CryptographicMessageSyntax (CMS) Algorithms" or cryptographic algorithms according to technical specifications to RFC 5652, the approved order of administration of Public service of special communication and information protection of Ukraine of 27.10.2020 No. 687, registered in the Ministry of Justice of Ukraine 21.12.2020 at No. 1273/35556.

In means of the qualified digital signature in addition to the functions realized according to the requirements established by parts of the first or fourth article 19 of the Law formats of kriptoosoobshcheniye can be implemented.

Realization of formats of cryptomessages in means of enciphering, means of the qualified digital signature shall be confirmed by results of state examination in the field of cryptographic information protection or certification according to requirements of the legislation in the field of information protection.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info