Page:Electronic Transactions Act 2010.pdf/32

---

---

“recognised certificate” means a certificate recognised pursuant to regulations made under section 22(3);

“recognised certification authority” means a certification authority recognised pursuant to regulations made under section 22(3);

“repository” means a system for storing and retrieving certificates or other information relevant to certificates;

“revoke”, in relation to a certificate, means to permanently end the operational period of the certificate from a specified time;

“subscriber” means a person who is the subject named or identified in a certificate issued to him and who holds a private key that corresponds to a public key listed in that certificate;

“suspend”, in relation to a certificate, means to temporarily suspend the operational period of the certificate from a specified time;

“trustworthy system” means computer hardware, software and procedures that—

(a) are reasonably secure from intrusion and misuse;

(b) provide a reasonable level of availability, reliability and correct operation;

(c) are reasonably suited to performing their intended functions; and

(d) adhere to generally accepted security procedures;

“valid certificate” means a certificate that a certification authority has issued and which the subscriber listed in it has accepted;

“verify a digital signature”, in relation to a given digital signature, record and public key, means to determine accurately that—

(a) the digital signature was created using the private key corresponding to the public key listed in the certificate; and

(b) the record has not been altered since its digital signature was created.

(2) In the application of this Act to certificates issued by the Controller and digital signatures verified by reference to those certificates, the Controller shall be deemed to be an accredited certification authority.

Secure electronic record with digital signature

2. The portion of an electronic record that is signed with a digital signature shall be treated as a secure electronic record if the digital signature is a secure electronic signature by virtue of paragraph 3.

Digital signature treated as secure electronic signature

3. When any portion of an electronic record is signed with a digital signature, the digital signature shall be treated as a secure electronic signature with respect to such portion of the record, if—