Примеры использования Certification services provider на Английском языке и их переводы на Русский язык
{-}
-
Official
-
Colloquial
Ii Certification services provider.
A third alternative structure is built around the so-called"bridge" certification services provider.
A certification services provider typically issues certificates upon application by candidate signatories.
In a PKI context, a contract would usually exist between the signatory and the certification services provider.
It is even conceivable that the certification services provider or the signatory might itself become a"relying party.
There are also closed certification systems,where small groups set up their own certification services provider.
In such a case the certification services provider shall not be liable for damage resulting from this maximum limit being exceeded.
The European Union Directive on electronic signatures does not establish a cap for the liability that the certification services provider may incur.
Whether or not for the certification services provider such a duty exists in respect of all possible relying parties is not entirely clear.
It should be noted that the express orimplied duties of the relying party are not irrelevant for the certification services provider.
The certification services provider could also incur liability for failing to suspend or revoke a compromised certificate.
In this case, there will essentially be three parties involved, namely the certification services provider, the signatory and the relying third party.
Unlike a certification services provider in a"mesh" PKI, a"bridge" certification services provider does not issue certificates directly to users.
Another point of interest concerns the nature of loss recoverable from a signatory or certification services provider.
All these activities may expose a certification services provider to a varying degree of liability, depending on the applicable law.
To assure the authenticity of the certificate with respect to both its contents and its source, the certification services provider digitally signs it.
If an application meets the certification services provider's criteria, the certification services provider may issue a certificate.
Complex issues may arise especially in those cases where certification is provided by a dedicated third party, such as a certification services provider.
Where a timely revocation service is offered, the certification services provider is obliged to ensure its availability.
A certification services provider would be placed under a duty to request the revocation of its own certificate, if its signature creation data is compromised.
In this case,the issue at stake is to determine what is the spectrum of persons to whom a certification services provider(or the signatory for that matter) would owe a duty of care.
Depending on the circumstances, a"relying party" might thus be any person having ornot a contractual relationship with the signatory or the certification services provider.
Lastly, the relations between the certification services provider and the relying third party would in most cases not be based on contract.
The situation of the relying party is a peculiar one, because it is unlikely that either the signatory or the certification services provider could be damaged by an act or omission of the relying party.
Under this standard, the signatory or the certification services provider will be liable to any person for whom reliance on the false representations was reasonably foreseeable;
Recognition would be based on assessment of the other PKI's accreditation process rather than assessing each individual certification services provider accredited by the other PKI.
As a consequence, the speed with which the certification services provider revokes or suspends a signatory's certificate following a request from the signatory is critical.
If a user community implements a trust domain in the form of a hierarchical PKI,the"bridge" certification services provider will establish a relationship with the root authority of that PKI.
In addition, the certification services provider is expected to exercise reasonable care to ensure the accuracy and completeness of all material representations it makes in connection with a certificate.
As indicated earlier, the UNCITRAL Model Law on Electronic Signatures assumes that the certification services provider may issue various levels of certificates with varying degrees of reliability and security.