Presented by: Dao Dinh Kha, Dr

1
APKI-C 1st International Symposium on PKI
Application and Development
Xian, China - 21/11/2009
The current status of PKI Implementation of
Vietnam
Presented by Dao Dinh Kha, Dr Ministry of
Information and Communications Vietnam
2
Content

• Introduction
• The legal framework for digital signature
  application
• The current status of PKI implementation
• Conclusion

3
IT application trend in Vietnam

• The current context
• The demand for better service provided public
  sector
• Cross-departmental service delivery electronic
  government
• The demand for better supporting private sector
• Electronic commerce and other electronic
  transactions
• International agreements
• WTO
• APEC
• ASEAN
• All require secure information exchange over the
  internet

4
The need for an infrastructure for information
security

• We see the need of an infrastructure for
  information security
• To build and enable mutual trust needed to
  support widespread use of electronic transactions
• PKI implementation principles
• based on international standards and
  industry-accepted protocols
• Facilitate electronic signatures
• Flexible approach
• Applications
• Administrative activities of state agencies
• Public services for private sector
• E-commerce
• Toward an infrastructure for information security
  to support e-Gov programs

5
The legal framework for ET and PKI

• The Laws on Electronic transactions
• Adopted in 2005
• Based on the template of the laws on electronic
  commerce of UN
• Adopted and promote electronic transactions
• State governance on electronic transactions
  Governments control
• Strategy, policy and plans to apply electronic
  transactions
• Coordination the activities to realize the plans
• Monitoring the service providers
• Managing the infrastructure and standards
• Training, educating and cooperation

6
The legal framework (cont.)

• Decree on Digital Signature and Certification
• Signed in Feb 15th 2007
• Two PKI branches adopted
• PKI for government agencies and institutions
  (internal use)
• PKI for public use
• PKI governance
• Strategy, policy and plan to apply and manage
  digital signatures
• Proposing legal documents
• Managing CAs
• Managing the infrastructure and standards
• Establishing and operating National Root CA (PKI
  for public use)

7
The legal framework (cont.2)

• The Decrees on Electronic transactions in
  banking, finance and commerce fields
• Other legal documents related to ET and PKI
• Laws on Information Technology, 2006
• The promotion of using electronic transactions
• Laws on Standards and Technical norms, 2006
• The Decree on IT application in the business
  activities of state agencies
• Information infrastructure must be developed in a
  manner to support ET
• ET must be secured by digital signature
  application

8
PKI conceptual model of Vietnam
relying parties
relying parties
relying parties
9
Organization

• MIC takes the main responsibility
• in steering and coordinating the state governance
  on electronic transactions
• in the state governance on digital signature and
  digital certification
• Establishing and operating National Root CA
• Other organizations
• MOPS, MOST, VGISC (Now belonged to MOHA)
• VGISC
• responsible for overseeing the implementation of
  the PKI branch for state management

10
PKI implementation status

• Root CAs implementation at MIC
• For public use the services for citizens and
  private sector
• Technical specification
• Indoor approach
• Based on Windows platform and a solution of a
  well known PKI vendor
• Toward meeting WebTrust standards and embedded
  certificates
• Will come into operation in the 1st quarter of
  2008
• Issuing CAs will be developed by private
  companies
• Vietnamese and foreign companies show interest in
• We welcome the participation of all parties

11
PKI implementation status (cont.)

• Several internal-used CAs have been established
• HCM cities, Dong nai,
• State bank, MOF
• The supportive documents are being prepared
• Vietnams digital signature standard
• Vietnams cryptographic standard
• MIC initiative
• Establishment of a national regulation body for
  managing and promoting the use of digital
  signature
• Operation of Root CA
• Regulation and management work
• Long-term plan for digital signature application

12
Conclusion

• Vietnam, as well as its IT development, is going
  toward world (economy) integration
• To meet the international standards and practices
• We consider the interoperability is one of the
  PKI important features
• In Asia and over the world
• We do toward to the direction
• The establishment of ASIA PKI consortium an
  important event

Thank you very much for attention!