Wednesday, 23 April 2014

13.7.10 (Notice of suspension of revocation of licence )

Where the licence of the Certifying Authority is suspended or revoked, the Controller such publish notices of such suspension or revocation, as the case may be, in the database maintained by him. And where one or more repositories are specified, the Controller such publish notices of such suspension or revocation, as the case may be, in all such repositories.

13.7.11 Power To Delegate (s.27). The Controller may, in writing, authorise the Deputy Controller, Assistant Controller or any officer to exercise any of the powers of the Controller under s. 17.

13.7.12 Power to Investigate Contravention (s. 28). The Controller or any officer authorised by him in his behalf shall take up for investigation any contravention of the provision of this Act, rules or regulation made thereunder.

13.7.13 Access to Computers and data (s. 29). The Controller (or any person authorised by him) shall, if he has reasonable cause to suspect that any contravention of the provision of this, rules or regulations has been committed, have access to any computer system, any apparatus, data or any other material connected with such system, for the purpose of searching or causing a search to be made for obtaining any information or data contained in or available to such computer system. Also he is empowered to direct any person incharge of, or otherwise concerned with the operation of computer system etc., to provide him with such reasonable technical and other assistance as he may consider necessary.

13.7.14 Certifying Authority to follow certain Procedures (s. 30). Every certifying Authority shall- (a) make use of hardware, software, and procedures that are secure from intrusion and misuse; (b) provide a reasonable level of reliability in its services which are reasonably suited to the performance of intended function; (c) adhere to security procedures to ensure that the secrecy and privacy of the digital signatures are assured; and (d) observe such other standards as may be specified by regulations.

13.7.16 Display of licence (s. 32). Every Certifying Authority shall display its licence at a conspicuous place of the premises in which it carries on its business.

13.7.17 Surrender of licence (s. 33). Every Certifying Authority whose licence is suspended or revoked shall immediately after such suspension or revocation, surrender the licence to the controller.

13.7.18 Disclosure (s.34). Every Certifying Authority shall disclose in the manner specified by regulations the following: (a) its Digital Signature Certificate which contains the public key corresponding to the private key used by that certifying Authority to digitally sign another Digital Signature Certificate; (b) any certification practice statement relevant there to; (c) notice of the revocation or suspension of its Certifying Authority Certificate, if any, and (d) any other fact that materially and adversely affects either the reliability of a Digital Signature Certificate, which that Authority has issued, or the Authority's ability to perform its services.

Further, where in the opinion of the Certifying Authority an event has occurred or any situation has arisen which may materially and adversely affect the integrity of its computer system or the conditions subject to which a Digital Signature Certificate was granted, then, the Certifying Authority shall (a) use reasonable efforts to notify any person who is likely to be affected by that occurrence; or (b) act in accordance with the procedure specified in its certification practice statement to deal with such event or situation.

No comments:

Post a Comment