Study. Arab-African e-certification Authorities Forum AAECA-Forum

Transcription

1 Arab-African e-certification Authorities Forum AAECA-Forum Study Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects)

2 Arab-African E-certification Authorities Forum AAECA-Forum AAECA-Forum Open Multistakeholder Network for e-trust in the Arab & African Regions

3 Survey Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects) AICTO has launched a survey among Arab & African countries about e-certifications Authorities : Collect data about e-certification and PKI authorities in Arab countries, e-signature, and the available legal and regulatory frameworks governing the e-transactions. Give a clear vision about the state of the art and future needs of Arab countries in the field.

4 Survey Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects) Targeted Regions/Countries Region 1 : Arab countries Region 2 : African countries Implementation actors Region 1 : Arab countries : Arab Information and Communication Technologies Organization (AICTO) Region 2 : African Countries : African Telecommunication Union (ATU)

5 Survey 1. Technical aspect 2. Legal aspect Components 3. Statistics 4. Arab African e-certification authorities Forum (AAECA-Forum)

6 Survey Part one: Technical aspect : 1. E-certification authorities/ Root certification authorities 2. Available e-trust services Giving an idea about available e-trust services in each country 2.1 : E-signature 2.2 : Time stamping 2.3 : Electronic seal 2.4 : Electronic delivery 2.5 : Website authentication

7 Survey Part one: Technical aspect : Questions 1. E-certification authorities/ Root certification authorities Exist Doesn't exist Planned Date Authority name Date of Creation objectives Mission 2. Available e-trust services Available Date Not available Planned Date Fields of application Since

8 Survey -Q Part one: Technical aspect : 3. National "Trusted list" 4. Are e-ids available in your country? 5. Is e-passport available in your country? Available Date Not available Planned Date Details

9 Survey -Q Part Two: Legal frameworks 1. Legal framework for E-transactions (General) Available Not available Planned : Short term/medium term / Long term Law n /title Date of issuance Description 2. Legal framework defining and organizing the work/tasks for e-certification providers

10 Survey -Q Part Two: Legal frameworks 3. Legal framework for personal data protection 4. Legal framework for e-trust services 4.1 : E-signature 4.2 : Time stamping 4.3 : Electronic seal 4.4 : Electronic delivery 4.5 : Website authentication 4.6 : Other

11 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 1. Number of certificates for e-signature 2. Number of certificates for servers 3. Number of certificates VPN 4. Number of certificates for e-id 5. Other : Generated Valid 2014/2015/2016

12 Survey -Q Part Four : Arab-African e-certification Authorities Forum AAECA-Forum This part is dedicated to Arab and African Countries/E-certification authorities willing to be part of the "Arab-African PKI-Forum"

13 Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes

14 Results Algeria, Iraq, Palestine, Tunisia, Oman, Jordan

15 Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes Technical aspect

16 Survey -Q Part one: Technical aspect : 1. E-certification authorities/ Root certification authorities

17 Root certification authorities in the Arab Region Countries having RCA Countries don t have RCA yet Countries planning to set up RCA

18 2000 Tunisia National Agency Of Digital Certification E-certification Authories Timeline 2013 Oman National Digital Certification Center (NDCC) Jordan Jordan National Root CA

19 Survey -Q Part one: Technical aspect : 2. Available e-trust services Available Date Not available Planned Date Fields of application Since 2.1 : E-signature 2.2 : Time stamping 2.3 : Electronic seal 2.4 : Electronic delivery 2.5 : Website authentication

20 2.1 : E-signature Available Not available Planned

21 2.1 : E-signature Countries/ Status Available Not available Planned Field of application Date Tunisia E-banking, E-Gov, E-Commerce 09/08/2000 Iraq Government Private sector Available e-trust services 02/01/2012 Jordan 01/06/2016 Algeria 09/30/2017 Palestine 03/01/2019 Oman 2013 Commercial Registration (CR) Services 2014 Man Power Services ehealth Services SMEs Services 14/06/2013

22 2.2 : Time stamping Available Not available Planned

23 2.2 : Time stamping Countries/ Status Available Not available Planned Field of application Date Tunisia 02/01/2008 E-banking, E-Gov, E-Commerce 2008 Iraq Available e-trust services Jordan 01/06/2016 Algeria 09/30/2017 Palestine 03/01/2019 Oman Sinature Validation Proof Report (2013) SMEs Services (2014) Commercial Registration (CR) Services (2014) Man Power Register (2017) 14/06/2013

24 2.3 : Electronic seal Available Not available Planned

25 2.3 : Electronic seal Countries/ Status Available Not available Planned Field of application Date Tunisia E-GOV 02/01/2020 Iraq Available e-trust services Jordan Algeria 30/09/2017 Palestine 03/01/2019 Oman Sinature Validation Proof Report (2013) SMEs Services (2014) Commercial Registration (CR) Services (2014) Man Power Register (2017)

26 2.4 : Electronic delivery Available Not available Planned

27 2.4 : Electronic delivery Countries/ Status Available Not available Planned Field of application Date Tunisia Iraq Available e-trust services Jordan E-BANKING, E-GOV, E-COMMERCE 02/01/2018 Algeria 30/12/2016 Palestine 03/01/2019 Oman

28 2.5 : Website authentication Available Not available Planned

29 2.5 : Website authentication Countries/ Status Available Not available Planned Field of application Date Tunisia E-banking, E-Gov, E-Commerce Iraq Available e-trust services Government Private sector 09/08/ /01/2014 Jordan 01/01/ Algeria 30/09/2017 Palestine 06/01/2019 Oman 14/06/2013

30 E-trust services Countries / E-trust services E-signature Time stamping Electronic seal Electronic delivery Website authentication Tunisia Iraq Available e-trust services Jordan Algeria Palestine Oman Available Not available Planned

31 Survey -Q Part one: Technical aspect : 3. National "Trusted list" Yes or No If available / Date

32 3. National "Trusted list" Available Not available Planned

33 3. National "Trusted list" Countries/ Status Available Not available Planned Date Tunisia 09/08/2000 Iraq Available e-trust services Jordan 01/06/2017 Algeria Palestine 11/01/2020 Oman 14/06/103

34 Survey -Q Part one: Technical aspect : 4. Are e-ids available in your country? Available Date Not available Planned Date Details

35 4. Are e-ids available in your country? Available Not available Planned

36 4. Are e-ids available in your country? Countries/ Status Available Not available Planned Date Tunisia 01/06/2019 Iraq Government & private sector 02/01/2014 Available e-trust services Jordan 01/06/2016 Algeria Palestine 11/01/2017 Oman Oman eid is owned and operated by Royal Oman Police via the National Civil Status System which had been acrrediated as eid RA in 2013> Two digital certificates; authentication and esigning, are generated in the National/Resident ID by default. The validity period of the certificates is 5- years for the Citizens and 2-years for residents. 14/07/2013

37 Survey -Q Part one: Technical aspect : 5. Is e-passport available in your country? Available Date Not available Planned Date Details

38 5. Is e-passport available in your country? Available Not available Planned

39 5. Is e-passport available in your country? Countries/Status Available Not available Planned Date Tunisia 01/06/2018 Iraq Available e-trust Government services & private sector 02/01/2014 Jordan Algeria Palestine 11/01/2020 Oman epassport is issued and operated by a different authority; Oman Royal Police

40 Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes Legal aspect

41 Survey -Q Part Two: Legal frameworks 1. Legal framework for E-transactions (General) Available Not available Planned : Short term/medium term / Long term

42 1. Legal framework for E-transactions (General) Available Not available Planned

43 Law N Date of issuance Description 1. Legal framework for E-transactions (General) Tunisia /09/2000 Loi n du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000). La loi a relevé la nécessité de naître les textes d application en vue d organiser, en Tunisie, le modèle de confiance dans les échanges et les transactions électroniques : Décret n du 10 octobre 2000, fixant l organisation administrative et financière et les modalités de fonctionnement de l Agence Nationale de Certification Electronique. Décret n du 17 juillet 2001, portant approbation du cahier des charges relatif à l exercice de fournisseur de services de certification électronique. Décret n du 17 juillet 2001, fixant les procédures d obtention de l autorisation d exercice de l activité du fournisseur de services de certification électronique. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les données techniques relatives aux certificats électroniques et leur fiabilité. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les caractéristiques techniques du dispositif de création de la signature électronique. Algeria fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015

44 Jordan Oman Law N Date of issuance Description 1. Legal framework for E-transactions (General) E-transactions 01/01/2015 Law Oman Electronic Law 69/ /05/2008 Oman etransactions Law 69/2008 aims to: 1. Facilitate electronic transactions by using reliable electronic messages or records. 2. Remove any obstacles or challenges encountering electronic transactions resulting from ambiguities associated with writing and signature and enhancing the basic legal structure for secured electronic transactions. 3. Facilitate the transfer of electronic documents and subsequent amendments. 4. Minimize cases of forgery on electronic correspondences and subsequent amendments and committing frauds on electronic transactions 5. Set up unified principles for rules and regulations and standards relating to authentication and safety of electronic correspondences and records. 6. Consolidate the public trust in the safety and authenticity of electronic transactions, correspondences and records. 7. Develop the electronic transactions at the national Gulf and Arabic domain by using the electronic signature.

45 Survey -Q Part Two: Legal frameworks 2. Legal framework defining and organizing the work/tasks for e-certification providers

46 2. Legal framework defining and organizing the work/tasks for e-certification providers Available Not available Planned

47 2. Legal framework defining and organizing the work/tasks for e-certification providers Law N /Title Date of issuance Description أمر عدد 1667 لسنة 2001 مؤر خ في 17 جويلية 2001 يتعل ق بالمصادقة على كراس الشروط الخاص 07/27/2001 بممارسة نشاط مزود خدمات المصادقة اإللكترونية. )الرائد الرسمي للجمهوري ة التونسي ة عدد 60 مؤر خ في 27 جويلية 2001(. أمر عدد 1667 لسنة Tunisia أمر عدد 2001AND 1668 لسنة 2001 Algeria fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015 Iraq 10/18/2012 Oman Oman Electronic Law 69/ /05/2008 Oman etransactions Law 69/2008 aims to: 1. Facilitate electronic transactions by using reliable electronic messages or records. 2. Remove any obstacles or challenges encountering electronic transactions resulting from ambiguities associated with writing and signature and enhancing the basic legal structure for secured electronic transactions. 3. Facilitate the transfer of electronic documents and subsequent amendments. 4. Minimize cases of forgery on electronic correspondences and subsequent amendments and committing frauds on electronic transactions 5. Set up unified principles for rules and regulations and standards relating to authentication and safety of electronic correspondences and records. 6. Consolidate the public trust in the safety and authenticity of electronic transactions, correspondences and records. 7. Develop the electronic transactions at the national Gulf and Arabic domain by using the electronic signature.

48 Survey -Q Part Two: Legal frameworks 3. Legal framework for personal data protection

49 3. Legal framework for personal data protection Available Not available Planned

50 3. Legal framework for personal data protection Law N /Title Date of issuance Description Tunisia /27/2001 Loi organique n du 27 juillet 2004, portant sur la protection des données à caractère personnel Oman Oman Electronic Law 69/2008 Chapter Seven of Oman Electronic Law 69/2008 Protection of Private Data Page 14

51 Survey -Q Part Two: Legal frameworks 4. Legal framework for e-trust services 4.1 : E-signature 4.2 : Time stamping 4.3 : Electronic seal 4.4 : Electronic delivery 4.5 : Website authentication 4.6 : Other

52 4.1 : E-signature Available Not available Planned

53 4.1 : E-signature Law N /Title Date of issuance Description القرار من وزير تكنولوجيات 07/19/2001 االتصال المؤر خ في 19 جويلية 2001 والمتعل ق بضبط المواصفات التقني ة لمنظومة إحداث اإلمضاء االلكتروني القرار من وزير تكنولوجيات Tunisia االتصال المؤر خ في 19 جويلية 2001 Algeria fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015 Iraq LAW 28 of /18/2012 Jordan E-transactions Law 01/01/2015 Palestine Planned Oman Oman Electronic Law 69/ /05/2008 Chapter Four of Oman Electronic Law 69/2008 Methods of Protecting Electronic Transactions Page 8

54 4.2 : Time stamping Available Not available Planned

55 4.3 : Electronic seal Available Not available Planned

56 4.3 : Electronic Seal Law N /Title Date of issuance Description Oman Oman Electronic Law 69/ /05/ Chapter Three of Oman Electronic Law 69/2008 Electronic Transactions and Contract Formation (Article 17 page 7) - Chapter Four of Oman Electronic Law 69/2008 Methods of Protecting Electronic Transactions Page 8

57 4.4 : Electronic delivery Available Not available Planned

58 4.4 : Electronic delivery Law N /Title Date of issuance Description Tunisia /09/2000 Loi n du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000).

59 4.5 : Website authentication Available Not available Planned

60 4.5 : Website authentication Law N /Title Date of issuance Description Tunisia /09/2000 Loi n du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000). La loi a relevé la nécessité de naître les textes d application en vue d organiser, en Tunisie, le modèle de confiance dans les échanges et les transactions électroniques : Décret n du 10 octobre 2000, fixant l organisation administrative et financière et les modalités de fonctionnement de l Agence Nationale de Certification Electronique. Décret n du 17 juillet 2001, portant approbation du cahier des charges relatif à l exercice de fournisseur de services de certification électronique. Décret n du 17 juillet 2001, fixant les procédures d obtention de l autorisation d exercice de l activité du fournisseur de services de certification électronique. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les données techniques relatives aux certificats électroniques et leur fiabilité. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les caractéristiques techniques du dispositif de création de la signature électronique.

61 4.5 : Website authentication Law N /Title Date of issuance Description Oman Oman Electronic Law 69/ /05/2008 Chapter 06 of Oman Electronic Law 69/2008 Provisions Related to Certificates and Authentication Services Article (33) Page 11 and Article (340 Page 12

62 4.6 : Other Tunisia E-trust service Planned Description QR-SIGN, MOBILE SIGN, CEV 2D-DOC PLANNED 2018 Available Not available Planned

63 Arab-African E-certification Authorities Forum AAECA-Forum Survey outcomes Statistics

64 Survey -Q 1. Number of certificates for e-signature 2. Number of certificates for servers Part Three: Statistics Number of e-certificates(generated & Valid) 3. Number of certificates VPN 4. Number of certificates for e-id 5. Other : Generated Valid 2014/2015/2016

65 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 1. Number of certificates for e-signature

66 TITRE DE L'AXE TITRE DE L'AXE 1. Number of certificates for e-signature TUNISIA OMAN 0 Tunisia Oman Generated Tunisia Oman Generated Generated Valid Valid Valid (*) Number of certificates for esigning, authentication and encryption. The corporate token is issued for the government personnel for the official use and it includes 3 certificates for e-signature, authentication and encryption

67 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 2. Number of certificates for servers

68 TITRE DE L'AXE TITRE DE L'AXE 2. Number of certificates for servers OMAN Generated TUNISIA Valid 0 Tunisia Oman Generated Valid Oman Tunisia Generated Valid

69 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 3. Number of certificates VPN

70 TITRE DE L'AXE TITRE DE L'AXE 3. Number of certificates VPN TUNISIA Generated Valid 0 Tunisia Generated 0 Valid 3 0 Tunisia Generated 22 Valid 22

71 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 4. Number of certificates for e-id

72 4. Number of certificates for e-id Oman Generated Valid ,589,935 1,755, ,771,808 1,879, ,218,880 2,718,697

73 Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 5. Other : Generated Valid 2014/2015/2016

74 5. Number of Certificates for Mobile PKI (Mobile ID) Generated Valid Oman OMAN Generated Valid OMAN Generated Valid

75 The setting up of the Arab-African E-certification authorities Forum AAECA-Forum

76 Countries Members in the AAECA-Forum Countries Yes Ongoing Algeria X Iraq Oman Palestine x x x Jordan x Tunisia Sudan x X Yes Ongoing

77 Survey -Q AAECA-Forum 2. Have you already established an agreement on interoperability & mutual recognition with other countries?

78 2. Have you already established an agreement on interoperability & mutual recognition with other countries Tunisia Agreements : SOUDAN BURKINA FASO Algeria Iraq Jordan Oman Interoperability has been successfully done between Oman, Qatar, UAE and Kuwait in IDP of eids in Staging Environments Yes No Planned x x x

79 Survey -Q AAECA-Forum 3. Your Expectations from the AAECA-Forum

80 3. Your Expectations from AAECA-Forum Tunisia Algeria Iraq Jordan Palestine Oman (1) Exchange of successful experiences/best practices & the transfer of expertise between Arab and African countries in the field of e-certification and e-trust services (2) Regional & Interregional Law Harmonization of e-transactions' regulations between Arab and African countries (3) Regional/global trusted lists of Certification Service Providers (4) Inter-regional mutual recognition and Interoperability of e-trust services

81 AAECA-Forum Conclusion Based on the Survey findings, the conclusion that should be drawn, although many countries didn t participate, is the will to coordinate and to joint efforts which was reflected in the recommendations from countries taking part to it.

82 AAECA-Forum The way forward AICTO is committed to achieve this mission We need the support and the commitment of Arab and African countries