Legal relationships in the field of electronic trust services and digital signatures are regulated by the norms of international and national legislation, which provide a broad range of legal rights and obligations of legal entities in general. However, there are many areas of legal relations that are actually carried out by actors, but they are not regulated or insufficiently regulated by law. Thus, today the procedures for cross-border recognition of digital signatures certificates and electronic trust services are not regulated. It is social relations that arise during these procedures and processes that are subject to legal regulation, first of all, in the legislation of Ukraine.Taking into account the aforementioned objective of this article, there is a scientific analysis of the social relations existing in Ukraine in the field of digital signatures and electronic trust services, the development of proposals for the creation of a modern model of legal regulation of the operation of this sphere in a cross-border mode.The development of legislation and the introduction of the proposed new model of public relations will enable the application of modern rules of law for the recognition of foreign digital signature certificates and electronic trust services in a cross-border mode. ; Legal relationships in the field of electronic trust services and digital signatures are regulated by the norms of international and national legislation, which provide a broad range of legal rights and obligations of legal entities in general. However, there are many areas of legal relations that are actually carried out by actors, but they are not regulated or insufficiently regulated by law. Thus, today the procedures for cross-border recognition of digital signatures certificates and electronic trust services are not regulated. It is social relations that arise during these procedures and processes that are subject to legal regulation, first of all, in the legislation of Ukraine.Taking into account the aforementioned objective of this article, there is a scientific analysis of the social relations existing in Ukraine in the field of digital signatures and electronic trust services, the development of proposals for the creation of a modern model of legal regulation of the operation of this sphere in a cross-border mode.The development of legislation and the introduction of the proposed new model of public relations will enable the application of modern rules of law for the recognition of foreign digital signature certificates and electronic trust services in a cross-border mode.
The article is devoted to the definition of "compromise of the personal key of digital signature" in the context of law science. It is shown that although in the scientific and technical literature the problem of compromising the private key of digital signature and its types is presented quite fully, in the legal literature there is no single interpretation of this definition and the legal consequences of compromise. Examples of these definitions in various regulations of Ukraine and other countries are given. It is shown why the resolution of the legal uncertainty of the definition "compromise of digital signature private key" and timely response of the right to digital risks is an urgent problem of legal science. It is shown how the lack of a list of basic signs of personal key compromise in the legislation creates ambiguity in the interpretation by law enforcement agencies, courts and the bar of signs of crimes committed with the use of electronic signatures. It is shown how the existing problems cause distrust of the legislation in the field of electronic signatures, doubts about the reliability of electronic signatures and their private keys, the integrity and reliability of electronic documents signed by them. Examples of this legal problem in the context of relevant court decisions are given. Examples of explicit and implicit compromise of a private key of digital signature and their limits, as well as the legal consequences of compromise are given. Based on the results of the research, appropriate definitions are proposed, which are recommended to be included in the existing version of the Law of Ukraine "On electronic trust services". The authors conclude that this will contribute to: the legal regulation of public relations related to the use of electronic signatures; clear classification of crimes and offenses committed using an electronic signature personal key; increase confidence in the reliability of electronic signatures and electronic documents signed by them, agreements and contracts concluded ...
Introduction of new forms of international cooperation, namely, electronic cross-border cooperation, is one of the priority directions of development of the world community. Electronic cross-border co-operation, including the use of cross-border trusted services, needs legislative regulation today. One of the locomotives of the international law-making process in the field of electronic trust services, electronic signatures is the United Nations Commission on International Trade Law, the International Chamber of Commerce and the Economic Commission for Europe (UNCITRAL, Commission). UNCITRAL approved the Model Law on Electronic Commerce and the Model Law on Electronic Signatures with a Guide to Enactment 2001. These legal acts became the classic basis for the creation of normative and legal acts of almost all countries in the field of e-commerce and electronic signature, laid the general principles of cross-border recognition of certificates of electronic digital signature. Starting in 2014, the UNCITRAL Working Group IV on e-Commerce has taken steps to address legal issues related to the management of identity and trust services. UNCITRAL is considering the process of legal recognition of trust services and digital signatures as a requirement for identifying legal requirements and establishing relevant substantive law in any jurisdictional system.However, at the current stage of development of international and national law in the area of using trust services and digital signatures in the cross-border regime, a number of global problems remain unresolved. The problem of terminology. The problem lies in the fact that national laws or international laws contain a set of concepts and definitions that are significantly different and sometimes of an overly technical nature, which complicates the perception of ordinary citizens. The problem of credential as a component of a digital signature and trust services. As you know, the key components of a digital signature are subscriber data, which is considered as digital credentials. To date, no legislative act addresses the issues of cross-border recognition of digital credentials, namely: who should hold such recognition, which party they should be recognized as the purpose of such mutual recognition, which features should be available for mutual recognition, which restrictions may apply during mutual recognition. Also, outside the scope of legal regulation, there is currently a problem of the mutual recognition of identity data of legal entities, digital devices or digital objects. The problem of trust in electronic services and digital signatures. The possibility of introducing technical mechanisms for ensuring the reliability of trust services exists and can be implemented promptly. However, today there are no international legal mechanisms guaranteeing a certain level and standards of trust in digital services of one of the parties exchanging such services. In many national identification systems, including in Ukraine, so-called "levels of security of trust" are defined as in the European Union ("low", "high" and "basic"). While four levels of trust are used in the United States and in some other countries. The problem of cross-border interoperability. States with different legal culture traditionally diverge in the technical and legal assessment of digital signatures. Common Laws (United States, United Kingdom) do not impose specific technical and legal requirements for a digital signature, nor does it require the mandatory provision of a digital signature at the same time by all parties to the trust service or electronic document. In this case, an electronic signature may be created by anyone and by any technology. In Roman-Germanic legal systems (mainly in European countries), where the legal doctrine traditionally played an essential role, another concept of digital signature has developed. In order to address these issues, Working Group IV, the United Nations Commission on International Trade Law, the International Chamber of Commerce and the Economic Commission for Europe, with the participation of many countries of the world, are exploring the prospects for legal regulation of the recognition of cross-border trust services and digital signatures through the development of common, standardized international legal acts. In its activities, UNCITRAL plans to explore the experience of several projects in the field of electronic trust services: – European Commission, Regulation (EC) No. 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trusted services for electronic transactions within the internal market and repealing Directive 1999/93/EC; – The Eurasian Economic Union, the Eurasian Economic Union Treaty and the Concept for the use of services and legally significant electronic documents in inter-state information interaction; – Asia-Pacific Region, Pan-Asian Alliance for Electronic Commerce Development. Also, Working Group IV examines the existing international instruments aimed at ensuring the mutual recognition of transnational legal effects in the paper environment, such as the Convention, which abolishes the requirement for legalization of foreign official documents "Convention on Apostille" (The Hague, October 5, 1961) and the Protocol on the Uniform Order acting on behalf of the executing authority (Washington, February 17, 1940), which may include appropriate recommendations for minimum elements for the cross-border mutual recognition of UID and trust services. The issue of legal recognition of cross-border trust services has received sufficient attention from different countries. Thus, the Russian Federation proposed a project "Improving the Identity Management System in the Use of Cross-Border Confidence and Common Trust Infrastructure in the Application of Cross-Border Electronic Commerce Agreements". The project is based on the model defined in the Model Law "On Transborder Information Exchange of Electronic Documents" of November 25, 2016. According to the project, it is proposed to create a large cluster of vertically integrated "cross-border trust", which will have three levels of electronic trust services (basic, medium, high). The cluster can have a single international regulator, regulators of intergovernmental unions and national regulators of digital trust services and digital signatures. It is also envisaged to introduce legal levels of regulation of digital trusted services on one or many domain-based basis with the involvement of a third independent trust party, as well as the unification of international and national regulatory frameworks. Instead, the United States considers it necessary in the near future to consider the issue of legal recognition of identification information that has been authenticated in connection with a commercial transaction, namely, that it is a legal recognition of its purpose, requirements, legal support, etc. The proposals of Austria, Belgium, Italy, the United Kingdom of Great Britain and the European Union concern the possibility of establishing agreed levels of security, which are provided through trust services: the first level – with the use of unskilled trust services. The second level with the use of qualified trusted services. The second level of legal consequences will include assimilation, presumption, transfer of the burden of proof to the opposing side, as well as the principle of mutual cross-border recognition for trusted services with the same level of security. Ukraine, as an active member of the global digitalization process, is taking some steps towards updating the legislation on digital signatures and trust services, namely the introduction of the new Law of Ukraine "On Electronic Trust Services". Ukraine, by amending existing legislation, adapts the regulatory framework in accordance with Regulation (EC) No910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trusted services for electronic transactions within the internal market and repealing Directive 1999/93/EU. Today, there are many national and regional concepts and initiatives in the field of trust services, which have already been well developed. They can identify the relevant issues and can serve as a basis for developing an appropriate legal framework at the international level that could be transferred to various existing legal systems. The UNCITRAL Working Group IV on e-Commerce is implementing measures aimed at achieving the following objectives: – promotion of the development of international trade law and the satisfaction of the needs of economic actors in instruments that provide legal certainty for electronic transactions committed by them; – facilitating the harmonization of new legal aspects of projects, within which these issues are currently being resolved at the national or international level, to the more specific and functional content of the general requirements formulated in the current texts of UNCITRAL; – establishing a common legal framework for trust services and digital signatures, including relevant provisions aimed at developing international cross-border operational cooperation in the legal and technical fields. It is expedient for law-makers of Ukraine to take into account the world experience in developing normative legal acts regulating the sphere of trust services and digital signatures, including in the cross-border regime. ; В статье проанализирован законодательный опыт правового регулирования общественных отношений в сфере цифровой подписи и электронных доверительных услуг Комиссии ООН по международному торговому праву Международной торговой палаты и Европейской экономической комиссии UNCITRAL. Изучаются перспективы правового регулирования признания трансграничных доверительных услуг цифровых подписей путем разработки общих, стандартизированных международных правовых актов Рабочей группой IV Комиссии, а также при участии многих стран мира. На сегодня в ЮНСИТРАЛ формируется общее представление решения проблемы трансграничного признания иностранных цифровых подписей и электронных доверительных услуг на основе условия применения хотя бы одного из доктринальных толкований и наличия двух уровней безопасности. Изучено предложение Российской Федерации о введении проекта «Совершенствование системы управления идентификационными данными при использовании трансграничного пространства доверия и общей инфраструктуры доверия в применении к трансграничным электронным коммерческих сделкам». Изучены предложения Австрии, Бельгии, Италии, Соединенного Королевства Великобритании и Европейского Союза относительно возможности установления согласованных уровней безопасности, которые обеспечиваются с помощью доверительных услуг и уровней правовых последствий. Также рассмотрены предложения по применению принципов взаимного трансграничного признания для доверительных услуг, имеющих одинаковый уровень безопасности, и применению правового режима ответственности для квалифицированных поставщиков доверительных услуг. Осуществлен обзор проблемы трансграничного использования цифровых подписей и электронных доверительных услуг, присущих странам с разной юрисдикцией. Исследованы перспективные направления межгосударственного урегулирования сферы цифровых подписей и электронных доверительных услуг на основе примеров и предложений отдельных стран. ; У статті проаналізовано законодавчий досвід правового регулювання суспільних відносин у сфері цифрового підпису й електронних довірчих послуг Комісії ООН із міжнародного торговельного права Міжнародної торгової палати і Європейської економічної комісії UNCITRAL. Вивчаються перспективи правового регулювання визнання транскордонних довірчих послуг і цифрових підписів шляхом розроблення загальних, стандартизованих міжнародних правових актів Робочою групою IV Комісії, а також за участі багатьох країн світу. Сьогодні в ЮНСІТРАЛ формується загальне уявлення вирішення проблеми транскордонного визнання іноземних цифрових підписів та електронних довірчих послуг на основі умови застосування хоча б одного з доктринальних тлумачень і наявності двох рівнів безпеки. Опрацьовано пропозицію Російської Федерації щодо запровадження проекту «Вдосконалення системи управління ідентифікаційними даними під час використання транскордонного простору довіри й загальної інфраструктури довіри в застосуванні до транскордонних електронних комерційних угод». Вивчено пропозиції Австрії, Бельгії, Італії, Сполученого Королівства Великобританії та Європейського Союзу стосовно можливості встановлення узгоджених рівнів безпеки, які забезпечуються за допомогою довірчих послуг, і рівнів правових наслідків. Також розглянуто пропозиції щодо застосування принципів взаємного транскордонного визнання для довірчих послуг, що мають однаковий рівень безпеки, і застосування правового режиму відповідальності для кваліфікованих постачальників довірчих послуг. Узагальнено проблеми транскордонного використання цифрових підписів та електронних довірчих послуг, притаманні країнам із різною юрисдикцією. Досліджені перспективні напрями міждержавного врегулювання сфери цифрових підписів та електронних довірчих послуг на основі прикладів і пропозицій окремих країн.
