首page> Policies and regulations >Measures for the Management of Electronic Authentication Services for E-Government

 

 

dafabet online sports betting app

 Release date: 2024-09-11   |   Number of visits: 67    |  Source:  
Font:big small

 

dafabet live casino

No. 4 No.

The "Measures for the Administration of Electronic Authentication Services for E-Government" were reviewed and adopted at the State Cryptozoology Administration Bureau Executive Meeting on August 26, 2024,Now announced,Effective from November 1, 2024。

Bureau  long Liu Dongfang

September 4, 2024

  

Measures for the Management of Electronic Authentication Services for E-Government

 Chapter 1 General Provisions

Article 1: To standardize e-government electronic authentication service behavior,Implement supervision and management of e-government electronic certification service agencies,Ensuring the safety and reliability of e-government,Protect the legitimate rights and interests of relevant parties,According to the "Cryptozoology Law of the People's Republic of China"、"Electronic Signature Law of the People's Republic of China" and "Commercial Password Management Regulations" and other relevant laws and regulations,Develop these measures。

Article 2 Establishment of e-government electronic certification service agencies within the territory of the People’s Republic of China、Provide e-government electronic certification services and their supervision and management,This method applies。

Article 3: E-government electronic authentication services as referred to in these Measures,refers to the use of commercial cryptography technology to provide electronic signature authentication services for government activities,Activities to ensure the authenticity and reliability of electronic signatures。

Article 4 Organizations engaged in e-government electronic authentication services,Should be recognized by the State Cryptozoology Administration,Obtained the qualification of e-government electronic certification service agency in accordance with the law。

Article 5: The State Cryptozoology Administration shall supervise and manage national e-government electronic authentication service activities。

Local cryptography management departments at or above the county level shall supervise and manage the e-government electronic authentication service activities in their respective administrative regions。

 Chapter 2 Qualification Recognition

Article 6 Obtaining the qualification of e-government electronic certification service agency,Should meet the following conditions:

(1) Having the qualifications of an enterprise legal person or a public institution legal person;

(2) Have funds suitable for engaging in e-government electronic authentication service activities and using passwords;

(3) Having an operating location suitable for engaging in e-government electronic authentication service activities and using passwords;

(4) Having a domestic setting、Electronic authentication service systems and other equipment and facilities that comply with national cryptographic standards;

(5) Have more than 30 professional and technical personnel suitable for engaging in e-government electronic authentication service activities and the use of passwords、Operation Manager、Professionals such as security managers and customer service personnel;

(6) The ability to provide long-term e-government electronic authentication services for government activities,Including continued financial health、Adequate operating funds、Equipment and facilities are operating stably、Stable professional team,No major illegal records or bad credit records, etc.;

(7) Have a management system to ensure the safe operation of e-government electronic authentication service activities and the use of passwords。

Article 7 Application for e-government electronic certification service agency qualification,Should submit a written application to the State Cryptozoology Administration,Province entrusted to the State Cryptozoological Administration for acceptance、Autonomous Region、The municipal password management department submits the following materials:

(1) E-government electronic certification service agency qualification application form;

(2) Legal person qualification certificate;

(3) Fund situation,Including registered capital、Ownership structure、Ownership structure、Operation fund guarantee, etc.;

(4) Operation site conditions;

(5) List of technical materials and related equipment related to the electronic certification service system,Including electronic certification service system construction work report、Technical work report、Security Design Report、Security management policies and specifications、Standards Compliance Self-Assessment Report,Related software、Hardware list and its compliance with relevant national safety standards, etc.;

(6) Situation of professionals;

(7) Description and commitment to provide long-term service and quality assurance capabilities to users;

(8) E-government electronic authentication services and the establishment of password security management system,Including business operations management、Electronic certification service system operation management、Personnel Management、File Management、Establishment of management systems such as safety and confidentiality management。

Article 8: Provinces entrusted by the State Cryptozoology Administration to accept applications、Autonomous Region、Within 5 working days from the date of receipt of application materials by the municipal password management department,Conduct formal review of application materials,According to the following situations, they will be processed separately: application materials are complete、Conforming to the prescribed form,Should accept administrative license application and issue acceptance notice;Application materials are incomplete or do not comply with the prescribed form,All content that needs to be supplemented and corrected shall be notified on the spot or within 5 working days;Not accepted,Should issue a notice of rejection and explain the reasons。

Article 9 The State Cryptozoology Administration shall within 20 working days from the Dafabet reviewsdate of acceptance of the administrative license application,Review administrative license application,And make a decision on whether to grant permission in accordance with the law。Permission granted,Issue the "E-Government Electronic Certification Service Organization Qualification Certificate",And make it public;Not allowed,A decision not to grant administrative permission should be issued,Explain the reasons and inform the applicant of relevant rights。

Requires technical review of applicants,The time required for technical review is not included in the time limit specified in this article。The State Cryptozoology Administration shall inform the applicant in writing of the required time。

Article 10: The State Cryptozoology Administration shall base its technical review needs and professional requirements on,You can entrust a professional institution or organize experts to conduct technical review。

Technical review includes electronic certification service system security review,Operation site、Equipment and facilities、On-site inspection of management system construction,Professional competency assessment, etc.。

Professional institutions and experts should be independent、Justice、Science、Carry out technical review activities with integrity,The authenticity of the technical review conclusions、Responsible for Compliance,And bear corresponding legal responsibilities。The State Cryptozoology Administration should supervise technical review activities,Establish a accountability mechanism。

Article 11 Foreign Investment E-Government Electronic Authentication Services,Things that affect or may affect national security,Foreign investment security review should be conducted in accordance with the law。

Article 12 The "E-Government Electronic Certification Service Agency Qualification Certificate" is valid for 5 years,Content includes: Name of certified organization、Certificate number、Validity period、Issuing authority and date of issuance, etc.。

"E-Government Electronic Certification Service Agency Qualification Certificate" consists of the original and a copy,Original、Copies have the same legal effect。

Transfer prohibited、Rent、Lending、Fake、Change、False use、Lease "E-Government Electronic Certification Service Organization Qualification Certificate"。

Article 13: E-government electronic certification service agencies shall publish and promptly update the organization name of their "E-government electronic certification service agency qualification certificate" on their websites and operating sites、Certificate number、Validity period、Issuing authority and date of issuance, etc.。

Article 14 Under any of the following circumstances,The e-government electronic certification service agency shall go through the change procedures with the State Cryptozoology Administration within 30 days from the date of change:

(1) Organization name、Residence、The legal representative has changed;

(2) Institutional registered capital、Ownership structure、Ownership structure、The nature of the legal person or the affiliation of the unit has changed;

(3) Changes in equipment and facilities such as the electronic authentication service system,Influences or may affect the use of password security in e-government electronic authentication services;

(4) Newly built and relocated electronic certification service system;

(5) Other matters that need to be changed according to law.

Changes in the e-government electronic certification service organization that affect its compliance with qualification certification conditions and requirements,The State Cryptozoology Administration will base on the actual situation of the applicant,Conduct review in written or on-site form。Requires technical review,Conduct technical review in accordance with Article 10 of these Measures。

Article 15 The validity period of the e-government electronic certification service agency qualification has expired and needs to be extended,A written application should be submitted to the State Cryptozoology Administration 60 days before the expiration date。The State Cryptozoology Administration will base on the actual situation of the applicant,Conduct review in writing or on-site,And make a decision whether to approve the renewal before the expiration of the e-government electronic certification service agency qualification。

 Chapter 3 Code of Conduct

Article 16: E-government electronic certification service agencies shall comply with the requirements such as the e-government electronic certification business rules and regulations published by the State Cryptozoology Administration,Develop the organization’s e-government electronic certification business rules and corresponding electronic signature certification certificate strategy,Announced before providing e-government electronic authentication services,Province to your place of residence、Autonomous Region、Registration with the Municipal Password Management Department。

Changes in e-government electronic certification business rules and electronic signature certification certificate policies,E-government electronic certification service agencies should be announced,And report it to the province of residence within 30 days from the date of announcement、Autonomous Region、Registration with the Municipal Password Management Department。

E-government electronic certification service agencies should maintain the accessibility of the agency’s published e-government electronic certification business rules and electronic signature certification certificate policies。

Article 17: E-government electronic certification service agencies shall provide e-government electronic certification services in accordance with the e-government electronic certification business rules published by the agency。

Article 18: E-government electronic certification service agencies shall ensure the provision of the following services:

(1) Electronic signature certification certificate registration、Issue、Update、Revocation and other life cycle management services;

(2) Electronic signature authentication certificate information query service;

(3) Electronic signature authentication certificate status query service;

(4) Support services for the use of electronic signature authentication certificates;

(5) Other services related to electronic signature authentication.

Article 19 The electronic signature certification certificate issued by the e-government electronic certification service agency shall contain the following contents:

(1) Name of e-government electronic certification service agency;

(2) Name of holder of electronic signature certification certificate;

(3) Electronic signature authentication certificate serial number;

dafabet live casino(4) Validity period of electronic signature authentication certificate;

(5) Certificate policy object identifier corresponding to the electronic signature authentication certificate;

(6) Electronic signature verification data corresponding to electronic signature production data;

(7) Electronic signature of e-government electronic certification service agency;

(8) Other contents specified by the State Cryptozoology Administration.

Article 20 The e-government electronic certification service agency shall ensure that the contents of the electronic signature certification certificate are complete within the validity period、Accurate,And ensure that the electronic signature relying party can verify or understand the content and other relevant matters contained in the electronic signature certification certificate。

Article 21: Electronic signatories apply for electronic signature certification certificates from e-government electronic certification service agencies,Truth should be provided、Complete and accurate information。

When an e-government electronic certification service agency accepts an application for an electronic signature certification certificate,The identity of the applicant should be verified,Review relevant application materials,And inform the applicant of the conditions for use of the electronic signature certification certificate and electronic signature、Legal liability arising from electronic signature、Permissions and responsibilities to save and use electronic signature authentication certificate holder information、The scope of responsibilities of e-government electronic certification service agencies and electronic signature certification certificate holders, etc.。

After the e-government electronic certification service agency accepts the application for the electronic signature certification certificate,Should sign an e-government electronic certification service agreement with the applicant,Clear the rights and obligations of both parties。

Article 22: E-government electronic certification service agencies shall comply with relevant national password management requirements,Ensure the security of passwords used in e-government electronic authentication services。

The e-government electronic certification services provided by e-government electronic certification service agencies should be included in the unified electronic certification trust system,Comply with the mutual trust and mutual recognition requirements for electronic certification services。

Article 23: E-government electronic certification service agencies shall establish a complete confidentiality system,State secrets that he learned at work、Obligation to keep business secrets and personal privacy confidential,Take corresponding technical measures and other necessary measures to protect relevant information and data security。

Article 24: E-government electronic certification service agencies shall completely record and preserve information related to electronic signature certification,Ensure the traceability of the certification process and results,The information retention period is at least 5 years after the electronic signature authentication certificate expires。

Article 25: E-government electronic certification service agencies entrust other organizations to carry out electronic signature certification certificate registration business,The name of the institution entrusted to carry out electronic signature certification certificate registration business (hereinafter referred to as the entrusted institution) shall be provided within 30 days from the date of signing of the entrustment agreement、Responsible person,Electronic signature certification certificate registration business address,Report the entrusted matters and other information to the province where the entrusted institution is domiciled、Autonomous Region、Registration with the Municipal Password Management Department。The registration content has changed,The e-government electronic certification service agency shall report to the province where the entrusted agency is domiciled within 30 days from the date of change、Autonomous Region、Registration with the Municipal Password Management Department。

The e-government electronic certification service agency shall supervise the entrusted agency’s conduct of electronic signature certification certificate registration business,And bear legal responsibility for the consequences of this behavior。

The entrusted institution is within the scope of entrustment,Carry out electronic signature certification certificate registration business in the name of the e-government electronic certification service organization entrusted to carry out electronic signature certification certificate registration business,No other institution or individual may be entrusted to carry out electronic signature authentication certificate registration business。

Article 26: E-government electronic certification service agencies shall conduct compliance assessments of e-government electronic certification services at least once a year on their own or by entrusting professional institutions to do so,Promptly rectify the problems discovered during the assessment,Province to your place of residence、Autonomous Region、Compliance assessment report submitted by the municipal password management department。

Article 27: E-government electronic certification service agencies shall establish and improve complaint handling mechanisms,Announcement of complaint methods,Smooth complaint channels,Promptly accept and properly handle relevant complaints。

Article 28: E-government electronic certification service agencies shall provide on-the-job training for employees of their own units and entrusted agencies,Establish a training system,Develop a training plan,Strengthen assessment and keep training records。

Article 29: The e-government electronic certification service agency plans to suspend or terminate the e-government electronic certification service,Should be reported to the State Cryptozoology Administration 60 days before suspending or terminating services,And negotiate with other e-government electronic certification service agencies on business undertaking,Make proper arrangements。

The e-government electronic certification service agency fails to reach an agreement with other e-government electronic certification service agencies on business undertaking matters,Should apply to the State Cryptozoology Administration to arrange for other e-government electronic authentication service agencies to take over its business。

The e-government electronic certification service agency’s qualification as an e-government electronic certification service agency has been revoked in accordance with the law,The handling of its business undertaking matters shall be carried out in accordance with the regulations of the State Cryptozoology Administration。

E-government electronic certification service agencies have the obligation to undertake the e-government electronic certification service business carried out by other organizations in accordance with the arrangements of the State Cryptozoology Administration。

 Chapter 4 Supervision and Management

Article 30 The cryptography management department shall supervise and inspect e-government electronic authentication service activities in accordance with the law。Supervision and inspection can take the form of written inspection、On-site verification、Network monitoring and other methods。

Article 31 When the cryptography management department carries out supervision and inspection in accordance with the law,You can enter the e-government electronic certification service activity venue to conduct on-site inspection,Investigation、Learn about the situation,View、Copy relevant information,And you can entrust professional dafabet live casinoinstitutions or organize experts to carry out relevant testing and identification work。

E-government electronic certification service agencies and entrusted agencies shall cooperate,And truthfully provide relevant materials and technical support。

Article 32: The cryptography management department carries out supervision and inspection,Shall not hinder the normal operations and service activities of e-government electronic certification service agencies and entrusted agencies,No fees may be charged,Do not disclose or illegally provide to others business secrets and personal privacy learned in the performance of duties。

Article 33: The e-government electronic certification service agency has one of the following circumstances,The password management department should conduct key supervision and inspection:

(1) Serious problems found during supervision and inspection within one year;

(2) Administrative penalties for violating relevant laws and regulations;

(3) Other situations requiring key supervision and inspection。

Article 34: E-government electronic certification service agencies shall ensure that their basic conditions and capabilities can continue to meet the qualification certification conditions and requirements。

、Autonomous Region、The municipal password management department submitted the work report for the previous year,Includes:

(1) Continued compliance with qualification certification conditions and requirements;

(2) E-government electronic authentication service business development and related statistical data;

(3) Implementation of code of conduct;

(4) Safe operation of the electronic certification service system;

(5) Implementation of e-government electronic authentication services and password security management systems。

Article 36 Under one of the following circumstances,The e-government electronic certification service agency shall report to the province of residence within 15 days from the date of occurrence、Autonomous Region、Report from the municipal password management department:

(1) Major security risks and security incidents;

(2) Accidents of important systems and key equipment;

(3) Changes in personnel in key positions;

(4) Major property losses.

 Chapter 5 Legal Liability

Article 37 Those who are not certified to engage in e-government electronic authentication services,Punishments shall be imposed by the cryptography management department in accordance with the relevant provisions of the "Cryptozoology Law of the People's Republic of China" and the "Regulations on the Management of Commercial Cryptozoology"。

Article 38: E-government electronic authentication service agencies violate the "Cryptozoology Law of the People's Republic of China"、Relevant provisions of the "Commercial Password Management Regulations" and these Measures,Any of the following situations,Ordered by the password management department to correct or stop illegal activities,Give warning,Confiscation of illegal gains;Illegal income of more than 300,000 yuan,A fine of not less than 1 time but not more than 3 times of the illegal income may be imposed;No illegal income or illegal income of less than 300,000 yuan,A fine of not less than RMB 100,000 but not more than RMB 300,000 may be imposed;Serious circumstances,Ordered to suspend business for rectification,Until the e-government electronic certification service agency qualification is revoked:

(1) Carrying out e-government electronic authentication services beyond the approved scope;

(2) Transfer、Rent、Lending、Fake、Change、False use、Lease "E-Government Electronic Certification Service Organization Qualification Certificate";

(3) Failure to provide e-government electronic certification services in accordance with the e-government electronic certification business rules announced by this agency;

(4) The content of the electronic signature certification certificate does not meet the requirements;

(5) Application for electronic signature authentication certificate is accepted without checking the identity of the applicant、Relevant application materials have not been reviewed、Failed to inform the applicant of relevant matters,Or the e-government electronic certification service agreement has not been signed with the applicant;

(6) Leaking or illegally providing to others business secrets learned in the performance of duties、Personal privacy;

(7) Failure to complete records as required、Save information related to electronic signature authentication;

(8) Failure to perform supervision obligations,The entrusted organization carries out electronic signature certification certificate registration business in its own name,Or entrust other institutions、Individuals carry out electronic signature certification certificate registration business;

(9) Refusing to submit or truthfully submitting the annual work report、Implementation status of major event reports。

Article 39: E-government electronic certification service agencies violate the relevant provisions of these Measures,Any of the following situations,Ordered by the password management department to correct;Not corrected within the time limit or still does not meet the requirements after correction,A fine of not less than 10,000 yuan but not more than 100,000 yuan:

(1) Failure to complete the change procedures in accordance with Article 14 of these Measures;

(2) Failure to comply with Article 16 of these Measures、Filing according to Article 25;

(3) Failure to conduct compliance assessment of e-government electronic authentication services as required,Or the problems discovered during the assessment were not rectified in a timely manner;

(4) No complaint handling mechanism has been established、Announcement of complaint methods,Or it was not accepted in time、Properly handle relevant complaints;

(5) Failure to provide on-the-job training for employees of the unit and the entrusted agency;

(6) Failure to report the suspension or termination of e-government electronic authentication services as required;

(7) Failure to undertake e-government electronic certification service business as required。

Article 40 The electronic signer or the electronic signature relying party suffers losses in government activities due to the electronic signature certification services provided by the e-government electronic certification service agency,The e-government electronic certification service agency cannot prove that it is not at fault,Be responsible for compensation。

Article 41 Personnel engaged in the supervision and management of e-government electronic authentication services abuse their powers、Neglect of Duty、Practice for personal gain,Or leaked、Illegal provision of trade secrets learned in the performance of duties to others、Personal privacy、Information of the whistleblower,Penalize according to law。

 Chapter 6 Supplementary Provisions

Article 42 These Measures will come into effect on November 1, 2024。

Source: State Cryptozoology Administration website