About the CCA
The Ministry of Digital Transformation of Ukraine (Ministry of Digital Transformation) is the main authority in the system of central executive bodies that ensures the formation and implementation of state policy in the fields of electronic identification and electronic trust services.
- The powers of the central executive body, which ensures the formation and implementation of state policy in the fields of electronic identification and electronic trust services, are defined in Article 7 of the Law of Ukraine "On Electronic Identification and Electronic Trust Services" (hereinafter - the Law), among them:
- ensuring mutual recognition of Ukrainian and foreign certificates of public keys and electronic signatures that are used to provide legally significant electronic services;
- approval of time synchronization procedures with Coordinated Universal Time (UTC) that were elaborated by trust services providers;
- elaboration of draft legal acts in the fields of electronic identification and electronic trust services;
- conducting research on the current state and prospects for development in the fields of electronic identification and electronic trust services, conducting an analysis of information on the activities of qualified trust services providers, their separate registration points and the Certification Center, providers of electronic identification services, in the manner established by it;
- approval of regulations of work (practice statement) of qualified trust services providers and legal entities, natural persons - entrepreneurs who intend to provide electronic trust services, sending copies of the specified documents to the supervisory body;
- based on the results of compliance assessment procedures, the analysis of documents on the compliance of electronic trust services providers, based on the results of which a decision is made to enter information about them into the Trusted List.
- The central executive body, which ensures the formation and implementation of state policy in the fields of electronic identification and electronic trust services, performs the functions of a central certification authority by providing free administrative services for entering information on legal entities and natural persons - entrepreneurs who intend to provide qualified electronic trust services, to the Trusted List, making changes to the Trusted List.
- Technical and technological support for the performance of the functions of the Central Certification Authority, the integrated electronic identification system is carried out by the administrator of the information and communication system of the Central Certification Authority and the integrated electronic identification system, which determines the state enterprise belonging to the management sphere of the Central Executive body, which ensures the formation and implements state policy in the fields of electronic identification and electronic trust services.
- The administrator of the information and communication system of the Сentral Сertification Authority provides technical and technological support for the performance of the following functions:
- the functioning of the software and hardware complex of the Central Certification Authority and the protection of the information processed in them, in accordance with the requirements of the law;
- functioning of the official website of the Сentral Сertification Authority;
- functioning on the official website of the Сentral Сertification Authority of the electronic service designed for the creation, verification and validation of an electronic signature and electronic seal and its compliance with the requirements of Articles 18 and 19 of the Law;
- maintenance of the Trusted List;
- maintaining a register of valid, placed on hold or revoked public key certificates, which were created by the central certification authority, in accordance with the procedure established by the central executive authority, which ensures the formation and implementation of state policy in the fields of electronic identification and electronic trust services;
- generation of a key pair and creation of self-signed certificates of the electronic seal of the Central Certification Authority;
- provision of qualified electronic trust services to trust services providers using a self-signed certificate of the Central Certification Authority of the electronic seal designated for the provision of such services;
- use of the information and communication system of the Central Certification Authority for verification an validation of Ukrainian and foreign public key certificates and electronic signatures used to provide legally significant electronic services;
- provision of a service of the transmission of accurate time signals synchronized with the State standard of time and frequency units;
- receiving and storing documented information, created qualified public key certificates, information from the register of valid, placed on hold and revoked qualified public key certificates in case of termination of the activity of providing qualified electronic trust services by QTSPs;
- round-the-clock access to the register of valid, plased on hold and revoked public key certificates and to information about the status of public key certificates through public electronic communication networks;
- withdroing, placing on hold and and renewal of qualified public key certificates in the cases stipulated by this Law;
- ensuring interoperability and technological neutrality of technical solutions, as well as preventing their discrimination;
- processing and publication of the results of the analysis of the current state and development prospects in the fields of electronic identification and electronic trust services in accordance with the procedure established by the central executive body, which ensures the formation and implementation of state policy in the fields of electronic identification and electronic trust services;
- performing other functions in the field of electronic trust services defined by law.
According to Article 16 of the Law of Ukraine "On Electronic Identification and Electronic Trust Services", an electronic trust services include:
- creation, verification and validation of an advanced electronic signature or seal;
- creation, verification and validation of the electronic signature or seal certificate;
- creation, verification and validation of the website authentication certificate;
- creation, verification and validation of the electronic time stamp;
- registered electronic delivery;
- preservation of advanced electronic signatures, seals, electronic timestamps and certificates associated with these services.
Electronic trust services are provided, as a rule, on a contractual basis by electronic trust services providers. Each service that is part of the electronic trust services can be provided individually or in combination.
Qualified Trust Services Provider - a legal entity regardless of organizational and legal form and form of ownership, a natural person - entrepreneur who provides one or more electronic trust services, whose activities meet the requirements of the Law of Ukraine "On electronic identification and trust services" and information about that is included in Trusted list.