































 |
|

Licences under the
Digital Signature Act 1997
Certificate of Recognition
for a Date/Time Stamp Service
Introduction
A way of vouching the exact time when
a computer record (messages, document, or even digital signatures) was created or
last modified is by using a digital date/time stamping system. A digital date/time
stamp is basically a cryptographically unforgeable digital declaration which can
be used as evidence of the date and time a computer record was created. The date/time
stamp can be attached to a digital signature, message or other document if required
by any written law.
Recognised Date/Time Stamp
Services
The Commission issues a certificate of recognition for a date/time stamp service
in two stages:
| a) |
|
The establishment stage; and |
| b) |
|
The operation stage. |
The Commission issues the establishment stage certificate for a period of not exceeding
one year. During the period, a person has to fulfill all the certification requirements
and may apply for the operation stage.
A person is only allowed to carry on or operate as a recognised date/time stamp service
until that person has been issued with the operation stage certificate.
Qualification Requirements
A person intending to carry on or operate as a repository must satisfy the following
requirements:
| a) |
|
It is a body corporate incorporated in Malaysia
or a partnership within the meaning of the Partnership Act 1961 [Act 135]; |
| b) |
|
It maintains a registered office in Malaysia; |
| c) |
|
It has a working capital reasonably sufficient,
according to the requirement of the Commission, to enable it to conduct business
as a Repository; |
| d) |
|
It employs as operative personnel only
persons who:
a. Have not been convicted within the past
fifteen years of an offence involving fraud, false statement or deception; and
b. Have demonstrated knowledge and proficiency in following the requirement of the
Act and its Regulations;
|
| e) |
|
It operates by means of a trustworthy system; |
| f) |
|
It uses a reasonably secure and tamper-proof
mechanism as it’s time-stamping device; |
| g) |
|
It keeps and maintains an archive of documents
that have been time-stamped, irrespective that the contents of the document itself
are not disclosed, within at least the preceding ten years; |
| h) |
|
It complies with the certification, standards
and technical requirements under the Act and its Regulation; and |
| i) |
|
It complies with such other requirement as
the Commission thinks fit. |
Application for Certification of Recognition for Date/Time Stamp Services
| a) |
|
A person fills in Form 1 |
| b) |
|
For the establishment stage, a person must
provide the following information:
- The particular of the applicant
- The anticipated operational costs and
proposed financing;
- Details of the personnel to be employed
and their qualifications, if available;
- The proposed operating procedure; and
- The services to be provided and the fees
and charges to be imposed thereof.
|
| c) |
|
For the operation stage, a person must
provide the following information
- All valid information submitted for the
establishment stage;
- All new information and all the changes
to the information submitted for the establishment stage, if any; and
- A report from a qualified auditor certifying
that the prescribed certification, standards and technical requirements have been
satisfied.
|
| d) |
|
The prescribed fee;
and |
| e) |
|
Such other information or document as the
Commission may require. |

|
 |
|