IM IMPLEMENTATION OF DIG IGIT ITAL SIG IGNATURE IN IN THE AVIA - - PowerPoint PPT Presentation

IM IMPLEMENTATION OF DIG IGIT ITAL SIG IGNATURE IN IN THE AVIA IATION IN INDUSTRY

13 13 OCTOBER 2017

1. What is Digital Signature? 2. Why use Digital Certificate? 3. Digital Signature Act 1997 4. Digital Signature Regulations 1998 5. Protection by Law 6. CA Reliance Limit 7. Other Local Bylaws 8. International Aviation Advisory Circular

WHAT IS A DIGITAL SIGNATURE?

A digital signature (standard electronic signature) takes the concept of traditional paper-based signing and turns it into an electronic "fingerprint.” This "fingerprint,”

• r coded message, is unique to both the document and the signer and binds both of

them together. A digital signature ensures the authenticity of the signer. Any changes made to the document after it has been signed invalidate the signature, thereby protecting against signature forgery and information tampering. As such, digital signatures help organizations sustain signer authenticity, accountability, data integrity and the non-repudiation of signed electronic documents and forms.

Digital certificates address a wide range of administrative and business processes that require proof of the identity of participants in a transaction; proof that the contents of communications have not been tampered with; and protection of sensitive or restricted

• data. In other words, digital certificate will address the three critical

elements in Internet security, as follows:  Authentication  Integrity and Confidentiality  Non-Repudiation

WHY USE DIG IGIT ITAL CERTIF IFICATE?

 Provides identifying information  Forgery resistant  Can be verified as it is issued by a CA which acts as a trusted third party

WHY USE DIG IGIT ITAL CERTIFICATE? (cont’d)

Digital Signature Act Digital Signature Regulation Enforced on 1st October 1998 Enforced on 1st October 1998 In simple term they are the enabling law that allows for the development of, amongst others, e-commerce by providing an avenue for secure on-line transactions through the use of digital signatures. Section 62 (2) of DSA 1997 states that: Notwithstanding any written law to the contrary – (a) a document signed with a digital signature in accordance with this Act shall be as legally binding as a document signed with a handwritten signature, an affixed thumbprint or any other mark; and (b) a digital signature created in accordance with this Act shall be deemed to be a legally binding signature.

DSA 1997

and

DSR 1998

1 2 1 2

PROTECTION BY LAW

Integrity and Security of Information To Provide Legal Status of Online Transaction Privacy and Confidentiality

• f Information

Prevention of Cyber Crime

DSA 1997 & DSR 1998

POS DIGICERT shall be liable for the issued certificates to an amount not exceeding the following: Class of certificate and its Reliance limit/ Liability Cap

• Class 1

RM500.00

• Class 2

RM2,000.00 (Basic)

• Class 2

RM25,000.00 (Enhanced) RM50,000.00 (Server) Up to RM25,000 (Sub CA)

Certification Authority (C (CA) Reliance Li Limit

OTHER LOCAL BYLAWS ON THE USE OF DIG IGITAL SIG IGNATURES

SABAH ELECT CTRONIC GOVERNMENT ACT CTIVITIES ENACT CTMENT 2014 (E (EGAE)

 An Enactment to provide for legal recognition of electronic messages in dealings between the Government and the public, the use of electronic messages to fulfill legal requirements and to enable and facilitate the dealings through the use of electronic means and other matters connected therewith.  Section 13 (3) - The Digital Signature Act 1997 [Act 562] shall continue to apply to any digital signature used as an electronic signature in any Government activities.  Section 11 (1) Formation and validity of contract - In the formation of a contract, the communication of proposals, acceptance of proposals, and revocations of proposals and acceptances or any related communication may be expressed by an electronic message.

IN INTERNATIONAL ADVISORIES ON THE USE OF DIG IGITAL SIG IGNATURES

US Dep epart rtment of

• f Trans

ansport rtatio ion, Fed ederal Avia viatio ion Adm dmin inistratio ion (F (FAA) – 22 22nd

nd JU

JUNE 2016 Advisory Circular on Electronic Signatures / Electronic Recordkeeping / Electronic Manuals

PURPOSE? - This advisory circular (AC) provides “approval” or “acceptance” guidelines for electronic signature, electronic recordkeeping, and electronic manual systems/programs. The scope of this AC is intended for entities regulated by the Federal Aviation Administration’s (FAA) Flight Standards Service (AFS).

SCOPE OF DOCUMENTS COVERED UNDER THE FAA’S AC? Sign ignatu tures, records, and manuals as per r th the foll

• llowin

ing categorie ies:

THANK YOU