Voluntary certification authority recognition scheme to come into effect
29 - 01 - 2000

The Government will launch the voluntary certification authority (CA) recognition scheme next month (February) as one of the measures to promote and facilitate the development and wide adoption of e-commerce in Hong Kong.

The introduction of the scheme is to enhance public confidence in electronic transactions and protect consumer interest.

Speaking on the voluntary CA recognition scheme at a luncheon meeting today (Saturday), the Director of Information Technology Services, Mr Lau Kam-hung, said, "The government policy on CAs is to offer maximum assistance in facilitating their smooth operation and to minimise the unnecessary regulations or requirements."

"The Government has therefore planned to launch a voluntary recognition scheme that CAs can apply for government recognition on a voluntary basis," said Mr Lau.

With the enactment of the Electronic Transactions Ordinance (the Ordinance) by the Legislative Council on January 5, a legal framework to promote and facilitate the establishment and operation of recognized CAs has been established.

The Government has also gazetted that the operation of the voluntary CA recognition scheme will come into effect on February 18 this year.

CAs are responsible for the issuance, renewal and revocation of digital certificates which are electronic documents certifying the identity of legal entities participating in electronic transactions and recording their public key information.

They serve as trusted third parties to ensure trust and security in electronic transactions.

With the digital certificates issued by CAs and the use of digital signatures, participants in electronic transactions will be able to authenticate the identity of the parties involved in electronic transactions, ensure the integrity of the messages exchanged, and make sure that the transactions cannot be repudiated.

The Government has taken the lead to establish a public CA through the Hongkong Post.

In addition to the Postmaster General, the private sector is free to set up CAs in Hong Kong to serve the needs of different sectors of the society.

To encourage the private sector to provide CA services, the Government does not impose any mandatory licensing requirement for the sector to set up its CAs.

Under the voluntary CA recognition scheme, CAs may apply for government recognition on a voluntary basis from the Director of Information Technology Services (the Director) who is empowered to be the authority for granting government recognition to CAs under the Ordinance.

On January 14, the Director issued the Code of Practice for Recognized Certification Authorities (the Code of Practice) which specifies the standards and procedures for recognized CAs to carry out their functions.

"A recognized CA must achieve a trust standard acceptable to the Government in its operation," Mr Lau said.

"Failure to comply with the requirements of the Code by a recognized CA may result in suspension or revocation of the recognition granted," he added.

The Information Technology Services Department (ITSD) has set up the Certification Authority Recognition Office to handle the work.

Members of the public can obtain information concerning the recognition of CAs and certificates, the Code of Practice and the CA disclosure records on the web site of ITSD at http://www.itsd.gov.hk/itsd.

Enquiries regarding the voluntary CA recognition scheme and the Code of Practice can be addressed to the Senior Executive Officer, Certification Authority Recognition Office of the Information Technology Services Department either by mail to 15/F, Wanchai Tower, 12 Harbour Road, Wan Chai, Hong Kong, by fax (2802 4549) or by e-mail (caro@itsd.gov.hk).

- END -