Decision No. 738/2004/QD-NHNN of the State Bank of Vietnam stipulates security key codes for treasury bill bidding operations, bond bidding operations, and open market operations. This regulation applies to the Director of the State Bank of Vietnam's Trading Department, the Director of the State Bank of Vietnam's Branches in provinces/cities, and the General Directors (Directors) of Credit Organizations that are members of the treasury bill bidding market, bond bidding market, and open market operations. The main objective is to secure information and ensure safety in electronic transactions.
적용 범위
The Director of the State Bank of Vietnam's Trading Department, the Director of the State Bank of Vietnam's Branches in provinces/cities, and the General Directors (Directors) of Credit Organizations that are members of the treasury bill bidding market, bond bidding market, and open market operations.
핵심 사항
- The Director of the State Bank of Vietnam's Trading Department, the Director of the State Bank of Vietnam's Branches in provinces/cities, and the General Directors (Directors) of Credit Organizations that are members of the treasury bill bidding market, bond bidding market, and open market operations are granted security key codes to access and perform processing tasks in treasury bill bidding operations, bond bidding operations, and open market operations.
- Security key codes include three types: Access Key Code, Approval Key Code, and Encryption/Decryption Key Code for tender registration data.
- The Director of the State Bank of Vietnam’s Banking Information Technology Department is responsible for issuing and managing security key codes for units using them.
- Those who are granted security key codes must use them within their authorized scope, duration, and authority; immediately report to the head of the unit if there is a change in job duties, loss of the key code, or suspicion of its leakage.
- Violations of the regulations on security key codes will be subject to administrative penalties, criminal prosecution, and material compensation according to the provisions of the law.
🌐 이 문서의 사회적 영향
- Positive impact: Protecting the safety of information and electronic transactions in financial operations.
- Negative impact: Increased costs for managing and securing security key codes.
❓ 자주 묻는 질문
Who is granted security key codes?
The Director of the State Bank of Vietnam's Trading Department, the Director of the State Bank of Vietnam's Branches in provinces/cities, and the General Directors (Directors) of Credit Organizations that are members of the treasury bill bidding market, bond bidding market, and open market operations.
How many types of security key codes are there?
Security key codes include three types: Access Key Code, Approval Key Code, and Encryption/Decryption Key Code for tender registration data.
What responsibilities does the Director of the State Bank of Vietnam’s Banking Information Technology Department have?
Selecting technology and solutions; implementing measures to ensure safety and security for the development, issuance, and management of security key codes; providing issued security key codes to users from State Bank of Vietnam units, members of the treasury bill bidding market, bond bidding market, and open market operations.
What must those who are granted security key codes do?
They must use them within their authorized scope, duration, and authority; immediately report to the head of the unit if there is a change in job duties, loss of the key code, or suspicion of its leakage.
How will violations of the regulations on security key codes be handled?
They will be subject to administrative penalties, criminal prosecution, and material compensation according to the provisions of the law.
전문
Pursuant to …;
REGARDING THE ISSUE OF REGULATIONS ON ENCRYPTION KEYS FOR BOND AUCTION AND BOND ISSUANCE OPERATIONS AND OPEN MARKET OPERATIONS
GOVERNOR OF THE STATE BANK OF VIETNAM
Pursuant to the Law on the State Bank of Vietnam No. Law No. 01/1997/QH10 dated December 12, 1997, and Law on Credit Organizations No. 02/1997/QH10 dated December 12, 1997;
Pursuant to the Law Amending and Supplementing Certain Provisions of the Law on the State Bank of Vietnam No. 10/2003/QH11 dated June 17, 2003;
Pursuant to Decree No. 86/2002/NĐ-CP dated November 5, 2002 of the Government stipulating the functions, tasks, powers, and organizational structure of Ministries and ministerial-level agencies;
Pursuant to the Decree on Protecting State Secrets No. 03/2000/PL-UBTVQH10 issued on December 28, 2000 by the Standing Committee of the National Assembly; Pursuant to Decree No. 33/2002/NĐ-CP dated March 28, 2002 of the Government detailing the implementation of the Decree on Protecting State Secrets;
At the proposal of the Director of the Banking Information Technology Department, The attached Decision promulgates the "Regulations on Encryption Keys for Bond Auction and Bond Issuance Operations and Open Market Operations."
The Head of the Office, the Director of the Banking Information Technology Department, the Heads of units under the State Bank of Vietnam, and the General Directors (Directors) of credit organizations are responsible for implementing this Decision.
Pursuant to …;
Article 1. SIGNATURE OF THE GOVERNOR
Article 2THIS DECISION SHALL TAKE EFFECT 15 DAYS AFTER ITS PUBLICATION IN THE OFFICIAL GAZETTE.
Article 3. DEPUTY GOVERNOR
| REGULATIONS ON ENCRYPTION KEYS FOR BOND AUCTION AND BOND ISSUANCE OPERATIONS AND OPEN MARKET OPERATIONS (Signed) Vu Thi Lien |
(Attached to Decision No. 738/2004/QD-NHNN dated June 16, 2004 of the Governor of the State Bank of Vietnam)
Chapter I GENERAL PROVISIONS
An encryption key applied in bond auction and bond issuance operations and open market operations over computer networks (referred to as an encryption key) is a technological application used to control access, verify origin, secure, and check the integrity of electronic transaction data used in bond auction and bond issuance operations and open market operations over computer networks.
The encryption key is commonly used for bond auction and bond issuance operations and open market operations. The scope of use for each specific operation of the encryption key is established by the issuing unit, depending on the status of the unit receiving the key. The encryption key includes three types:
Article 11. System access control encryption key (referred to as Access Key).
2. Electronic transaction data approval encryption key (referred to as Approval Key).
3. Encryption key used for bidding registration data encryption and decryption.
Article 2. The encryption key assigned to each individual establishes that individual's authority and responsibility in using the key to access, perform processing tasks, encrypt and decrypt data, or check and approve electronic transactions of bond auction and bond issuance operations and open market operations.
Article 3. The encryption keys used for bond auction and bond issuance operations and open market operations are classified as "Top Secret" state secrets within the banking sector.
The construction, management, delivery, use, destruction, inspection regime, and personal responsibility for encryption keys; the selection of staff directly involved with encryption keys must comply with the provisions of the law on protecting state secrets and the Regulations on Protecting State Secrets in the Banking Sector issued pursuant to Decision No. 1087/2003/QD-NHNN dated September 17, 2003 of the Governor of the State Bank of Vietnam.
Article 3. The security code for bill issuance bidding, bond issuance bidding, and open market operations business is a State secret in the banking sector classified as "Top Secret".
The construction, management, transfer, use, destruction, inspection regime, and individual responsibility regarding the security code; the selection of staff directly involved with the security code must comply with the provisions of the law on protecting State secrets and the Regulations on Protecting State Secrets in the Banking Sector issued pursuant to Decision No. 1087/2003/QD-NHNN dated September 17, 2003 of the Governor of the State Bank of Vietnam.
Article 4. Electronic transactions on computer networks for treasury bill bidding, bond bidding, and open market operations shall only have transaction value when approved by the authorized person using the Approval Code.
Article 2. This Decision shall take effect fifteen days from the date of publication in the Official Gazette.
Chapter 2 SPECIFIC PROVISIONS
Article 5. The Director of the Banking Technology Information Bureau shall be responsible for:
1. Selecting technology and solutions; implementing measures to ensure security and confidentiality for the construction, issuance, and management of Security Code.
2. Issuing and managing the Security Code issued to users of the Security Code from State Bank units, participants in treasury bill bidding, bond bidding, and open market operations.
3. Using technical measures to enable the use or suspension of the effectiveness of the Security Code immediately upon receiving requests from the heads of individual management units that have been issued the Security Code.
4. Changing the issued Security Code at least once every six months.
5. Suspending the effectiveness of the issued Security Code upon expiration of its usage period.
6. Being able to select individuals with sufficient capability and integrity to perform the tasks outlined in Clauses 1 through 5 of this Article.
Article 6. Subjects eligible to receive the Security Code.
1. The Director of the State Bank Trading Department.
2. The Director of State Bank provincial branches authorized to organize treasury bill bidding, bond bidding, and open market operations.
3. The General Directors (Directors) of Credit Organizations that are members of the treasury bill bidding, bond bidding, and open market operations markets.
4. Individuals authorized by the subjects specified in Clauses 1, 2, and 3 of this Article.
Article 7. Effective date of the Security Code.
1. After completing the receipt and installation of the Security Code, the individual receiving it must report to the head of their unit to notify the issuing unit in writing of the start date for using the Security Code.
2. The issuing unit sets the effective usage date of the Security Code for individuals based on notifications from the receiving unit.
Article 8. Responsibilities of individuals receiving the Security Code.
1. Must use the Security Code within the scope, validity period, and authority granted by the issuing unit.
2. Ensure the safety and confidentiality of the received Security Code; immediately report to the head of their unit to notify the issuing unit and suspend the effectiveness of the Security Code if there is a change in job, loss, exposure, or suspected exposure of the Security Code.
3. Adhere to the guidelines for using the Security Code provided by the issuing unit and related provisions concerning the Security Code in the technical procedures for operating software for treasury bill bidding, bond bidding, and open market operations.
4. Cooperate with the issuing unit to change the Security Code urgently or periodically.
5. The head of the unit managing the recipient must immediately notify the issuing unit by phone or fax to suspend the effectiveness of the Security Code in cases where the recipient changes jobs or is suspended from work; the Security Code is lost, exposed, or suspected to be exposed. A formal request for suspension will be sent subsequently via official correspondence.
Article 9. The following acts are strictly prohibited:
1. Using Security Codes to compromise security, disclose secrets, access improperly, and obstruct the operations of bill auction systems, bond systems, and open market operations;
2. Utilizing Security Codes to conceal illegal activities;
3. Illegally decoding, appropriating, buying, selling, disclosing, or destroying Security Codes.
Chapter 3 IMPLEMENTING PROVISIONS
Article 10. Handling of violations
Any violation of this Regulation shall be subject to administrative penalties, criminal prosecution, and material compensation according to the provisions of the law, depending on the nature and severity of the violation.
Article 11. Responsibility for Implementation
The Banking Information Technology Department shall be responsible for guiding, monitoring, and organizing inspections of the implementation of this Regulation. Heads of units participating in the bill auction market, bond market, and open market operations shall be responsible for managing and supervising the use of Security Codes within their units in accordance with this Regulation.
Article 12. Amendments and supplements to this Regulation shall be decided by the Governor of the State Bank.
DEPUTY DIRECTOR
(Signed)
Vu Thi Lien
원본 문서(PDF)
관계도
문서를 클릭하면 열립니다. 빨간 테두리＝효력을 변경하는 관계.
번역본
이 문서는 다음 언어로 제공됩니다: