Arab-African e-certification Authorities Forum AAECA-Forum Study Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects)
Arab-African E-certification Authorities Forum AAECA-Forum AAECA-Forum Open Multistakeholder Network for e-trust in the Arab & African Regions
Survey Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects) AICTO has launched a survey among Arab & African countries about e-certifications Authorities : Collect data about e-certification and PKI authorities in Arab countries, e-signature, and the available legal and regulatory frameworks governing the e-transactions. Give a clear vision about the state of the art and future needs of Arab countries in the field.
Survey Status of e-certification & e-trust services in the Arab & African Regions (Technical & Legal aspects) Targeted Regions/Countries Region 1 : Arab countries Region 2 : African countries Implementation actors Region 1 : Arab countries : Arab Information and Communication Technologies Organization (AICTO) Region 2 : African Countries : African Telecommunication Union (ATU)
Survey 1. Technical aspect 2. Legal aspect Components 3. Statistics 4. Arab African e-certification authorities Forum (AAECA-Forum)
Survey Part one: Technical aspect : 1. E-certification authorities/ Root certification authorities 2. Available e-trust services Giving an idea about available e-trust services in each country 2.1 : E-signature 2.2 : Time stamping 2.3 : Electronic seal 2.4 : Electronic delivery 2.5 : Website authentication
Survey Part one: Technical aspect : Questions 1. E-certification authorities/ Root certification authorities Exist Doesn't exist Planned Date Authority name Date of Creation objectives Mission 2. Available e-trust services Available Date Not available Planned Date Fields of application Since
Survey -Q Part one: Technical aspect : 3. National "Trusted list" 4. Are e-ids available in your country? 5. Is e-passport available in your country? Available Date Not available Planned Date Details
Survey -Q Part Two: Legal frameworks 1. Legal framework for E-transactions (General) Available Not available Planned : Short term/medium term / Long term Law n /title Date of issuance Description 2. Legal framework defining and organizing the work/tasks for e-certification providers
Survey -Q Part Two: Legal frameworks 3. Legal framework for personal data protection 4. Legal framework for e-trust services 4.1 : E-signature 4.2 : Time stamping 4.3 : Electronic seal 4.4 : Electronic delivery 4.5 : Website authentication 4.6 : Other
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 1. Number of certificates for e-signature 2. Number of certificates for servers 3. Number of certificates VPN 4. Number of certificates for e-id 5. Other : Generated Valid 2014/2015/2016
Survey -Q Part Four : Arab-African e-certification Authorities Forum AAECA-Forum This part is dedicated to Arab and African Countries/E-certification authorities willing to be part of the "Arab-African PKI-Forum"
Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes
Results Algeria, Iraq, Palestine, Tunisia, Oman, Jordan
Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes Technical aspect
Survey -Q Part one: Technical aspect : 1. E-certification authorities/ Root certification authorities
Root certification authorities in the Arab Region Countries having RCA Countries don t have RCA yet Countries planning to set up RCA
2000 Tunisia National Agency Of Digital Certification www.certification.tn E-certification Authories Timeline 2013 Oman National Digital Certification Center (NDCC) http://oman.om/tam 2016 Jordan Jordan National Root CA http://www.pki.jo
Survey -Q Part one: Technical aspect : 2. Available e-trust services Available Date Not available Planned Date Fields of application Since 2.1 : E-signature 2.2 : Time stamping 2.3 : Electronic seal 2.4 : Electronic delivery 2.5 : Website authentication
2.1 : E-signature Available Not available Planned
2.1 : E-signature Countries/ Status Available Not available Planned Field of application Date Tunisia E-banking, E-Gov, E-Commerce 09/08/2000 Iraq Government Private sector Available e-trust services 02/01/2012 Jordan 01/06/2016 Algeria 09/30/2017 Palestine 03/01/2019 Oman 2013 Commercial Registration (CR) Services 2014 Man Power Services ehealth Services SMEs Services 14/06/2013
2.2 : Time stamping Available Not available Planned
2.2 : Time stamping Countries/ Status Available Not available Planned Field of application Date Tunisia 02/01/2008 E-banking, E-Gov, E-Commerce 2008 Iraq Available e-trust services Jordan 01/06/2016 Algeria 09/30/2017 Palestine 03/01/2019 Oman Sinature Validation Proof Report (2013) SMEs Services (2014) Commercial Registration (CR) Services (2014) Man Power Register (2017) 14/06/2013
2.3 : Electronic seal Available Not available Planned
2.3 : Electronic seal Countries/ Status Available Not available Planned Field of application Date Tunisia E-GOV 02/01/2020 Iraq Available e-trust services Jordan Algeria 30/09/2017 Palestine 03/01/2019 Oman Sinature Validation Proof Report (2013) SMEs Services (2014) Commercial Registration (CR) Services (2014) Man Power Register (2017)
2.4 : Electronic delivery Available Not available Planned
2.4 : Electronic delivery Countries/ Status Available Not available Planned Field of application Date Tunisia Iraq Available e-trust services Jordan E-BANKING, E-GOV, E-COMMERCE 02/01/2018 Algeria 30/12/2016 Palestine 03/01/2019 Oman
2.5 : Website authentication Available Not available Planned
2.5 : Website authentication Countries/ Status Available Not available Planned Field of application Date Tunisia E-banking, E-Gov, E-Commerce Iraq Available e-trust services Government Private sector 09/08/2000 02/01/2014 Jordan 01/01/2017 www.jordan.gov.jo Algeria 30/09/2017 Palestine 06/01/2019 Oman 14/06/2013
E-trust services Countries / E-trust services E-signature Time stamping Electronic seal Electronic delivery Website authentication Tunisia Iraq Available e-trust services Jordan Algeria Palestine Oman Available Not available Planned
Survey -Q Part one: Technical aspect : 3. National "Trusted list" Yes or No If available / Date
3. National "Trusted list" Available Not available Planned
3. National "Trusted list" Countries/ Status Available Not available Planned Date Tunisia 09/08/2000 Iraq Available e-trust services Jordan 01/06/2017 Algeria Palestine 11/01/2020 Oman 14/06/103
Survey -Q Part one: Technical aspect : 4. Are e-ids available in your country? Available Date Not available Planned Date Details
4. Are e-ids available in your country? Available Not available Planned
4. Are e-ids available in your country? Countries/ Status Available Not available Planned Date Tunisia 01/06/2019 Iraq Government & private sector 02/01/2014 Available e-trust services Jordan 01/06/2016 Algeria Palestine 11/01/2017 Oman Oman eid is owned and operated by Royal Oman Police via the National Civil Status System which had been acrrediated as eid RA in 2013> Two digital certificates; authentication and esigning, are generated in the National/Resident ID by default. The validity period of the certificates is 5- years for the Citizens and 2-years for residents. 14/07/2013
Survey -Q Part one: Technical aspect : 5. Is e-passport available in your country? Available Date Not available Planned Date Details
5. Is e-passport available in your country? Available Not available Planned
5. Is e-passport available in your country? Countries/Status Available Not available Planned Date Tunisia 01/06/2018 Iraq Available e-trust Government services & private sector 02/01/2014 Jordan Algeria Palestine 11/01/2020 Oman epassport is issued and operated by a different authority; Oman Royal Police
Arab-African E-certification Authorities Network AAECA-Forum Survey outcomes Legal aspect
Survey -Q Part Two: Legal frameworks 1. Legal framework for E-transactions (General) Available Not available Planned : Short term/medium term / Long term
1. Legal framework for E-transactions (General) Available Not available Planned
Law N Date of issuance Description 1. Legal framework for E-transactions (General) Tunisia 83-2000 08/09/2000 Loi n 2000-83 du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000). La loi 2000-83 a relevé la nécessité de naître les textes d application en vue d organiser, en Tunisie, le modèle de confiance dans les échanges et les transactions électroniques : Décret n 2000-2331 du 10 octobre 2000, fixant l organisation administrative et financière et les modalités de fonctionnement de l Agence Nationale de Certification Electronique. Décret n 2001-1667 du 17 juillet 2001, portant approbation du cahier des charges relatif à l exercice de fournisseur de services de certification électronique. Décret n 2001-1667 du 17 juillet 2001, fixant les procédures d obtention de l autorisation d exercice de l activité du fournisseur de services de certification électronique. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les données techniques relatives aux certificats électroniques et leur fiabilité. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les caractéristiques techniques du dispositif de création de la signature électronique. Algeria 15-04 fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015
Jordan Oman Law N Date of issuance Description 1. Legal framework for E-transactions (General) E-transactions 01/01/2015 Law Oman Electronic Law 69/2008 17/05/2008 Oman etransactions Law 69/2008 aims to: 1. Facilitate electronic transactions by using reliable electronic messages or records. 2. Remove any obstacles or challenges encountering electronic transactions resulting from ambiguities associated with writing and signature and enhancing the basic legal structure for secured electronic transactions. 3. Facilitate the transfer of electronic documents and subsequent amendments. 4. Minimize cases of forgery on electronic correspondences and subsequent amendments and committing frauds on electronic transactions 5. Set up unified principles for rules and regulations and standards relating to authentication and safety of electronic correspondences and records. 6. Consolidate the public trust in the safety and authenticity of electronic transactions, correspondences and records. 7. Develop the electronic transactions at the national Gulf and Arabic domain by using the electronic signature.
Survey -Q Part Two: Legal frameworks 2. Legal framework defining and organizing the work/tasks for e-certification providers
2. Legal framework defining and organizing the work/tasks for e-certification providers Available Not available Planned
2. Legal framework defining and organizing the work/tasks for e-certification providers Law N /Title Date of issuance Description أمر عدد 1667 لسنة 2001 مؤر خ في 17 جويلية 2001 يتعل ق بالمصادقة على كراس الشروط الخاص 07/27/2001 بممارسة نشاط مزود خدمات المصادقة اإللكترونية. )الرائد الرسمي للجمهوري ة التونسي ة عدد 60 مؤر خ في 27 جويلية 2001(. أمر عدد 1667 لسنة Tunisia أمر عدد 2001AND 1668 لسنة 2001 Algeria 15-04 fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015 Iraq 10/18/2012 Oman Oman Electronic Law 69/2008 17/05/2008 Oman etransactions Law 69/2008 aims to: 1. Facilitate electronic transactions by using reliable electronic messages or records. 2. Remove any obstacles or challenges encountering electronic transactions resulting from ambiguities associated with writing and signature and enhancing the basic legal structure for secured electronic transactions. 3. Facilitate the transfer of electronic documents and subsequent amendments. 4. Minimize cases of forgery on electronic correspondences and subsequent amendments and committing frauds on electronic transactions 5. Set up unified principles for rules and regulations and standards relating to authentication and safety of electronic correspondences and records. 6. Consolidate the public trust in the safety and authenticity of electronic transactions, correspondences and records. 7. Develop the electronic transactions at the national Gulf and Arabic domain by using the electronic signature.
Survey -Q Part Two: Legal frameworks 3. Legal framework for personal data protection
3. Legal framework for personal data protection Available Not available Planned
3. Legal framework for personal data protection Law N /Title Date of issuance Description Tunisia 2004-63 07/27/2001 Loi organique n 2004-63 du 27 juillet 2004, portant sur la protection des données à caractère personnel Oman Oman Electronic Law 69/2008 Chapter Seven of Oman Electronic Law 69/2008 Protection of Private Data Page 14
Survey -Q Part Two: Legal frameworks 4. Legal framework for e-trust services 4.1 : E-signature 4.2 : Time stamping 4.3 : Electronic seal 4.4 : Electronic delivery 4.5 : Website authentication 4.6 : Other
4.1 : E-signature Available Not available Planned
4.1 : E-signature Law N /Title Date of issuance Description القرار من وزير تكنولوجيات 07/19/2001 االتصال المؤر خ في 19 جويلية 2001 والمتعل ق بضبط المواصفات التقني ة لمنظومة إحداث اإلمضاء االلكتروني القرار من وزير تكنولوجيات Tunisia االتصال المؤر خ في 19 جويلية 2001 Algeria 15-04 fixant les régles générales relatives à la signature et à la certification électronique 02/01/2015 Iraq LAW 28 of 2012 10/18/2012 Jordan E-transactions Law 01/01/2015 Palestine Planned Oman Oman Electronic Law 69/2008 17/05/2008 Chapter Four of Oman Electronic Law 69/2008 Methods of Protecting Electronic Transactions Page 8
4.2 : Time stamping Available Not available Planned
4.3 : Electronic seal Available Not available Planned
4.3 : Electronic Seal Law N /Title Date of issuance Description Oman Oman Electronic Law 69/2008 17/05/2008 - Chapter Three of Oman Electronic Law 69/2008 Electronic Transactions and Contract Formation (Article 17 page 7) - Chapter Four of Oman Electronic Law 69/2008 Methods of Protecting Electronic Transactions Page 8
4.4 : Electronic delivery Available Not available Planned
4.4 : Electronic delivery Law N /Title Date of issuance Description Tunisia 83-2000 08/09/2000 Loi n 2000-83 du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000).
4.5 : Website authentication Available Not available Planned
4.5 : Website authentication Law N /Title Date of issuance Description Tunisia 83-2000 08/09/2000 Loi n 2000-83 du 9 août 2000, relative aux échanges et au commerce électroniques (J.O.R.T. N 64 du 11 août 2000). La loi 2000-83 a relevé la nécessité de naître les textes d application en vue d organiser, en Tunisie, le modèle de confiance dans les échanges et les transactions électroniques : Décret n 2000-2331 du 10 octobre 2000, fixant l organisation administrative et financière et les modalités de fonctionnement de l Agence Nationale de Certification Electronique. Décret n 2001-1667 du 17 juillet 2001, portant approbation du cahier des charges relatif à l exercice de fournisseur de services de certification électronique. Décret n 2001-1667 du 17 juillet 2001, fixant les procédures d obtention de l autorisation d exercice de l activité du fournisseur de services de certification électronique. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les données techniques relatives aux certificats électroniques et leur fiabilité. Arrêté du Ministre des Technologies de le Communication du 19 Juillet 2001 (J.O.R.T n 60), fixant les caractéristiques techniques du dispositif de création de la signature électronique.
4.5 : Website authentication Law N /Title Date of issuance Description Oman Oman Electronic Law 69/2008 17/05/2008 Chapter 06 of Oman Electronic Law 69/2008 Provisions Related to Certificates and Authentication Services Article (33) Page 11 and Article (340 Page 12
4.6 : Other Tunisia E-trust service Planned Description QR-SIGN, MOBILE SIGN, CEV 2D-DOC PLANNED 2018 Available Not available Planned
Arab-African E-certification Authorities Forum AAECA-Forum Survey outcomes Statistics
Survey -Q 1. Number of certificates for e-signature 2. Number of certificates for servers Part Three: Statistics Number of e-certificates(generated & Valid) 3. Number of certificates VPN 4. Number of certificates for e-id 5. Other : Generated Valid 2014/2015/2016
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 1. Number of certificates for e-signature
TITRE DE L'AXE TITRE DE L'AXE 1. Number of certificates for e-signature 2014 2015 2016 14000 18000 12000 16000 11589 14000 10000 12000 8000 10000 6000 8000 5802 4000 6000 4000 2000 2000 TUNISIA 135 90 OMAN 0 Tunisia Oman Generated 6759 348 0 Tunisia Oman Generated 9548 528 Generated Valid Valid 13226 207 Valid 16688 288 (*) Number of certificates for esigning, authentication and encryption. The corporate token is issued for the government personnel for the official use and it includes 3 certificates for e-signature, authentication and encryption
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 2. Number of certificates for servers
TITRE DE L'AXE TITRE DE L'AXE 2. Number of certificates for servers 2014 2015 2016 450 400 403 400 350 350 300 300 250 250 246 200 200 150 150 100 100 50 50 1 1 OMAN Generated TUNISIA Valid 0 Tunisia Oman Generated 211 27 Valid 391 15 0 Oman Tunisia Generated 16 165 Valid 13 354
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 3. Number of certificates VPN
TITRE DE L'AXE TITRE DE L'AXE 3. Number of certificates VPN 2014 2015 2016 3.5 25 26 3 2.5 20 2 15 1.5 10 1 24 5 0.5 TUNISIA Generated Valid 0 Tunisia Generated 0 Valid 3 0 Tunisia Generated 22 Valid 22
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 4. Number of certificates for e-id
4. Number of certificates for e-id Oman Generated Valid 2014 2,589,935 1,755,517 2015 2,771,808 1,879,131 2016 3,218,880 2,718,697
Survey -Q Part Three: Statistics Number of e-certificates(generated & Valid) 5. Other : Generated Valid 2014/2015/2016
5. Number of Certificates for Mobile PKI (Mobile ID) 2014 2015 2016 Generated Valid 250 234 2542 2169 3 200 150 100 1125 4 728 50 25 0 Oman OMAN Generated Valid OMAN Generated Valid
The setting up of the Arab-African E-certification authorities Forum AAECA-Forum
Countries Members in the AAECA-Forum Countries Yes Ongoing Algeria X Iraq Oman Palestine x x x Jordan x Tunisia Sudan x X Yes Ongoing
Survey -Q AAECA-Forum 2. Have you already established an agreement on interoperability & mutual recognition with other countries?
2. Have you already established an agreement on interoperability & mutual recognition with other countries Tunisia Agreements : SOUDAN BURKINA FASO Algeria Iraq Jordan Oman Interoperability has been successfully done between Oman, Qatar, UAE and Kuwait in IDP of eids in Staging Environments Yes No Planned x x x
Survey -Q AAECA-Forum 3. Your Expectations from the AAECA-Forum
3. Your Expectations from AAECA-Forum Tunisia Algeria Iraq Jordan Palestine Oman (1) Exchange of successful experiences/best practices & the transfer of expertise between Arab and African countries in the field of e-certification and e-trust services (2) Regional & Interregional Law Harmonization of e-transactions' regulations between Arab and African countries (3) Regional/global trusted lists of Certification Service Providers (4) Inter-regional mutual recognition and Interoperability of e-trust services
AAECA-Forum Conclusion Based on the Survey findings, the conclusion that should be drawn, although many countries didn t participate, is the will to coordinate and to joint efforts which was reflected in the recommendations from countries taking part to it.
AAECA-Forum The way forward AICTO is committed to achieve this mission We need the support and the commitment of Arab and African countries