Circular No. 04/2019/TT-BTTTT on the interconnection between organizations providing national digital signature certification services and organizations providing government-specific digital signature certification services

CIRCULAR

REGULATIONS ON THE INTERCONNECTION BETWEEN ORGANIZATIONS PROVIDING NATIONAL ELECTRONIC SIGNATURE VERIFICATION SERVICES AND ORGANIZATIONS PROVIDING GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE VERIFICATION SERVICES

BASED ON THE ELECTRONIC TRANSACTION LAW dated September 29, 11 b) Circular No. 03/2015/TT-BKHĐT dated May 6, 2015 of the Minister of Planning and Investment detailing the preparation of construction tender documents.

BASED ON THE GOVERNMENT DECREE No. 130/2018/NĐ-CP dated September 27, 2018 detailing the implementation of the Electronic Transaction Law,đổ on electronic signaturesNo. and verification servicesứof electronic signatures;

Decree No. 17/2017/NĐ-CP dated February 17, 2017 of the Government stipulating the functions, tasks, powers, and organizational structure of the Ministry of Information and Communications;

AT THE PROPOSAL OF THE DIRECTOR OF THE NATIONAL ELECTRONIC SIGNATURE VERIFICATION CENTER,ứELECTRONIC SIGNATURE VERIFICATION,đổ NATIONAL,

THE MINISTER OF INFORMATION AND COMMUNICATIONS ISSUES THIS CIRCULAR ON REGULATIONS REGARDING THE INTERCONNECTION BETWEEN ORGANIZATIONS PROVIDING NATIONAL ELECTRONIC SIGNATURE VERIFICATION SERVICES AND ORGANIZATIONS PROVIDING GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE VERIFICATION SERVICES.No. THIS CIRCULAR REGULATES THE INTERCONNECTION BETWEEN ORGANIZATIONS PROVIDING NATIONAL ELECTRONIC SIGNATURE VERIFICATION SERVICES AND ORGANIZATIONS PROVIDING GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE VERIFICATION SERVICES.intention "7. A flexible power plant is a thermal power plant using reciprocating internal combustion engines (RICE) or aeroderivative gas turbines (Aero-GT) with fast start-up capabilities, designed in modular form to generate electricity for balancing capacity and maintaining power system stability."No. THIS CIRCULAR APPLIES TO THE FOLLOWING INDIVIDUALS AND ORGANIZATIONS:

Article 1. Scope of Regulation

1. ORGANIZATIONS PROVIDING NATIONAL ELECTRONIC SIGNATURE VERIFICATION SERVICES;

Article 2. Applicability

2. ORGANIZATIONS PROVIDING GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE VERIFICATION SERVICES;

3. ORGANIZATIONS PROVIDING PUBLIC ELECTRONIC SIGNATURE VERIFICATION SERVICES;

4. AUTHORITIES, ORGANIZATIONS, AND INDIVIDUALS USING PUBLIC ELECTRONIC SIGNATURES, GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURES;

5. AUTHORITIES, ORGANIZATIONS, AND INDIVIDUALS DEVELOPING APPLICATIONS USING ELECTRONIC SIGNATURES.

1. "ORIGINAL CERTIFICATE OF THE ORGANIZATION PROVIDING NATIONAL ELECTRONIC SIGNATURE VERIFICATION SERVICES" is the certificate issued by the organization providing national electronic signature verification services to itself.

2. "ORIGINAL CERTIFICATE OF THE ORGANIZATION PROVIDING GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE VERIFICATION SERVICES" is the certificate issued by the organization providing government-specific electronic signature verification services to itself.

Article 3. Explanation of Terms

In this Circular, the following terms are understood as follows:

3. "PUBLIC CERTIFICATE" is the certificate issued by the organization providing public electronic signature verification services to subscribers.

4. "GOVERNMENT-SPECIFIC CERTIFICATE" is the certificate issued by the organization providing government-specific electronic signature verification services to subscribers.

5. "SHA-1 CERTIFICATE" is the certificate using the secure hash function SHA-1 in the signing algorithm.

6. "SHA-256 CERTIFICATE" is the certificate using the secure hash function SHA-256 in the signing algorithm.

7. "PUBLIC ELECTRONIC SIGNATURE" is the signature created using the private key corresponding to the public key recorded on the public certificate.

8. "GOVERNMENT-SPECIFIC ELECTRONIC SIGNATURE" is the signature created using the private key corresponding to the public key recorded on the government-specific certificate.

9. "CROSS-RECOGNITION MODEL" is the interconnection model between two organizations providing electronic signature verification services, wherein authorities, organizations, and individuals using certificates issued by one organization trust the original certificates of the other organization and vice versa.

Article 4. Interconnection Model

The interconnection model between the organization providing national electronic signature verification services and the organization providing government-specific electronic signature verification services is the cross-recognition model.

The trusted original certificates of the organization providing national electronic signature verification services and the organization providing government-specific electronic signature verification services are specified in Article 5 of this Circular.

The cross-recognition model between the National Digital Signature Service Provider Organization and the Government-Specific Digital Signature Service Provider Organization is the cross-recognition model.

The original trusted digital certificates of the National Digital Signature Service Provider Organization and the Government-Specific Digital Signature Service Provider Organization are specified in Article 5 of this Circular.

Article 5. List of Trusted Root Certificates

1. The list of trusted root certificates includes:

a) Root certificates of organizations providing national digital signature certification services;

b) Root certificates of organizations providing specialized government digital signature certification services.

2. The list of trusted root certificates prescribed in Clause 1 of this Article is specified in Appendix I attached to this Circular.

Article 6. Provisions on Information Fields in Subscriber Digital Certificates

1. Information fields in public digital certificates and specialized government digital certificates must comply with the format and content provisions for information fields in subscriber digital certificates as set out in Appendix II attached to this Circular.

2. Information fields in public digital certificates that are not covered by Appendix II attached to this Circular must comply with the Ministry of Information and Communications' regulations on the format of public digital certificates.

3. Information fields in specialized government digital certificates that are not covered by Appendix II attached to this Circular must comply with the guidelines of the Government Cryptographic Department regarding the format of specialized government digital certificates.

Article 7. Provisions for Digital Signature Functionality, Certificate and Signature Validation of Applications Using Digital Signatures

1. For the digital signature function: The application must allow signers who are subscribers of organizations providing public digital signature certification services and subscribers of organizations providing specialized government digital signature certification services to perform digital signatures.

2. For the certificate and signature validation function: The application must allow signers and recipients to check the validity of public digital certificates and signatures, and the validity of specialized government digital certificates and signatures according to Articles 78 and 79 of Decree No. 130/2018/NĐ-CP dated September 27, 2018 of the Government detailing the implementation of the Law on Electronic Transactions concerning digital signatures and digital signature certification services.

Article 8. Implementation organization

1. The National Electronic Certification Center (organization providing national digital signature certification services) shall be responsible for:

a) Taking the lead and coordinating with organizations providing specialized government digital signature certification services to guide the implementation of provisions on information fields in subscriber digital certificates; ensuring accurate and secure exchange of trusted root certificates between the organization providing national digital signature certification services and the organization providing specialized government digital signature certification services;

b) Announcing the list of trusted root certificates of the organization providing national digital signature certification services on the electronic information website http://www.rootca.gov.vn;

c) Annually reviewing and submitting to the Ministry of Information and Communications for updating and issuing the list of trusted root certificates when there are changes in the root certificates of the organization providing national digital signature certification services and the organization providing specialized government digital signature certification services.

2. Organizations providing specialized government digital signature certification services shall be responsible for:

a) Implementing guidance on information fields in specialized government digital certificates;

b) Announcing the list of trusted root certificates of the organization providing specialized government digital signature certification services on the electronic information website http://ca.gov.vn.

3. Organizations providing public digital signature certification services shall be responsible for implementing provisions on information fields in public digital certificates.

4. Agencies, organizations, and individuals developing applications using digital signatures shall be responsible for implementing provisions on the digital signature functionality and certificate and signature validation functions of applications using digital signatures as stipulated in Article 7 of this Circular.

Article 9. Transitional Provisions

Subscriber digital certificates issued before this Circular takes effect may continue to be used until their expiration date or may be proactively converted to meet the provisions on information fields in subscriber digital certificates as stipulated in Article 6 of this Circular.

Article 10. Provisions on implementation

1. This Circular takes effect from September 1, 2019.

2. The Director of the Office, the Director of the National Electronic Certification Center, the Heads of organizations providing specialized government digital signature certification services, the Heads of agencies and units under the Ministry, and related organizations and individuals are responsible for implementing this Circular.

3. During the implementation process, if difficulties arise, agencies, organizations, and individuals should promptly report them to the Ministry of Information and Communications for review and resolution./.