ter successfully completing a rigorous audit covering security standards, operational policies and procedures, compliance with the Electronic Transactions Act and financial standing.
Issued by the Controller of Certification Authorities (CCA), Mr Leong Keng Thai, who is also the Deputy Chief Executive at the IDA, the licence is a strong validation of Netrust’s stringent certification practices and security procedures.
Set up in May 1997, Netrust adopts the Public Key Infrastructure (PKI) technology in the issuance of digital certificates that can positively identify an individual or a server in the faceless Internet. PKI is generally acknowledged as the best solution available today because it addresses the key issues of authentication, confidentiality, integrity and non-repudiation required for secure e-commerce transactions. In addition to its proprietary platform, Netrust also issues open standard certificate types for Microsoft and Netscape Web browsers and servers, and for VPN devices and applications.
Targeted at business clients such as government organisations and private enterprises, Netrust currently has nearly 70,000 active digital certificate users. As a testament to its confidence in its processes and technology solutions, Netrust now offers liability limits of up to S$100,000, a significant increase from its previous limit of S$1,000.
“The CA licence affirms our commitment to offer the highest levels of integrity and security so that users may proceed online as confidently as they would offline”, said Mr Foo Jong Ai, CEO of Netrust Pte Ltd.
“Netrust plays an important role as a licensed third party CA, especially when a higher level of security is required and user IDs and passwords alone are not adequate measures for authenticating the identity of users and for securing transactions over open networks.” He added.
With the CA licence, parties relying on Netrust certificates enjoy the benefits of Evidentiary Presumption. If the service of an unlicensed CA is used, the onus is on the user to prove that the digital signature was created under conditions that render it trustworthy and binding. Evidentiary Presumption hence assures online merchants of the legality and security of their transactions when they use signatures generated by Netrust certificates to validate electronic contracts.
“As a licensed Certification Authority, Netrust is well poised to offer members of the online business community a guaranteed level of security,” said Mr Leong,” This will go towards reaffirming Singapore’s conducive environment for e-commerce and promote confidence in e-transactions.”
Notes:
Certification Authority (CA) - A CA is a relied-upon entity that issues, publishes, suspends and revokes digital certificates. The CA's basic role is to verify and vouch for the identity of subscribers and to provide certificate management services. A CA acts like a trusted electronic notary public, telling everyone who the valid users are and what their digital signatures should look like. There are currently two CAs operating in Singapore - Netrust Pte Ltd and ID.Safe Pte Ltd.
Public Key Infrastructure (PKI) - Widely recognised as the most secure platform for e-Commerce transactions. It is also by far the most matured solution that addresses all four key elements of security: authentication, non-repudiation, confidentiality and integrity. A PKI refers to the whole system of digital certificates, certificate servers and CAs.
Controller of Certification Authorities (CCA) - The Electronic Transactions Act (Cap.88) (ETA) and the Electronic Transactions (Certification Authority) Regulations (ET(CA)R) provide for a voluntary licensing regime of CAs and empower the CCA to regulate and license the activities of CAs in Singapore.
Digital Certificate - A digitally signed packet of information with attributes identifying the owner of the certificate i.e. subject name, validity period, signature, public key and issuer.
Liability limit - The liability of a CA to any subscriber, relying party or any other person or entity for damages relating to, or arising out of the erroneous issuance, certain loss of use, and unauthorized revocation or suspension of certificates, provided that the subscriber has fulfilled his or her obligations as stated in the CA’s Certificate Practice Statement (CPS).
About Netrust
A pioneer in Southeast Asia since 1997, Netrust Pte Ltd is the leading licensed Certification Authority in Singapore. Its goal is to enable government organisations and private enterprises to conduct e-commerce transactions in a safe and secure manner and protect the interests of transacting parties.
Netrust issues digital certificates that verify a party's identity and can be used to positively identify him in e-communications and transactions. In order to provide its customers the highest level of security and confidence, Netrust adopts Public Key Infrastructure (PKI) technology, which is generally acknowledged as the best security solution available to-date and addresses the key issues of authentication, confidentiality, integrity and non-repudiation required for secure e-transactions.
Together with its technology partners, Netrust also offers a whole line of e-business solutions for servers, desktops, e-mail and other applications.
Furthering its vision to become a total provider of digital security services, Netrust also provides high value security consultancy to help organisations that are interested in moving towards implementing or expanding the business use of cryptography and managing the quick deployment of turnkey security solutions.
Netrust is a joint venture between Keppel Telecommunications & Transportation Ltd and Network for Electronic Transfers (Singapore) Pte Ltd (NETS). For more information, please visit
www.netrust.net.
About Infocomm Development Authority of Singapore
The Infocomm Development Authority of Singapore (IDA) is a dynamic organisation with an integrated perspective to developing, promoting and regulating info-communications in Singapore. In the fast-changing and converging spheres of telecommunications, information and media technologies, IDA will be the catalyst for change and growth in Singapore's evolution into a vibrant global info-communications technology centre. For more information, visit
www.ida.gov.sg
More information:
Geraldine Wang
Group Corporate Communications
Keppel Corporation Limited
Tel: (65) 68857-430
gerry.wang@kepcorp.com