Launching Egyptian Root CA and Inaugurating E-Signature Dr. Sherif Hazem Nour El-Din Information Security Systems Consultant Root CA Manager, ITIDA

ITIDA -Jan 2010 Drafting an Electronic Signature Law National E-Signature Committee (members): –Ministry of Communications and Information Technology –Ministry of Justice –Ministry of Economy and Foreign Trade –Ministry of Finance –Ministry of Foreign Affairs –Ministry of Interior –Ministry for Administrative Development –Central Bank of Egypt –Cabinet Information & Decision Support Center

E-Signature Law -In 2004, law no. 15 was officially released to help enforce the e-Signature in Egypt and to establish the (Information Technology Industry Development Agency–(ITIDA). -The Executive Directive of the E-signature law issued in May The e-signature law establishes legal recognition of electronically (digitally) signed documents and contracts as well as (unsigned) electronic documents -The establishment of ITIDA supports Egypts e-commerce industry by securing the Internet as a legally viable medium for online financial activities.

Continue…… In 28th, September 2009, Prime Minister Dr. Ahmed Nazif witnessed the launch of E-Signature services for the public and private sectors and the inauguration of the Egyptian Root-CA trust center, marking the e-signature authorization by the Information Technology Industry Development Agency (ITIDA).

Regulating Digital Certificates Awareness and technical support Licensing and auditing Request for digital certificates Digital Certificates Information Technology Industry Development Agency (E-Signature regulator) Client Organizations Digital Certificate Providers Providers

Egyptian E-Signature Infra- Structure National ROOT Certification Authority Country XY Cross recognition Signature Key Holders ( End Users) Gov Employees CSP1 CSP2 CSP3 CSP4 GOV CA Operates Certifies Issues

The Egyptian Root CA -As one of its primary roles, ITIDA operates the Egyptian Root Certificate Authority (Root CA) according to the highest security standards offering a continuous 24hx7 operation (based on the means of a 2nd hot-standby Trust Center). -The national Root CA is the trust anchor for all relying parties within that domain. Furthermore, the national Root CA is the legal and national base upon which all IT applications, E-commerce and E-business Transactions will be affected.

Root CA Key Functions Issues digital certificates for licensed certificate service providers (CSPs) and publish them to be available 24/7. Helps to prove or deny instantaneously the validity of digital certificates of the licensed CSPs by providing both OCSP Service and LDAP directory. Root CA has the rights to stop the operation of any CA in case of security deficiencies. Working as TSA (Time Stamping Authority) for CSPs.

Continue…… Responsible for interoperability between other countries providing a point of communication between Egypt and other nations in relations of E-signature. Auditing all the PKI technical requirements of CSPs against the Egyptian executive directives and all the updated international standards. Offers technical consultations to all the community in the field of Information Security especially in Public key Infrastructure.

Achievements…… Root CA main trust center with 6 IT fortified rooms and more than 40 different types of servers and security equipments has been implemented to operate 24/7 by 100% highly trained Egyptian staff. GOV- CA trust center is implemented and is ready to serve the governmental organizations. Signing an MOU with the German Root CA to facilitate the cross recognition with the German Root CA. Three private CSPs are ISO certified and one of them passed ITIDA audit (financial, legal and technical) and are ready to issue digital certificate private sector under the hood of Egyptian Root CA.

Continue…… The first deployed private CSP has been securely connected to the Root CA main trust center to maintain a copy of all the issued digital certificates and CRLs to maintain client rights in case of disaster. Auditing process by ITIDA is to be continued for the remaining CSPs. Home made E-signature tools are ready to be used –(Egyptian Smart Token (with and without Fingerprint). –E-Signature Applications (Desktop, Web, and Mobile)

Pictures from Reality

ITIDA Cryptography Suite

Smart Token Software

Mobile Phone Application

The Future…… Finalizing the Root CA disaster recover site at the Ministry of finance premises 30 KM apart from the Root CA main site. Doubling the staff to achieve the business continuity. Cross recognizing our Egyptian Root CA with other imitates in other countries. Collaborating with the Egyptian CERT to maintain the work sustainability.

Questions ???????

Thank You…