IM IMPLEMENTATION OF DIG IGIT ITAL SIG IGNATURE IN IN THE AVIA - PowerPoint PPT Presentation

IM IMPLEMENTATION OF DIG IGIT ITAL SIG IGNATURE IN IN THE AVIA IATION IN INDUSTRY 13 13 OCTOBER 2017

1. What is Digital Signature? 2. Why use Digital Certificate? 3. Digital Signature Act 1997 4. Digital Signature Regulations 1998 5. Protection by Law 6. CA Reliance Limit 7. Other Local Bylaws 8. International Aviation Advisory Circular

WHAT IS A DIGITAL SIGNATURE? A digital signature (standard electronic signature) takes the concept of traditional paper-based signing and turns it into an electronic "fingerprint. ” This "fingerprint,” or coded message, is unique to both the document and the signer and binds both of them together. A digital signature ensures the authenticity of the signer. Any changes made to the document after it has been signed invalidate the signature, thereby protecting against signature forgery and information tampering. As such, digital signatures help organizations sustain signer authenticity, accountability, data integrity and the non-repudiation of signed electronic documents and forms.

WHY USE DIG IGIT ITAL CERTIF IFICATE? Digital certificates address a wide range of administrative and business processes that require proof of the identity of participants in a transaction; proof that the contents of communications have not been tampered with; and protection of sensitive or restricted data. In other words, digital certificate will address the three critical elements in Internet security, as follows:  Authentication  Integrity and Confidentiality  Non-Repudiation

WHY USE DIG IGIT ITAL CERTIFICATE? (cont’d)  Provides identifying information  Forgery resistant  Can be verified as it is issued by a CA which acts as a trusted third party

DSA 1997 DSR 1998 and 1 Digital Signature Act 1 Digital Signature Regulation Enforced on 1 st October 1998 Enforced on 1 st October 1998 2 2 In simple term they are the enabling law that allows for the development of, amongst others, e-commerce by providing an avenue for secure on-line transactions through the use of digital signatures. Section 62 (2) of DSA 1997 states that: Notwithstanding any written law to the contrary – (a) a document signed with a digital signature in accordance with this Act shall be as legally binding as a document signed with a handwritten signature, an affixed thumbprint or any other mark; and (b) a digital signature created in accordance with this Act shall be deemed to be a legally binding signature.

PROTECTION BY LAW Integrity and To Provide Legal Security of Status of Online Information Transaction DSA 1997 & DSR 1998 Privacy and Prevention of Confidentiality Cyber Crime of Information

Certification Authority (C (CA) Reliance Li Limit POS DIGICERT shall be liable for the issued certificates to an amount not exceeding the following: Class of certificate and its Reliance limit/ Liability Cap • Class 1 RM500.00 • Class 2 RM2,000.00 (Basic) • Class 2 RM25,000.00 (Enhanced) RM50,000.00 (Server) Up to RM25,000 (Sub CA)

OTHER LOCAL BYLAWS ON THE USE OF DIG IGITAL SIG IGNATURES SABAH ELECT CTRONIC GOVERNMENT ACT CTIVITIES ENACT CTMENT 2014 (E (EGAE)  An Enactment to provide for legal recognition of electronic messages in dealings between the Government and the public, the use of electronic messages to fulfill legal requirements and to enable and facilitate the dealings through the use of electronic means and other matters connected therewith.  Section 13 (3) - The Digital Signature Act 1997 [Act 562] shall continue to apply to any digital signature used as an electronic signature in any Government activities.  Section 11 (1) Formation and validity of contract - In the formation of a contract, the communication of proposals, acceptance of proposals, and revocations of proposals and acceptances or any related communication may be expressed by an electronic message.

IN INTERNATIONAL ADVISORIES ON THE USE OF DIG IGITAL SIG IGNATURES nd JU 22 nd US Dep epart rtment of of Trans ansport rtatio ion, Fed ederal Avia viatio ion Adm dmin inistratio ion (F (FAA) – 22 JUNE 2016 Advisory Circular on Electronic Signatures / Electronic Recordkeeping / Electronic Manuals PURPOSE? - This advisory circular (AC) provides “approval” or “acceptance” guidelines for electronic signature, electronic recordkeeping, and electronic manual systems/programs. The scope of this AC is intended for entities regulated by the Federal Aviation Administration’s (FAA) Flight Standards Service (AFS).

SCOPE OF DOCUMENTS COVERED UNDER THE FAA’S AC? Sign ignatu tures, records, and manuals as per r th the foll ollowin ing categorie ies:

THANK YOU