委员会实施决定(EU) 2015/1506,根据欧洲议会和理事会条例(EU) No 910/2014(内部市场电子交易的电子身份识别和信托服务)第27(5) 款和37(5)款,制定公共部门机构认可的先进电子签名和高级印章形式的规范

技术法规类型:欧盟Eurlex法规 来源:tbtmap

EURLEX ID:32015D1506

OJ编号:OJ L 235, 9.9.2015, p. 37-41

中文标题:委员会实施决定(EU) 2015/1506,根据欧洲议会和理事会条例(EU) No 910/2014(内部市场电子交易的电子身份识别和信托服务)第27(5) 款和37(5)款,制定公共部门机构认可的先进电子签名和高级印章形式的规范

原文标题:Commission Implementing Decision (EU) 2015/1506 of 8 September 2015 laying down specifications relating to formats of advanced electronic signatures and advanced seals to be recognised by public sector bodies pursuant to Articles 27(5) and 37(5) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market (Text with EEA relevance)

分类:13.20.60_信息技术、远程通信和数据处理

文件类型:二级立法 Decision|决定

生效日期:2015-09-29

废止日期:2058-12-31

法规全文:查看欧盟官方文件

L_2015235EN.01003701.xml

9.9.2015   

EN

Official Journal of the European Union

L 235/37


COMMISSION IMPLEMENTING DECISION (EU) 2015/1506

of 8 September 2015

laying down specifications relating to formats of advanced electronic signatures and advanced seals to be recognised by public sector bodies pursuant to Articles 27(5) and 37(5) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market

(Text with EEA relevance)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (1), and in particular Article 27(5) and 37(5) thereof,

Whereas:

(1)

Member States need to put in place the necessary technical means allowing them to process electronically signed documents that are required when using an online service offered by, or on behalf of, a public sector body.

(2)

Regulation (EU) No 910/2014 obliges Member States requiring an advanced electronic signature or seal for the use of an online service offered by, or on behalf of, a public sector body, to recognise advanced electronic signatures and seals, advanced electronic signatures and seals based on a qualified certificate and qualified electronic signatures and seals in specific formats, or alternative formats validated pursuant to specific reference methods.

(3)

To define the specific formats and reference methods, existing practices, standards and Union legal acts should be taken into account.

(4)

Commission Implementing Decision 2014/148/EU (2) has defined a number of the most common advanced electronic signature formats to be supported technically by the Member States, where advanced electronic signatures are required for an online administrative procedure. Establishing the reference formats aims at facilitating the cross-border validation of electronic signatures and at improving the cross-border interoperability of electronic procedures.

(5)

The standards listed in the Annex to this Decision are the existing standards for formats of advanced electronic signatures. Due to the ongoing revision by the standardisation bodies of the long term archival forms of the referenced formats, standards detailing long-term archiving are excluded from the scope of this Decision. When the new version of the referenced standards is available, references to the standards and the clauses on long term archiving will be revised.

(6)

Advanced electronic signatures and advanced electronic seals are similar from the technical point of view. Therefore, the standards for formats of advanced electronic signatures should apply mutatis mutandis to formats for advanced electronic seals.

(7)

Where other electronic signature or seal formats than those commonly technically supported are used to sign or seal, validation means that allow the electronic signatures or seals to be verified across borders should be provided. In order to allow the receiving Member States to be able to rely on those validation tools of another Member State, it is necessary to provide easily accessible information on those validation tools by including the information in the electronic documents, in the electronic signatures or in the electronic document containers.

(8)

Where electronic signature or seal validation possibilities suitable for automated processing are available in a Member State's public services, such validation possibilities should be made available and provided to the receiving Member State. Nonetheless, this Decision should not impede the application of Articles 27(1) and (2) and 37(1) and (2) of Regulation (EU) No 910/2014 when the automated processing of validation possibilities for alternative methods is not possible.

(9)

In order to provide for comparable requirements for validation and to increase trust in the validation possibilities provided by Member States for other electronic signature or seal formats than those commonly supported, the requirements set out in this Decision for the validation tools, draw from the requirements for the validation of qualified electronic signatures and seals referred to in Articles 32 and 40 of Regulation (EU) No 910/2014.

(10)

The measures provided for in this Decision are in accordance with the opinion of the Committee established by Article 48 of Regulation (EU) No 910/2014,

HAS ADOPTED THIS DECISION:

Article 1

Member States requiring an advanced electronic signature or an advanced electronic signature based on a qualified certificate as provided for in Article 27(1) and (2) of Regulation (EU) No 910/2014, shall recognise XML, CMS or PDF advanced electronic signature at conformance level B, T or LT level or using an associated signature container, where those signatures comply with the technical specifications listed in the Annex.

Article 2

1.   Member States requiring an advanced electronic signature or an advanced electronic signature based on a qualified certificate as provided for in Article 27(1) and (2) of Regulation (EU) No 910/2014, shall recognise other formats of electronic signatures than those referred to in Article 1 of this Decision, provided that the Member State where the trust service provider used by the signatory is established offers other Member States signature validation possibilities, suitable, where possible, for automated processing.

2.   The signature validation possibilities shall:

(a)

allow other Member States to validate the received electronic signatures online, free of charge and in a way that is understandable for non-native speakers;

(b)

be indicated in the signed document, in the electronic signature or in the electronic document container; and

(c)

confirm the validity of an advanced electronic signature provided that:

(1)

the certificate that supports the advanced electronic signature was valid at the time of signing, and when the advanced electronic signature is supported by a qualified certificate, the qualified certificate that supports the advanced electronic signature was, at the time of signing, a qualified certificate for electronic signature complying with Annex I of Regulation (EU) No 910/2014 and that it was issued by a qualified trust service provider;

(2)

the signature validation data corresponds to the data provided to the relying party;

(3)

the unique set of data representing the signatory is correctly provided to the relying party;

(4)

the use of any pseudonym is clearly indicated to the relying party if a pseudonym was used at the time of signing;

(5)

when the advanced electronic signature is created by a qualified electronic signature creation device, the use of any such device is clearly indicated to the relying party;

(6)

the integrity of the signed data has not been compromised;

(7)

the requirements provided for in Article 26 of Regulation (EU) No 910/2014 were met at the time of signing;

(8)

the system used for validating the advanced electronic signature provides to the relying party the correct result of the validation process and allows the relying party to detect any security relevant issues.

Article 3

Member States requiring an advanced electronic seal or an advanced electronic seal based on a qualified certificate as provided for in Article 37(1) and (2) of Regulation (EU) No 910/2014, shall recognise XML, CMS or PDF advanced electronic seal at conformance level B, T or LT or using an associated seal container where those comply with the technical specifications listed in the Annex.

Article 4

1.   Member States requiring an advanced electronic seal or an advanced electronic seal based on a qualified certificate as provided for in Article 37(1) and (2) of Regulation (EU) No 910/2014, shall recognise other formats of electronic seals than those referred to in Article 3 of this Decision, provided that the Member State where the trust service provider used by the creator of the seal is established offers other Member States seal validation possibilities, suitable, where possible, for automated processing.

2.   The seal validation possibilities shall:

(a)

allow other Member States to validate the received electronic seals online, free of charge and in a way that is understandable for non-native speakers;

(b)

be indicated in the sealed document, in the electronic seal or in the electronic document container

(c)

confirm the validity of an advanced electronic seal provided that:

(1)

the certificate that supports the advanced electronic seal was valid at the time of sealing, and when the advanced electronic seal is supported by a qualified certificate, the qualified certificate that supports the advanced electronic seal was, at the time of sealing, a qualified certificate for electronic seal complying with Annex III of Regulation (EU) No 910/2014 and that it was issued by a qualified trust service provider;

(2)

the seal validation data corresponds to the data provided to the relying party;

(3)

the unique set of data representing the creator of the seal is correctly provided to the relying party;

(4)

the use of any pseudonym is clearly indicated to the relying party if a pseudonym was used at the time of sealing;

(5)

when the advanced electronic seal is created by a qualified electronic seal creation device, the use of any such device is clearly indicated to the relying party;

(6)

the integrity of the sealed data has not been compromised;

(7)

the requirements provided for in Article 36 of Regulation (EU) No 910/2014 were met at the time of sealing;

(8)

the system used for validating the advanced electronic seal provides to the relying party the correct result of the validation process and allows the relying party to detect any security relevant issues.

Article 5

This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Decision shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 8 September 2015.

For the Commission

The President

Jean-Claude JUNCKER


(1)  OJ L 257, 28.8.2014, p. 73.

(2)  Commission Implementing Decision 2014/148/EU of 17 March 2014 amending Decision 2011/130/EU establishing minimum requirements for the cross-border processing of documents signed electronically by competent authorities under Directive 2006/123/EC of the European Parliament and of the Council on services in the internal market (OJ L 80, 19.3.2014, p. 7).


ANNEX

List of technical specifications for XML, CMS or PDF advanced electronic signatures and the associated signature container

Advanced electronic signatures mentioned in Article 1 of the Decision must comply with one of the following ETSI technical specifications with the exception of clause 9 thereof:

XAdES Baseline Profile

ETSI TS 103171 v.2.1.1. (1)

CAdES Baseline Profile

ETSI TS 103173 v.2.2.1. (2)

PAdES Baseline Profile

ETSI TS 103172 v.2.2.2. (3)

Associated signature container mentioned in Article 1 of the Decision must comply with the following ETSI technical specifications:

Associated Signature Container Baseline Profile

ETSI TS 103174 v.2.2.1 (4)

List of technical specifications for XML, CMS or PDF advanced electronic seals and the associated seal container

Advanced electronic seals mentioned in Article 3 of the Decision must comply with one of the following ETSI technical specifications, with the exception of clause 9 thereof:

XAdES Baseline Profile

ETSI TS 103171 v.2.1.1

CAdES Baseline Profile

ETSI TS 103173 v.2.2.1

PAdES Baseline Profile

ETSI TS 103172 v.2.2.2

Associated seal container mentioned in Article 3 of the Decision must comply with the following ETSI technical specifications:

Associated Seal Container Baseline Profile

ETSI TS 103174 v.2.2.1


(1)  http://www.etsi.org/deliver/etsi_ts/103100_103199/103171/02.01.01_60/ts_103171v020101p.pdf

(2)  http://www.etsi.org/deliver/etsi_ts/103100_103199/103173/02.02.01_60/ts_103173v020201p.pdf

(3)  http://www.etsi.org/deliver/etsi_ts/103100_103199/103172/02.02.02_60/ts_103172v020202p.pdf

(4)  http://www.etsi.org/deliver/etsi_ts/103100_103199/103174/02.02.01_60/ts_103174v020201p.pdf


附件:

P020171219719693680305.pdf

托管标准,您可以接收以下服务:

1 标准定期系统查新,若有最新版本,会以站内短信或邮件的形式通知用户;

2 随时在标准托管页面中查看到该条标准的最新状态;

3 若用户有在学习和科研中的需要,可以在标准托管页面中试阅标准;

4 企业如果需要上新产品,我院及时提供标准查询、采购等方面的支持;

5 为企业在标准制修订、企业良好行为创建以及标准化试点过程中遇到的困难,可联系我院指定相关专家负责进行指导帮助、提供政策咨询;

6 为企业提供标准化政策的解读、标准化知识的推广培训、标准自我公开声明、标准文献的免费查询、企业标准化体系建设等方面的标准化服务;

进入企业标准托管

您可以通过编辑查新模板,批量查询指定标准集的最新情况。我们会通过查询,向您展示您所查询标准的:

1. 准确的标准号及标准名称(我们通过人工智能技术对您提交的标准号进行自动纠正)

2. 标准的最新状态(现行、废止或未发布)

3. 若标准已废止并被新标准替代,会反馈被替代的标准

4. 若您已托管此标准,便可以实时跟踪这个标准的最新状态

标准查新 模板下载

您可以在这里检索全球超过140万条标准,支持上百个国内国际标准组织的标准查询。您也可以在这里检索国内各类国家、部委和地方的法律法规。

更多标准子库在持续建设中。

标准检索

标准资讯点击排行榜 全部

资讯标题点击

[[ n.title ]] [[ n.read ]]

大连标准化公共服务平台

版权:大连标准化研究院有限公司

地址:大连市中山区高原街56号

电话:0411-82740851

大连标准