Issuance of Decree 68 on the use of digital signatures for official purposes in Vietnam
Is the Decree stipulating the use of digital signatures for official purposes in Vietnam been issued yet? What are the contents of a specialized digital signature certificate for official purposes in Vietnam? When is a specialized digital signature certificate for official purposes in Vietnam revoked?
Issuance of Decree 68 on the use of digital signatures for official purposes in Vietnam
On June 25, 2024, the Government issued Decree 68/2024/ND-CP on specialized digital signatures for official purposes.
Decree 68/2024/ND-CP provides detailed regulations on the authentication service for specialized digital signatures for official purposes, the provision, management, and use of specialized digital signatures for official purposes, digital signature certificates for official purposes, and the authentication service for specialized digital signatures for official purposes.
The scope of application of Decree 68/2024/ND-CP includes:
- Agencies and organizations under state agencies, political organizations, socio-political organizations, and public non-business units.
- Officials, civil servants, employees, personnel working in the people's armed forces, and personnel working in essential organizations.
- Other agencies, organizations, and individuals involved in the provision, management, and use of specialized digital signatures for official purposes, digital signature certificates for official purposes, and the authentication service for specialized digital signatures for official purposes.
Decree 68/2024/ND-CP will take effect from August 15, 2024.
Issuance of Decree 68 on the use of digital signatures for official purposes in Vietnam - image from internet
What are the contents of a specialized digital signature certificate for official purposes in Vietnam?
According to Article 7 of Decree 68/2024/ND-CP, the contents of a specialized digital signature certificate for official purposes are as follows:
Contents of the specialized digital signature certificate for official purposes:
1. Name of the organization providing the authentication service for specialized digital signatures for official purposes.
2. Name of the subscriber.
3. Serial number of the specialized digital signature certificate for official purposes.
4. Validity period of the specialized digital signature certificate for official purposes.
5. Public key.
6. Digital signature of the organization providing the authentication service for specialized digital signatures for official purposes.
7. Limitations on the purpose and scope of use of the specialized digital signature certificate for official purposes.
As regulated above, the specialized digital signature certificate for official purposes includes the following contents:
- Name of the organization providing the authentication service for specialized digital signatures for official purposes.
- Name of the subscriber.
- Serial number of the specialized digital signature certificate for official purposes.
- Validity period of the specialized digital signature certificate for official purposes.
- Public key.
- Digital signature of the organization providing the authentication service for specialized digital signatures for official purposes.
- Limitations on the purpose and scope of use of the specialized digital signature certificate for official purposes.
When is a specialized digital signature certificate for official purposes in Vietnam revoked?
According to Article 17 of Decree 68/2024/ND-CP, the specialized digital signature certificate for official purposes shall be revoked in the following cases:
- For all types of specialized digital signature certificates for official purposes:
+ The specialized digital signature certificate for official purposes has expired.
+ Upon a written request from the subscriber, with confirmation from the directly managing agency or organization, in cases where the private key is compromised or suspected to be compromised, the storage device for the private key is damaged, lost, or in other cases of compromised security.
+ Upon a written request from the prosecuting agency, law enforcement agency.
+ Upon a written request from the directly managing agency or organization.
- For specialized digital signature certificates for official purposes of individuals:
+ The specialized digital signature certificate for official purposes has expired.
+ Upon a written request from the subscriber, with confirmation from the directly managing agency or organization, in cases where the private key is compromised or suspected to be compromised, the storage device for the private key is damaged, lost, or in other cases of compromised security.
+ Upon a written request from the prosecuting agency, law enforcement agency.
+ Upon a written request from the directly managing agency or organization.
+ The individual changes their position, and the information about the new position is not consistent with the information in the specialized digital signature certificate for official purposes.
+ The individual retires, resigns, or passes away.
- For specialized digital signature certificates for official purposes of agencies or organizations:
+ The specialized digital signature certificate for official purposes has expired.
+ Upon a written request from the subscriber, with confirmation from the directly managing agency or organization, in cases where the private key is compromised or suspected to be compromised, the storage device for the private key is damaged, lost, or in other cases of compromised security.
+ Upon a written request from the prosecuting agency, law enforcement agency.
+ Upon a written request from the directly managing agency or organization.
+ The agency or organization is dissolved, divided, merged.
- For specialized digital signature certificates for official purposes of devices, services, software:
+ The specialized digital signature certificate for official purposes has expired.
+ Upon a written request from the subscriber, with confirmation from the directly managing agency or organization, in cases where the private key is compromised or suspected to be compromised, the storage device for the private key is damaged, lost, or in other cases of compromised security.
+ Upon a written request from the prosecuting agency, law enforcement agency.
+ Upon a written request from the directly managing agency or organization.
+ The device, service, software ceases operation.
