Country Profile on “Digital Trust Services”

Country Profile on “Digital Trust”

Survey : “Enriching the Arab & African Countries state of play report on digital trust services”

Objectives & Scope :

Enriching the Arab & African Countries state of play report on digital trust services
Covering all Arab & African countries
Snapshot & better understanding of the electronic trust services framework in each country

* This survey has been prepared in collaboration with our private sector member “SEALED”

Survey : Enriching the Arab & African Countries state of play report on digital trust services

Step 1 of 8

COMPONENTS
I. Part one : Country and contact details
II. Part two : Legal and regulatory aspects
III. Part three : Supervision and auditing aspects
IV. Part four : Best practices and technical aspects
V. Part five : Trust representation aspects
VI. Part six : Mutual recognition
VII. Part seven : Statistics
VIII. Part eight : AAECA-Net
I. Part one: COUNTRY AND CONTACT DETAILS
Region
Arab Countries (LAS Member States)
African countries (ATU member States)
Person(s) assisting providing the information
Contact 1 : Name
First Last
Organization
Role / Position
Contact Email
Contact 2 : Name
First Last
Organization
Role / Position
Contact Email
Contact 3 : Name
First Last
Organization
Role / Position
Contact Email
Website
Other relevant information

Save and Continue Later

III. Part three: SUPERVISION AND AUDITING ASPECTS
1. Supervisory Body(ies) / Licensing Authority(ies)
Body(ies) / Authorities in charge of the supervision/licensing of the Trust Service Providers and the trust services they provide
Organisation Name (1)
Supervision/ Licensing mission description:
Contact Name
First Last
Contact Function
Contact email
Organisation Name (2)
Supervision/ Licensing mission description:
Contact Name
First Last
Contact Function
Contact email
MORE INFORMATION | If there are more Bodies/Authorities, please provide the same information requested ABOVE
Body(ies) / Authorities in charge of the approval/licensing/certification of the Secure Signature/Seal Creation Devices
Organisation Name
Approval/Supervision/Licensing mission description:
Contact Name
First Last
Contact Function
Contact email
MORE INFORMATION | If there are more Bodies/Authorities, please provide the same information requested ABOVE
2. Supervision / licensing scheme
Topic : Please describe the supervision / licensing scheme applicable in your country to TSP and the trust services they provide, including e.g.:
- a) Whether it requires pre-authorisation (e.g. license) prior to provide any trust service?
- b) Whether the pre-authorisation is required for all types of TSP and trust services or only for those of a specific level of reliability (e.g. qualified)?
- c) The duration of the authorisation/license?
- d) Conditions for authorisation/licensing?
- e) Geographical scope of the scheme
- f) Community / application
- Other relevant information
Description
Other relevant information
3. Auditing framework and scheme
Please provide the description for the following topics
Basis of audit scheme
Conformity Assessment Body / Auditors accreditation requirements
Conformity Assessment Scheme / Criteria used for audit (i.e. for assessing the conformity of TSP and trust service they provide with the legal requirements)
Views on equivalence to ISO/IEC 17065 framework supplemented by ETSI EN 319 403 based audit scheme
Reference material
Ref. number
Title
Download File
Provide the link
Ref. number
Title
Download File
Provide the link
Ref. number
Title
Download File
Provide the link
4. Other relevant information you would like to provide
More Information / Details

Save and Continue Later

IV. Part four: BEST PRACTICES AND TECHNICAL ASPECTS
When applicable, indicate for which type of trust service a legal framework is available:
TYPE OF TRUST SERVICE
1/ Provision of electronic certificates for electronic signatures
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP:
Views on equivalence to ETSI EN 319 411-1 & ETSI EN 319 412-2 (requiring compliance with ETSI EN 319 401); ETSI EN 319 411-2 & ETSI EN 319 412-2/5: …
2/ Provision of electronic certificates for electronic seals
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP:
Views on equivalence to ETSI EN 319 411-1 (requiring compliance with ETSI EN 319 401) & ETSI EN 319 412-3; ETSI EN 319 411-2 & ETSI EN 319 412-3/5:
3/ Provision of electronic certificates for servers/website authentication
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP:
Views on equivalence to ETSI EN 319 411-1 (requiring compliance with ETSI EN 319 401) & ETSI EN 319 412-4; ETSI EN 319 411-2 & ETSI EN 319 412-4/5:
4/ (Remote) creation of electronic signatures/seals
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP:
Views on equivalence to ETSI TS 119 431-1/2 (requiring compliance with ETSI EN 319 401), ETSI EN 319 102-1/2:
5/ Validation of electronic signatures/seals
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP:
Views on equivalence to ETSI TS 119 441-1 (requiring compliance with ETSI EN 319 401), ETSI TS 119 442 and ETSI EN 319 102-1/2:
6/ Preservation of electronic signatures/seals
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP
Views on equivalence to ETSI EN 319 401, ETSI TS 119 511, ETSI TS 119 512
7/ Provision of electronic time stamps
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP
Views on equivalence to ETSI EN 319 421 (requiring compliance with ETSI EN 319 401), ETSI EN 319 422
8/ Electronic registered delivery services
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP
Views on equivalence to ETSI EN 319 401, ETSI EN 319 521, ETSI EN 319 522 series, ETSI EN 319 531, and ETSI EN 319 532 series
9/ Electronic archiving services
Description of best practices / technical standard references
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP
Views on equivalence to ETSI EN 319 401, ETSI TS 119 511, ETSI TS 119 512 and other international standards
Other trust services
Identification of the best practice / technical standards that are used, referenced or mandatory for use by relevant TSP
Views on equivalence to ETSI EN 319 401and other relevant international standards

Save and Continue Later

V. Part five: TRUST REPRESENTATION ASPECTS
Indicate which type of trust representation is used to publish the approval status (e.g. licensed, qualified, supervised, authorised) of the TSP and the trust service they provide in your country, as a result of the supervision/licensing process:
Trust representation aspects
- (*) Trusted List
- Bridge CA certificate
- Root-signing by a national Root CA
- Certificate Root store
- (**) A combination of some of the above
(*) For the "Trusted list", please specify :
- Machine processable
- Human readable version
- Both human and machine processable versions
(**) Please clarify which trust representation models are combined and how, why:
Topics
General description of the trust representation model used
Reference to legislative material
Download File
Provide the link
Reference to technical material
Download File
Provide the link
In case of using trusted lists
URL to published trusted list(s)
Views on relationship to ETSI TS 119 612 trusted lists
Other relevant information you would like to provide

Save and Continue Later

VI. Part six: MUTUAL RECOGNITION
1. Have you already established a mutual recognition agreement with other countries ?
1. Have you already established a mutual recognition agreement with other countries ?
- Yes
- No
- Planned
If planned [Date]
If yes or planned, please provide details:
Agreement 1:
Agreement 2:
Agreement 3:
More Info/Details
2. From your experience …
What are main impediments to mutual recognition of electronic trust services within Arab & African regions ?
What are main impediments to mutual recognition of electronic trust services with trust services from other countries (EU, North America, South America, Asia, Australia) ?
What steps could be taken to improve mutual recognition of trust services from different countries ?

Save and Continue Later

VII. Part seven: STATISTICS
1. Are e-IDs available in your country ?
1. Are e-IDs available in your country ?
- (*) Available
- Not Available
- (**) Planned
(*) If Available [Date]
(**) If Planned [Date]
Details
2. Are e-Passport available in your country ?
2. Are e-Passport available in your country ?
- (*) Available
- Not Available
- (**) Planned
(*) If Available [Date]
(**) If Planned [Date]
Details
3. Number of certificates for electronic signatures
(issued by national TSPs & valid)
Issued & valid (total)
2017 2018 2019 2020
Of which “Qualified” (when applicable)
2017 2018 2019 2020
4. Number of certificates for electronic seals
(issued by national TSPs & valid)
Issued & valid (total)
2017 2018 2019 2020
Of which “Qualified” (when applicable)
2017 2018 2019 2020
5. Number of certificates for web site authentication
(issued by national TSPs & valid)
Issued & valid (total)
2017 2018 2019 2020
Of which “Qualified” (when applicable)
2017 2018 2019 2020
6. Number of electronic time stamps
Issued & valid (total)
2017 2018 2019 2020
Of which “Qualified” (when applicable)
2017 2018 2019 2020
7. Other types of trust service outputs:
Type of trust service:
Issued & valid (total)
2017 2018 2019 2020
Of which “Qualified” (when applicable)
2017 2018 2019 2020
More Details

Save and Continue Later

VIII. Part eight: Arab-African e-Certification Authorities Network | AAECANET
This part is reserved for Arab and African Countries/E-certification authorities willing to be part of the "Arab-African PKI Network"
1. Your Expectations from the Network:
Your Expectations from the Network :
- (1) Exchange of successful experiences/best practices & the transfer of expertise between Arab and African countries in the field of e-certification and e-trust services
- (2) Harmonization of e-transactions' regulations between Arab and African countries
- (3) Inter-regional mutual recognition and Interoperability of e-trust services
2. Do you support the initiative ?
- Yes
- No
Why ?/reasons
3. Your Expectations from the initiative
- (1) Inter-regional platform for eID interoperability
- (2) Regional & Interregional Law harmonization
- (3) Regional/global trusted lists of Certification Service Providers
- (4) Inter-regional mutual recognition of e-trust services
Other (please describe) ...
4. Recommendations for the way forward
Recommendations

Add a row when necessary

Save and Continue Later

Country Profile on “Digital Trust”

Survey : “Enriching the Arab & African Countries state of play report on digital trust services”

Survey : Enriching the Arab & African Countries state of play report on digital trust services

Step 1 of 8

COMPONENTS

I. Part one: COUNTRY AND CONTACT DETAILS

Person(s) assisting providing the information

II. Part two: LEGAL AND REGULATORY ASPECTS

1. Legal framework for e-Transactions (General)

(*) If available

(**) If planned

2. Legal framework defining and regulating Trust Service Providers and the Trust Services they provide

(*) When available

Type of trust service

Provision of electronic certificates for electronic signatures

(**) If planned

Provision of electronic certificates for electronic seals

(**) If planned

Provision of electronic certificates for servers / website authentication

If planned

(Remote) creation of electronic signatures/seals

If planned

Validation of electronic signatures/seals

If planned

Preservation of electronic signatures/seals

If planned

Provision of electronic time stamps

If planned

Electronic registered delivery services

If planned

Electronic archiving services

If planned

Other Trust Services :

3. Legal framework for Secure Signature/Seal Creation Devices

If planned

4. Legal framework for Personal Data Protection

If planned

5. Legal framework for the supervision / licensing of Trust Service Providers and the Trust Services they provide

If planned

6. Additional questions

6-1 / Is your country part (or envisaging to be part) of a group of countries having harmonised or envisaging to harmonise their legislations regarding the electronic trust services ?

6-2/ Is your country envisaging to adopt or align with the future UNCITRAL model law on electronic trust services ?

7. Other relevant information you would like to provide

III. Part three: SUPERVISION AND AUDITING ASPECTS

1. Supervisory Body(ies) / Licensing Authority(ies)

Body(ies) / Authorities in charge of the supervision/licensing of the Trust Service Providers and the trust services they provide

Body(ies) / Authorities in charge of the approval/licensing/certification of the Secure Signature/Seal Creation Devices

2. Supervision / licensing scheme

3. Auditing framework and scheme

Please provide the description for the following topics

Reference material

4. Other relevant information you would like to provide

IV. Part four: BEST PRACTICES AND TECHNICAL ASPECTS

TYPE OF TRUST SERVICE

1/ Provision of electronic certificates for electronic signatures

Description of best practices / technical standard references

2/ Provision of electronic certificates for electronic seals

Description of best practices / technical standard references

3/ Provision of electronic certificates for servers/website authentication

Description of best practices / technical standard references

4/ (Remote) creation of electronic signatures/seals

Description of best practices / technical standard references

5/ Validation of electronic signatures/seals

Description of best practices / technical standard references

6/ Preservation of electronic signatures/seals

Description of best practices / technical standard references

7/ Provision of electronic time stamps

Description of best practices / technical standard references

8/ Electronic registered delivery services

Description of best practices / technical standard references

9/ Electronic archiving services

Description of best practices / technical standard references

Other trust services

V. Part five: TRUST REPRESENTATION ASPECTS

Topics

In case of using trusted lists

VI. Part six: MUTUAL RECOGNITION

1. Have you already established a mutual recognition agreement with other countries ?

2. From your experience …

VII. Part seven: STATISTICS