Where the licence of the Certifying Authority is suspended or revoked, the
Controller such publish notices of such suspension or revocation, as the case
may be, in the database maintained by him. And where one or more repositories
are specified, the Controller such publish notices of such suspension or
revocation, as the case may be, in all such repositories.
13.7.11 Power To
Delegate (s.27). The Controller may, in writing, authorise the Deputy
Controller, Assistant Controller or any officer to exercise any of the powers of
the Controller under s. 17.
13.7.12 Power to
Investigate Contravention (s. 28). The Controller or any officer authorised by him in his behalf shall take up for
investigation any contravention of the provision of this Act, rules or
regulation made thereunder.
13.7.13 Access to
Computers and data (s. 29). The Controller (or any person authorised by
him) shall, if he has reasonable cause to suspect that any contravention of the
provision of this, rules or regulations has been committed, have access to any
computer system, any apparatus, data or any other material connected with such
system, for the purpose of searching or causing a search to be made for
obtaining any information or data contained in or available to such computer
system. Also he is empowered to direct any person incharge of, or otherwise
concerned with the operation of computer system etc., to provide him with such
reasonable technical and other assistance as he may consider necessary.
13.7.14 Certifying
Authority to follow certain Procedures (s. 30). Every certifying Authority shall- (a) make use of hardware, software, and
procedures that are secure from intrusion and misuse; (b) provide a reasonable
level of reliability in its services which are reasonably suited to the
performance of intended function; (c) adhere to security procedures to ensure
that the secrecy and privacy of the digital signatures are assured; and (d)
observe such other standards as may be specified by regulations.
13.7.16 Display of
licence (s. 32). Every Certifying Authority shall display its licence at a
conspicuous place of the premises in which it carries on its business.
13.7.17
Surrender of licence (s. 33).
Every Certifying Authority whose licence is suspended or revoked shall
immediately after such suspension or revocation, surrender the licence to the
controller.13.7.18 Disclosure (s.34). Every Certifying Authority shall disclose in the manner specified by regulations the following: (a) its Digital Signature Certificate which contains the public key corresponding to the private key used by that certifying Authority to digitally sign another Digital Signature Certificate; (b) any certification practice statement relevant there to; (c) notice of the revocation or suspension of its Certifying Authority Certificate, if any, and (d) any other fact that materially and adversely affects either the reliability of a Digital Signature Certificate, which that Authority has issued, or the Authority's ability to perform its services.
Further, where in the opinion of the Certifying Authority an event has occurred or any situation has arisen which may materially and adversely affect the integrity of its computer system or the conditions subject to which a Digital Signature Certificate was granted, then, the Certifying Authority shall (a) use reasonable efforts to notify any person who is likely to be affected by that occurrence; or (b) act in accordance with the procedure specified in its certification practice statement to deal with such event or situation.
No comments:
Post a Comment