Frequently asked questions
According to the provisions at Point b, Clause 1, Article 42 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and signature authentication services. digital signature, certificate of eligibility to ensure safety for specialized digital signatures has a term corresponding to the operation registration certificate of the specialized digital signature certification service provider, but not exceeding 05 years. year.
According to the provisions of Clause 3, Article 8 and Article 43 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and authentication services. For digital signatures, conditions for the use of foreign digital certificates to be legally valid in Vietnam include:
1. The digital certificates are still valid.
2. Licensed for use in Vietnam by the Ministry of Information and Communications or accepted in international transactions. The use of foreign digital certificates for servers and software does not require a license.
According to the provisions of Point a, Clause 2, Article 13 and Clause 2, Article 14 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and electronic transactions. digital signature authentication services, enterprises applying for a license to provide public digital signature authentication services must deposit at a commercial bank operating in Vietnam not less than 5 (five) billion dong to solve the problem. settle the risks and possible compensations during the service provision due to the error of the public digital signature certification service provider and pay the cost of receiving and maintaining the database of the enterprise in the event of license revocation. Submitting a guarantee paper instead of the bank's deposit confirmation in the application file for a license to provide public digital signature certification services is invalid and does not meet the licensing requirements as prescribed by law
According to the provisions of Clause 1, Article 18 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services. , an organization providing public digital signature certification services has its license revoked when one of the following cases occurs:
a) Failure to provide the service within 12 months from the date of issuance of the license without good reason;
b) Being dissolved or bankrupt in accordance with relevant laws;
c) The license to provide public digital signature authentication services has expired;
d) Failing to fully pay the service fee for maintaining the digital certificate status check system for 12 months; e
) Failing to overcome the conditions for temporary suspension specified in Clause 1, Article 17 of Decree No. 130/2018/ND-CP after the suspension period fixed by a state agency;
f) The enterprise does not want to continue providing services.
According to the provisions of Article 20 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, Conditions for granting digital certificates to organizations providing public digital signature certification services include: 1. Having a valid license to provide public digital signature certification services issued by the Ministry of Information and Communications. . 2. The actual technical system must comply with the licensing documents. 3. The public key on the digital certificate that will be issued is unique and paired with the private key of the public digital signature certification service provider requesting the digital certificate.
According to the provisions of Article 21 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, documents An application file for a digital certificate of a public digital signature certification service provider includes: 1. An application form for a national digital signature certification service provider to issue a digital certificate, made according to Form No. 04 in the Appendix issued together with Decree No. 130/2018/ND-CP. 2. A copy of the license to provide public digital signature authentication services. 3. Other documents as prescribed in the authentication regulations of the National Digital Signature Certification Service Provider
1677 / 5000
Kết quả dịch
According to the provisions of Article 22 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, in within 30 working days from the date of receipt of a valid dossier of application for a digital certificate, the national digital signature certification service provider shall verify the dossier: 1. The certificate service provider shall verify the application. The national digital signature enforcer shall verify the following contents: a) Check the actual technical system of the public digital signature certification service provider to ensure that the actual technical system is in accordance with the regulations. license application; b) Witness the creation of the private key pair and the public key pair by the public digital signature certification service provider to ensure that the generated key pair is safe according to regulations. 2. If the conditions for issuance of digital certificates are satisfied, the national digital signature certification service provider shall issue the digital certificate. In case the conditions are not satisfied, the National Digital Signature Certification Service Provider shall issue a written refusal to issue a digital certificate, clearly stating the reason. 3. The issuance of digital certificates by the National Digital Signature Certification Service Provider to public digital signature certification service providers must ensure the continuity of services provided by these organizations. provide public digital signature authentication services to subscribers.
According to the provisions of Clause 17, Article 3 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services. , specialized digital signature certification service provider means an organization providing digital signature certification services for agencies, organizations and individuals to use in specialized activities or fields, having the same nature of operation or purpose of work and are linked together through operating charters or legal documents stipulating the common organizational structure or form of association and joint operation. Activities of organizations providing specialized digital signature certification services are not for business purposes.
According to the provisions of Article 37 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, documents An operation registration dossier of an organization providing specialized digital signature certification services of an agency or organization includes: 1. An application form for an operation registration certificate of the certification service provider. specialized digital signatures according to Form No. 06 in the Appendix issued together with Decree No. 130/2018/ND-CP. 2. Documents proving satisfaction of the conditions for operation registration specified in Clause 2, Article 36 of Decree No. 130/2018/ND-CP. 3. Documents proving that service users have the same nature of operation or work purposes and are linked together through the operation charter or legal document stipulating the general organizational structure or form of association, joint activities.
According to the provisions of Article 40 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, Conditions for issuance of a certificate of eligibility to ensure the safety of specialized digital signatures include: 1. Having an operation registration certificate of an organization providing specialized digital signature certification services. 2. Satisfy the personnel and technical conditions specified in Clauses 3 and 4, Article 13 of Decree No. 130/2018/ND-CP.
According to the provisions at Point a, Clause 1, Article 42 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and authentication services. digital signature, within 60 working days from the date of receipt of the application for a certificate of eligibility to ensure the safety of valid specialized digital signatures, the Ministry of Information and Communications shall assume the prime responsibility for, and coordinate with, the Ministry of Information and Communications. with the Ministry of Public Security, the Government Cipher Board and relevant ministries and branches to verify documents, conduct physical checks and issue certificates of eligibility to ensure the safety of specialized digital signatures for organizations in the university. organization that fully meets the conditions specified in Article 40 of Decree No. 130/2018/ND-CP. The form of the certificate of eligibility to ensure safety for specialized digits is specified according to Form No. 13 in the Appendix issued with Decree 130/2018/ND-CP. In case the organization does not fully satisfy the conditions as prescribed, the Ministry of Information and Communications shall notify in writing and clearly state the reason.
According to the provisions of Article 21 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, documents An application file for a digital certificate issued by a public digital signature certification service provider includes:
1. An application form for a national digital signature certification service provider to issue a digital certificate, made according to Form No. 04 in the Appendix issued together with Decree No. 130/2018/ND-CP.
2. A copy of the license to provide public digital signature authentication services.
3. Other papers as prescribed in the authentication regulations of the National Digital Signature Certification Service Provider.
According to the provisions of Article 22 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services, in Within 30 working days from the date of receipt of a valid application file for a digital certificate, the national digital signature certification service provider shall verify the dossier:
1. The national digital signature certification service provider shall verify the following contents:
a) Inspect the actual technical system of the public digital signature certification service provider to ensure that the actual technical system conforms to the license application file;
b) Witness the creation of the private key pair and the public key of the public digital signature certification service provider to ensure that the generated key pair is safe according to regulations.
2. If the conditions for issuance of digital certificates are satisfied, the national digital signature certification service provider shall issue the digital certificate. If the conditions are not met, the National Digital Signature Certification Service Provider shall issue a written refusal to issue a digital certificate, clearly stating the reason.
3. The issuance of digital certificates by the National Digital Signature Certification Service Provider to public digital signature certification service providers must ensure the continuity of services provided by these organizations. provide public digital signature authentication services to subscribers.
According to the provisions of Article 12 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature and paper authentication services. The license is granted to organizations providing public digital signature certification services for a period of 10 years.
According to the provisions of Clause 2, Article 36 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services. , conditions for operation registration of organizations providing specialized digital signature certification services of agencies or organizations include:
a) Agencies and organizations must have personnel responsible for: System administration; operate the system and issue digital certificates; ensure the security of system information. These personnel must have a university degree or higher, majoring in information security or information technology or electronics and telecommunications;
b) Set up a system of technical equipment to ensure the following requirements: Store fully, accurately and update subscriber's information for the issuance of digital certificates during the validity period of digital certificates; Ensure key pair generation only allows each key pair to be generated at random and exactly once; has the feature to ensure that the private key is not detected when the corresponding public key is available; Has the feature of warning, preventing and detecting illegal access on the network environment; Designed in the direction of minimizing direct exposure to the Internet environment.
c) Having a plan to provide subscriber information online for the national digital signature certification service provider, serving the state management of digital signature certification services;
d) The entire system of equipment used to provide services is located in Vietnam;
dd) Having an office and place where machinery and equipment are located in accordance with the requirements of the law on fire and explosion prevention and control; resistant to floods, earthquakes, electromagnetic interference, illegal human intrusion.
