2. In these Rules, unless the context otherwise requires —| “approved certification authority” means any person or organisation named in the First Schedule that issues a certificate; |
| “asymmetric cryptosystem” means a system capable of generating a secure key pair, consisting of a private key for creating digital signature, and a public key to verify the digital signature; |
“certificate” means a record that at a minimum —| (a) | identifies the appointed certification authority issuing it; | | (b) | names or identifies its subscriber; | | (c) | contains the subscriber’s public key; and | | (d) | is digitally signed by the appointed certification authority issuing it; |
|
| “correspond”, in relation to private or public keys, means to belong to the same key pair; |
“digital signature” means an electronic signature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person having the initial untransformed electronic record and the signer’s public key can accurately determine —| (a) | whether the transformation was created using the private key that corresponds to the signer’s public key; and | | (b) | whether the initial electronic record has been altered since the transformation was made; |
|
| “electronic record” means a record generated, communicated, received or stored by electronic, magnetic, optical, or other means of storage in an information system or for transmission from one information system to another; |
“hash function” means an algorithm mapping or translating one sequence of bits into another, generally smaller, set (the hash result) such that —| (a) | a record yields the same hash result every time the algorithm is executed using the same record as input; | | (b) | it is computationally infeasible that a record can be derived or reconstituted from the hash result produced by the algorithm; and | | (c) | it is computationally infeasible that 2 records can be found that produce the same hash result using the algorithm; |
|
| “key pair”, in an asymmetric cryptosystem, means a private key and its mathematically related public key, having the property that the public key can verify a digital signature that the private key creates; |
| “operation manual” means an operation manual issued by the competent authority under rule 5; |
| “operational period of a certificate” begins on the date and time the certificate is issued by a certification authority (or on a later date and time if stated in the certificate), and ends on the date and time it expires as stated in the certificate or is earlier revoked or suspended; |
| “private key” means the key of a key pair used to create a digital signature; |
| “public key” means the key of a key pair used to verify a digital signature; |
| “relevant electronic service” means the electronic service known as CORENET 2.0 that is used for the submission, service or making of any application, appeal, notice, request or other document and information to or on the competent authority, and for the giving, grant, issue or service of any permission, approval, decision, notice, warrant, order or other document to or on any person by the competent authority; [S 856/2023 wef 18/12/2023] |
| “signed” or “signature”, with its grammatical variations, includes any symbol executed or adopted, or any methodology or procedure employed or adopted, by a person with the intention of authenticating a record, including electronic or digital methods; |
| “subscriber” means a person who is the subject named or identified in a certificate issued to him by a certification authority and who holds a private key that corresponds to a public key listed in that certificate; |
| “subscriber’s information system” means the information system specified by a subscriber to which electronic records may be transmitted by the competent authority to the subscriber; |
“verify a digital signature”, in relation to a given digital signature, record and public key, means to determine accurately —| (a) | that the digital signature was created using the private key corresponding to the public key listed in the certificate; and | | (b) | the record has not been altered since its digital signature was created. |
|
|