Chapter I
GENERAL PROVISIONS
Article 1. Scope
This Decree provides guidelines for digital signatures and digital certificates, the management, provision, and use of digital signatures, digital certificates and digital signature authentication.
Article 2. Regulated entities
This Decree shall apply to entities managing and providing digital signature authentication and entities using digital signatures, digital certificates and digital signature certification services in electronic transactions.
Article 3. Interpretation of terms
For the purposes of this Decree, these terms below shall be construed as follows:
1. "Key" means a string of binary digits (0 and 1) used in the cryptographic system.
2. "Asymmetric cryptography " means any cryptographic system which is capable of creating pairs of keys: private key and public key.
3. "Private Key" means a key in the key pair of the asymmetric cryptography, used to create digital signatures.
4. "Public key" means a key in the key pair of the asymmetric cryptography, used to verify digital signatures created by the corresponding private key in the key pair.
5. "Digital signing" means the putting the private key into a software program to automatically generate and add digital signatures to data messages.
6. "Digital signature" means a form of electronic signature created by the transformation of a data message using an asymmetric cryptography in which those who have initial data messages and the public key of the signer can be determined exactly:
a) The above transformation is created by the correct private key corresponding to public key in the same key pair;
b) The integrity of the content of data messages since the implementation of the mentioned above transformation.
7. "Digital certificate" means a form of electronic certificate granted by a certification authority to provide identity for the public key of an entity to certify that such entity is the signer of digital signature by using corresponding private key.
8. “Valid digital certificate" means a digital certificate which is unexpired; not be suspended or revoked.
9. "Public digital certificate" means a digital certificate granted by a public certification authority.
10. "Foreign digital certificate" means a digital certificate granted by a foreign certification authority.
11. "Subscriber" means an entity granted a digital certificate, accepting digital certificate and holding the private key corresponding to public key recorded on such digital certificate.
12. "Signer" means the subscriber who uses their private key to sign into a data message under their name.
13. "Recipient" means an entity receiving the data messages digitally signed by the signer, using the signer's digital certificate to verify the digital signature in the data message received.
14. “Digital signature application” means any IT application enabling the integration and use of digital signatures for certification.
15. "Certification authority” means an organization providing certification service of electronic signature to provide digital signatures certification service.
16. “Public certification authority” means any certification authority providing authentication of digital signatures for entities for public use. Digital signature authentication provided by public certification authorities are subject to conditional business as per the law.
17. “Specialized certification authority” means any certification authority providing digital signature authentication for entities in the same field or sector, having the same nature of activities or purpose of the work and associated together through the operation charter or legal documents defining the common organizational structure or form of association, collective activities. Activities of specialized certification authorities are the non-business activities. Specialized certification authorities consist of:
a) Specialized certification authorities of Government, providing digital signature authentication for Communist Party and State agencies;
b) Specialized certification authorities of agencies and organizations. The operation of specialized certification authorities of agencies and organizations must be registered with regulatory agencies of digital signature authentication as per the law.
18. “Public certification authority agent” means a merchant supporting a public certification authority to provide digital signature authentication for subscribers under an agency agreement for remuneration.
19. “Authentication regulation” means regulation of a certification authority on procedures for issuance, management and use of digital certificates of subscribers and the relationship between the certification authority and its agents and subscribers.
20. “Maintenance fee” means a sum of charge to be paid by certification authorities to Root Certification Authority (prescribed in Chapter VI of this Decree) for the maintenance of an online database of their digital certificates and other information for verification of digital certificate status, validity of digital signatures.
21. “Security device” means a physical device to store digital certificate and private key of a subscriber.
Article 4. Authentication of digital signatures
"Authentication of digital signatures" means a service type of electronic signature authentication provided by the certification authority to authenticate that the subscriber digitally signed the data message. Authentication of digital signatures includes:
1. Creation or support for creation of a key pair including public key and private key for subscribers.
2. Issuance, renewal, suspension, revalidation and revocation of the subscribers’ digital certificates.
3. Online maintenance of database of digital certificates.
4. Provision of necessary information to authenticate digital signatures digitally signed in data message by subscribers.
Tìm kiếm
Nghị định 130/2018/NĐ-CP (Bản Pdf)
Nghị định 130/2018/NĐ-CP (Bản Word)