of September 8, 2014 No. 553
About approval of Regulations of work of certification center of the National Bank of Ukraine
According to the Law of Ukraine "About the digital signature", to the Procedure for accreditation of the center of certification of keys approved by the resolution of the Cabinet of Ministers of Ukraine of July 13, 2004 No. 903 (with changes), to the Rules of the strengthened certification approved by the order of Department of special telecommunication systems and information security of the Security Service of Ukraine of January 13, 2005 No. 3, registered in the Ministry of Justice of Ukraine on January 27, 2005 at No. 104/10384 (with changes), for the purpose of enhancement of the legal basis of activities of certification center of the National Bank of Ukraine the Board of the National Bank of Ukraine decides:
1. Approve Regulations of work of certification center of the National Bank of Ukraine which are attached.
2. To management of information security (Lukyanov D. A.) after entry into force of this resolution to send its copy to Administration of Public service of special communication and information security of Ukraine, to bring its content to the attention of territorial administrations of the National Bank of Ukraine and banks of Ukraine for use in work.
3. To impose control over the implementation of this resolution on the vice-chairman of the National Bank of Ukraine Smoliya Ya. V.
4. The resolution becomes effective from the date of its official publication.
Chairman
V. A. Hontareva
It is approved: Administration of Public service of special communication and information security of Ukraine |
|
Approved by the Resolution of Board of the National Bank of Ukraine of September 8, 2014, No. 553
1. These Regulations No. 483-r "About coordination of creation of certification center of the National Bank of Ukraine", the Procedure for accreditation of the center of certification of keys approved by the resolution of the Cabinet of Ministers of Ukraine of July 13, 2004 No. 903 (with changes), the Rules of the strengthened certification approved by the order of Department of special telecommunication systems and information security of the Security Service of Ukraine of January 13, 2005 No. 3, registered in the Ministry of Justice of Ukraine on January 27, 2005 at No. 104/10384 is developed according to Items 7, of the 26th article 7 of the Law of Ukraine "About the National Bank of Ukraine", part seven of Article 5 and part seven of article 10 of the Law of Ukraine "About the digital signature", the order of the Cabinet of Ministers of Ukraine of May 6, 2009 (in edition of the order of May 10, 2006 No. 50), Regulations on Certification center of the National Bank of Ukraine, the approved resolution of Board of the National Bank of Ukraine of September 23, 2008 No. 287 (in edition of the resolution of Board of the National Bank of Ukraine of April 25, 2014 No. 239).
2. Subjects of legal relations in the sphere of the digital signature which make a reservation these Regulations are the centers of certification of keys which perform the actions connected with holding procedures of registration/accreditation in certification center of the National Bank of Ukraine (further - Certification center), which are registered/accredited in certification center (further - the Centers), certification center and the central certifying body.
3. In these Regulations the following basic concepts are used:
the administrator of safety of certification centers - the responsible person of certification centers who performs functions of service of information security;
the administrator of registration of certification center - the responsible person of certification centers who performs functions of service of registration;
the administrator of certification of certification centers - the responsible person of certification centers who performs functions of service of certification;
the database - the database of certification center in which the register of certification centers, the directory, technological and other office information necessary for functioning of software and hardware complex of certification center is stored;
blocking of the strengthened certificate of open key (further - the certificate of key) the procedure of management of the status of the certificate of key which temporarily stops action of the certificate of key;
maintaining the register of certification center - entering (removal, modification) of information into the register of certification centers, its storage and reservation;
the responsible person of certification center - the employee of the National Bank of Ukraine which functional obligations is accomplishment административных/технических/технологических functions of certification center;
the applicant of the Center - the authorized representative of the Center in certification center which on legal causes addresses certification centers for the purpose of the organization and carrying out registration, accreditation, the certificate of action of open key of the Center in certification center in accordance with the established procedure, and also blockings, cancellations, renewals of certificates of key of the Center, change of data of the Center, transfer of documentary information in case of the termination of activities of the Center;
keys of certification centers - own cryptographic keys of certification centers (personal and open) and cryptographic keys (personal and open) services of interactive determination of the status of the certificate of key;
complex system of information security of certification center - set of the technical, organizational actions and software and hardware providing technical and cryptographic information security in software and hardware complex of certification center;
updates of the certificate of key - the procedure of management of the status of the certificate of key which provides renewal of action of the certificate of key (which the corresponding procedure of blocking of the certificate of key preceded);
services of the digital signature for the Center from certification center servicing of certificates of keys of the Center (forming, distribution, storage, cancellation, blocking and renewal), provision of information on the status of certificates of keys, consultations on the questions connected with use of the digital signature;
software and hardware complex of Certification center - set of the technical equipment, the software and organizational actions used by the National Bank of Ukraine for ensuring accomplishment of functions of certification center;
the procedural procedure - registration of the Center or accreditation of the Center, either forming of certificates of key of the Center, or change of the status of certificates of key of the Center, or change of data of the Center, or the procedure of transfer of documentary information in case of the termination of activities of the Center;
the register of certification centers - the register in certification center with the data on the Centers, Certification centers entered in it, responsible persons of certification centers (in particular, certificates of keys, information on the status of certificates of keys);
the system administrator of certification center - the responsible person of certification center performing functions of service of the system administrator;
the certificate revocation list of keys of certification centers - the list of the blocked and cancelled certificates of keys which is created by certification center which protection is provided with imposing of the digital signature by means of own personal keys of certification centers;
cancellation of the certificate of key - the procedure of management of the status of the certificate of key which stops action of the certificate of key;
effective period of the certificate of key - period between date and time of the beginning and date and time of the end of action of the certificate of key, established when forming the certificate of key;
effective period of personal key - the term during which use of personal key is effective.
Other terms in these Regulations are applied in the values given in the Law of Ukraine "About the digital signature", other regulatory legal acts concerning application of the digital signature".
The item 4 is excluded according to the Resolution of Board of the National Bank of Ukraine of 07.07.2015 No. 441, with respect thereto Items 5 - 13 to consider respectively items 4 - 12
4. These Regulations are the regulatory legal act determining organizational and methodological and technological conditions of activities of certification center during procedures of registration, certification of action of open keys, accreditation of the centers in certification center, changes of identification these Centers and provision of services of the digital signature for the Centers from certification center.
5. Banks, their workers and clients have the right to receive services of the digital signature from:
The center created in bank according to internal documents of bank (further - the Center of bank);
The center which is separate legal entity.
6. The bank/separate legal entity for carrying out registration/accreditation of the Center in certification center signs with the National Bank of Ukraine the agreement on provision to certification centers of services of the Center.
7. The center shall perform the activities according to regulations of work that determines organizational and methodological and technological conditions of its activities in the course of provision of services of the digital signature to subscribers. The regulations of work of the Center shall be developed according to the Rules of execution of Regulations of work of the centers of certification of keys of banks of Ukraine approved by the resolution of Board of the National Bank of Ukraine of June 17, 2010 No. 284, registered in the Ministry of Justice of Ukraine on November 4, 2010 on No. 1036/18331.
8. The center shall approve the regulations of work with certification center prior to carrying out registration/accreditation. The center shall approve in addition the regulations of work with control facility prior to carrying out accreditation.
Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info
Database include more 50000 documents. You can find needed documents using search system. For effective work you can mix any on documents parameters: country, documents type, date range, teams or tags.
More about search system
If you cannot find the required document, or you do not know where to begin, go to Help section.
In this section, we’ve tried to describe in detail the features and capabilities of the system, as well as the most effective techniques for working with the database.
You also may open the section Frequently asked questions. This section provides answers to questions set by users.
The document ceased to be valid since November 30, 2019 according to Item 1 of the Resolution of Board of the National Bank of Ukraine of November 21, 2019 No. 137