István Rényi Communication Authority, Hungary Panel 2: „ Development and market uptake of standards of the EESSI programme” Republic of Hungary

EESSI Seminar, Panel 2, Budapest, 8 May, Overview  Current activities at HIF regarding –supervision and registration of CSPs issuing QCs, and/or performing qualified TSA. –registration of SSCDs and attestation bodies  Plans for interoperability testing  Plans for the adoption of e-sign standards HIF:Communication Authority, Hungary CSP:Certification Service Provider QC:Qualified Certificate TSA:Time Stamping Authority SSCD:Secure Signature Creation Device

EESSI Seminar, Panel 2, Budapest, 8 May, Supervision of CSPs/TSAs (1)  Specifying the baseline requirements I. Policy rqs, CSP/TSA operation, processes, management, personnel, financial rqs. Heavily relying on: - ETSI TS : Policy rqs for Certificn Authorities issuing QCs - ETSI STF 178-T1: Policy rqs for Time-Stamping Auth’s II. Physical, environmental and IT security rqs. Also relying on CEN/ISSS’s Area D1: Trustworthy systems... III.Sample Certificate Practice Statement  Supervising body Body being set up at HIF, will be empowered to carry out all obligatory tasks

EESSI Seminar, Panel 2, Budapest, 8 May, Supervision of CSPs/TSAs (2)  Process of supervision notification  self declaration  analysis of declarn docus  checking of ALL requirements by expert team  Successful supervision results in registration Entered into registry: –ID of Service Provider entitled to issue QCs/QTSs –ID of Certificate Policies  Supervision repeated on a yearly basis

EESSI Seminar, Panel 2, Budapest, 8 May, Attestation of SCDs  Attested SCDs (SSCDs), those meeting essential sec rqs are entered into registry  Attestation process: –Organisation acquires accreditation from NAB –Accredited body applies for designation by sectoral minister –Designated body, carrying out conformity assesment may attest SCDs - based on inspection results of accredited laboratories –Registration + supervision of designated bodies

EESSI Seminar, Panel 2, Budapest, 8 May, Plans for interoperability testing  Aim: promoting interoperability between PKI related products, and developing best practice by bringing together the various standards based technologies  Testbed project to be managed by HIF  Participants (CSPs, client application developers, users, government, etc.) entering on own cost  Expected benefit: change in the public and industry perception of PKI interoperability

EESSI Seminar, Panel 2, Budapest, 8 May, Adoption of e-sign standards  Responsible organization: Hungarian Standards Institution (MSZT) About to establish E-Sign Working Group  Digest of all available EESSI deliverables by September, 2001  Adoption (and translation) of enacted ETSI- SEC/ESI standards  Adoption of CEN/ISSS standards Translations subject to budgetary constraints - priorities to be set