keyboard_tab EIDAS 2014/0910 EN
BG CS DA DE EL EN ES ET FI FR GA HR HU IT LV LT MT NL PL PT RO SK SL SV print pdf
- 2 Article 7 Eligibility for notification of electronic identification schemes
- 6 Article 8 Assurance levels of electronic identification schemes
- 1 Article 22 Trusted lists
- 1 Article 23 EU trust mark for qualified trust services
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
ELECTRONIC IDENTIFICATION
CHAPTER III
TRUST SERVICES
SECTION 1
General provisions
SECTION 2
Supervision
SECTION 3
Qualified trust services
SECTION 4
Electronic signatures
SECTION 5
Electronic seals
SECTION 6
Electronic time stamps
SECTION 7
Electronic registered delivery services
SECTION 8
Website authentication
CHAPTER IV
ELECTRONIC DOCUMENTS
CHAPTER V
DELEGATIONS OF POWER AND IMPLEMENTING PROVISIONS
CHAPTER VI
FINAL PROVISIONS
- electronic identification
- electronic identification means
- person identification data
- electronic identification scheme
- authentication
- relying party
- public sector body
- body governed by public law
- signatory
- electronic signature
- advanced electronic signature
- qualified electronic signature
- electronic signature creation data
- certificate for electronic signature
- qualified certificate for electronic signature
- trust service
- qualified trust service
- conformity assessment body
- trust service provider
- qualified trust service provider
- product
- electronic signature creation device
- qualified electronic signature creation device
- creator of a seal
- electronic seal
- advanced electronic seal
- qualified electronic seal
- electronic seal creation data
- certificate for electronic seal
- qualified certificate for electronic seal
- electronic seal creation device
- qualified electronic seal creation device
- electronic time stamp
- qualified electronic time stamp
- electronic document
- electronic registered delivery service
- qualified electronic registered delivery service
- certificate for website authentication
- qualified certificate for website authentication
- validation data
- validation
- electronic_identification 31
- means 21
- article 20
- shall 20
- referred 16
- member 13
- scheme 13
- technical 13
- implementing 11
- assurance 11
- which 11
- state 11
- specifications 10
- qualified 9
- identity 8
- standards 8
- trusted 8
- notifying 8
- acts 7
- person 7
- procedures 7
- under 7
- lists 7
- accordance 6
- level 6
- paragraph 6
- substantial 6
- levels 5
- trust_services 5
- authentication 5
- information 5
- provided 5
- commission 5
- procedure 5
- related 5
- reference 5
- relevant 4
- high 4
- provides 4
- states 4
- thereto 4
- requirements 4
- form 4
- mark 4
- issued 4
- trust 4
- including 4
- context 3
- such 3
- purposes 3
Article 7
Eligibility for notification of electronic_identification schemes
An electronic_identification scheme shall be eligible for notification pursuant to Article 9(1) provided that all of the following conditions are met:
(a) | the electronic_identification means under the electronic_identification scheme are issued:
|
(b) | the electronic_identification means under the electronic_identification scheme can be used to access at least one service which is provided by a public_sector_body and which requires electronic_identification in the notifying Member State; |
(c) | the electronic_identification scheme and the electronic_identification means issued thereunder meet the requirements of at least one of the assurance levels set out in the implementing act referred to in Article 8(3); |
(d) | the notifying Member State ensures that the person_identification_data uniquely representing the person in question is attributed, in accordance with the technical specifications, standards and procedures for the relevant assurance level set out in the implementing act referred to in Article 8(3), to the natural or legal person referred to in point 1 of Article 3 at the time the electronic_identification means under that scheme is issued; |
(e) | the party issuing the electronic_identification means under that scheme ensures that the electronic_identification means is attributed to the person referred to in point (d) of this Article in accordance with the technical specifications, standards and procedures for the relevant assurance level set out in the implementing act referred to in Article 8(3); |
(f) | the notifying Member State ensures the availability of authentication online, so that any relying_party established in the territory of another Member State is able to confirm the person_identification_data received in electronic form. For relying parties other than public sector bodies the notifying Member State may define terms of access to that authentication. The cross-border authentication shall be provided free of charge when it is carried out in relation to a service online provided by a public_sector_body. Member States shall not impose any specific disproportionate technical requirements on relying parties intending to carry out such authentication, where such requirements prevent or significantly impede the interoperability of the notified electronic_identification schemes; |
(g) | at least six months prior to the notification pursuant to Article 9(1), the notifying Member State provides the other Member States for the purposes of the obligation under Article 12(5) a description of that scheme in accordance with the procedural arrangements established by the implementing acts referred to in Article 12(7); |
(h) | the electronic_identification scheme meets the requirements set out in the implementing act referred to in Article 12(8). |
Article 8
Assurance levels of electronic_identification schemes
1. An electronic_identification scheme notified pursuant to Article 9(1) shall specify assurance levels low, substantial and/or high for electronic_identification means issued under that scheme.
2. The assurance levels low, substantial and high shall meet respectively the following criteria:
(a) | assurance level low shall refer to an electronic_identification means in the context of an electronic_identification scheme, which provides a limited degree of confidence in the claimed or asserted identity of a person, and is characterised with reference to technical specifications, standards and procedures related thereto, including technical controls, the purpose of which is to decrease the risk of misuse or alteration of the identity; |
(b) | assurance level substantial shall refer to an electronic_identification means in the context of an electronic_identification scheme, which provides a substantial degree of confidence in the claimed or asserted identity of a person, and is characterised with reference to technical specifications, standards and procedures related thereto, including technical controls, the purpose of which is to decrease substantially the risk of misuse or alteration of the identity; |
(c) | assurance level high shall refer to an electronic_identification means in the context of an electronic_identification scheme, which provides a higher degree of confidence in the claimed or asserted identity of a person than electronic_identification means with the assurance level substantial, and is characterised with reference to technical specifications, standards and procedures related thereto, including technical controls, the purpose of which is to prevent misuse or alteration of the identity. |
3. By 18 September 2015, taking into account relevant international standards and subject to paragraph 2, the Commission shall, by means of implementing acts, set out minimum technical specifications, standards and procedures with reference to which assurance levels low, substantial and high are specified for electronic_identification means for the purposes of paragraph 1.
Those minimum technical specifications, standards and procedures shall be set out by reference to the reliability and quality of the following elements:
(a) | the procedure to prove and verify the identity of natural or legal persons applying for the issuance of electronic_identification means; |
(b) | the procedure for the issuance of the requested electronic_identification means; |
(c) | the authentication mechanism, through which the natural or legal person uses the electronic_identification means to confirm its identity to a relying_party; |
(d) | the entity issuing the electronic_identification means; |
(e) | any other body involved in the application for the issuance of the electronic_identification means; and |
(f) | the technical and security specifications of the issued electronic_identification means. |
Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 22
Trusted lists
1. Each Member State shall establish, maintain and publish trusted lists, including information related to the qualified trust_service providers for which it is responsible, together with information related to the qualified trust_services provided by them.
2. Member States shall establish, maintain and publish, in a secured manner, the electronically signed or sealed trusted lists referred to in paragraph 1 in a form suitable for automated processing.
3. Member States shall notify to the Commission, without undue delay, information on the body responsible for establishing, maintaining and publishing national trusted lists, and details of where such lists are published, the certificates used to sign or seal the trusted lists and any changes thereto.
4. The Commission shall make available to the public, through a secure channel, the information referred to in paragraph 3 in electronically signed or sealed form suitable for automated processing.
5. By 18 September 2015 the Commission shall, by means of implementing acts, specify the information referred to in paragraph 1 and define the technical specifications and formats for trusted lists applicable for the purposes of paragraphs 1 to 4. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 23
EU trust mark for qualified trust_services
1. After the qualified status referred to in the second subparagraph of Article 21(2) has been indicated in the trusted list referred to in Article 22(1), qualified trust_service providers may use the EU trust mark to indicate in a simple, recognisable and clear manner the qualified trust_services they provide.
2. When using the EU trust mark for the qualified trust_services referred to in paragraph 1, qualified trust_service providers shall ensure that a link to the relevant trusted list is made available on their website.
3. By 1 July 2015 the Commission shall, by means of implementing acts, provide for specifications with regard to the form, and in particular the presentation, composition, size and design of the EU trust mark for qualified trust_services. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
whereas