What is e-authentication service? What are the conditions for eligibility to provide e-authentication services in Vietnam? - Write Linh (Binh Thuan, Vietnam)
Article table of contents
What is e-authentication service? Conditions for eligibility to provide e-authentication services in Vietnam (Internet image)
Regarding this issue, LawNet would like to answer as follows:
1. What is e-authentication service?
According to Clause 1, Article 26 of Decree 59/2022/ND-CP, the e-authentication service is classified as a conditional industry.
Specifically, electronic authentication refers to an act of confirming or asserting identities attached to an eID holder by accessing, discovering and examining those identities existing in the national population, citizen ID, entry/exit and other database and electronic identification and authentication system, or verifying an eID account created by the electronic identification and authentication system with the help of an electronic authentication service provider in order to affirm value of that eID account (hereinafter referred to as e-authentication).
(Clause 8 Article 3 of Decree 59/2022/ND-CP)
2. Conditions for eligibility to provide e-authentication services in Vietnam
Conditions for eligibility to provide e-authentication services specified in Article 27 of Decree 59/2022/ND-CP are as follows:
(1) Organization and business conditions: Public non-business units and enterprises under the control of People’s Public Security forces.
(2) Personnel conditions
- As an e-authentication service provider, the head of a non-person entity or the legal representative of a business must be a Vietnamese national permanently residing in Vietnam.
- As an e-authentication service provider, the non-person entity or business must employ personnel holding at least undergraduate degrees in information security or information technology or telecommunication electronics majors to be in charge of providing services; running and administering their system; maintaining security for the entire system.
(3) Conditions related to technical expertise, processes for management of services and security or emergency response plans
In order to apply for certificates of eligibility provide e-authentication services, non-person entities and businesses must have their service scheme including the following documents:
- Action plan and process for provision of e-authentication services, including explanations about the information technology system; interpretation of the technical plan in the technological solution aspect;
The plan for storage, assurance of data integrity, security and safety of the service providing system; the plan for protection of data of individuals and non-person entities; the security plan;
The plan for fire safety, response to emergencies, maintenance of stable and smooth working condition of e-authentication services;
- Introduction brochures about their machinery and devices in Vietnam satisfying regulatory fire safety requirements; resistant to flood, inundation, earthquake, electronic interference or unauthorized human access.
3. Responsibilities of e-authentication service providers in Vietnam
Specifically, Clause 1, Article 34 of Decree 59/2022/ND-CP stipulates the responsibilities of e-authentication service providers in Vietnam as follows:
- Render e-authentication services to non-person entities or individuals after entering into service agreements;
- Ensure that information receiving channels are up and access to services is continuous 24 hours in 7 days a week;
- Comply with the regulatory provisions of law on information, network security, cybersecurity, electronic transactions, technical standards and regulations in electronic authentication activities.
- Adhere to the plan and process for providing electronic authentication services that have been reviewed by the Ministry of Public Security;
- Send six-monthly and annual performance reports on e-authentication services to the electronic identification and authentication regulator, or as requested by the electronic identification and authentication regulator.
