OAS Department of Human Development

                                                 PROFESSIONAL DEVELOPMENT SCHOLARSHIP PROGRAM

        “DIGITAL SIGNATURE: Technical and legal issues”

                                                                                                                                                                            OAS/DHD/CIR.086/2008

1) Study venue: Universidad Blas Pascal. Tel. (54-351) 414-4444; Fax (54-351) 414-4400

2) Offered by: Universidad Blas Pascal node of the Center of Excellence for the Americas of the International Telecommunication Union (ITU).

3) Coordinators:

· Néstor Pisciotta: Tel. (54-351) 414-4444; Fax (54-351) 414-4400; Email: [email protected]

· Melba Lucía de Reyes: Tel: (504) 220-6666, Fax: (504) 220-1197. E-mail: [email protected]

4) Modality: Distance – Assisted

5) Start and end dates: 25 August to 25 November, 2008 as a maximum

6) Course duration: The student has access to the course for 90 days. Please see the methodology for the course for more information.

7) Language: Spanish/English

8) Objectives:

· To gain good knowledge of the technical and legal aspects of electronic/digital signatures in order to develop the capacity to implement this legal-technological mechanism in the participant’s workplace (private, public, academic, judicial sector, etc.)

· To recognize the legal differences between the different types of electronic/digital signatures so as to be able to evaluate correctly the advantages and disadvantages of each.

· To study the mathematical principles underlying the most widely-used algorithms in the digital signature area to gain a fuller understanding of some of the concepts mentioned in legislation in this area.

· To gain awareness of the technological operation of the electronic/digital signature mechanism, especially public key infrastructure, to understand the possibilities afforded by this technology for the security of Internet transactions and operations.

· To define the legal requirements to be met by electronic/digital signature mechanisms in order to be able to evaluate correctly the legal and/or contractual framework on which such mechanisms must be based.

· To compare analytically legislation on electronic/digital signatures in force in some countries of the Americas region so as to be able to evaluate the status of legislation in the region and the participant’s country and understand the deficiencies of and emerging opportunities for the implementation of secure Internet transactions and operations.

· To distinguish correctly the electronic/digital signature and electronic/digital documents from traditional handwritten signatures and hard copy documents to gain a full understanding of the amendments to legislation and technological changes that must be implemented in the Americas region for the implementation of secure Internet transactions and operations.

· To gain awareness of the evidentiary value of electronic documents in the legislation in force in the countries of the Americas region in order to be able to understand in situations where disputes may arise the actual uses of this mechanism to establish facts and for legal purposes.

9) Content:

· Legal and technological aspects of the digital signature: Basic concepts. Public network security: Expanding the company’s limits: Business-to-business (B2B). Business-to-consumer (B2C). Linking citizens to government agencies (e-government). Expanding the company’s limits: Business-to-business (B2B). Business-to-consumer (B2C). Applications for government agencies (e-government). Documents and e-documents: Concept. Elements. Types of legal documents. The signature: Concept. Historical evolution. Types. Purpose. The digital signature: Concept. Historical evolution. Digital signature (advanced digital signature) and electronic signature. Operation. Purpose. Digital certificates. Concept. Content. Operation. Purpose.

· Unit 2: Introduction. Types of Internet attack. Strength of identification. Principles of cryptography. Classical cryptography. Substitution algorithm. Transposition algorithm. Modern cryptography. Symmetric algorithms. Data encryption standard (DES) algorithm. Variants of the DES algorithm: Cryptanalysis of symmetric algorithms. Differential cryptanalysis: Linear cryptanalysis: RSA algorithms. RSA weaknesses: Weak keys. Short keys. Third-party attacks. Special plain text. Cryptography applied to Internet security. Confidentiality. Integrity. Authentication. Non-repudiation of digital signature.

· Unit 3: Introduction. Public key infrastructure (PKI). Identity theft. Digital certificates: X.509 certificates. People’s certificates. Server certificates. Certifying authority certificates. Software edition certificates. Certifying authority (CA) certificate revocation: Certifying authority hierarchy. Certifying authority responsibility: Use of PKI on the Internet. Secure storage. Smart cards: Legal description of technological concepts. Chapter I: General considerations. Chapter II: Digital certificates. Chapter III: Licensed certifiers. Chapter IV: Digital certificate holder.

· Unit 4: Electronic signature provisions. Review of electronic signature provisions. Types of electronic signatures. Electronic signature concept. Digital signature concept. Principle of functional equivalence. Presumption of authorship. Presumption of integrity. Validity requirements. Legal effectiveness of the electronic signature. Comparative table.

10) Methodology: This a self-paced online study method. On enrolling, participants access a very easy-to-browse e-learning platform. There they will find all course content, study materials, and tests. The course may be accessed for up to 90 days. There is an online help desk to assist participants with the necessary technical and administrative steps during the course (Hours: 9 a.m. to 9 p.m. GMT +3). The course includes activities to evaluate mastery of the course content. These include self-correctable tests that may be retaken as many times as necessary. At the end of the course, if the participants pass the final exam, they may print from the e-learning platform a Universidad Blas Pascal certificate of successful course completion. If they wish, prospective participants may see a demonstration of how the course will be conducted by following the link: http://uit.ubp.edu.ar/demo/ For English: http://uit.ubp.edu.ar/demo/en/

11) Requirements:

· Citizenship or permanent residence of an OAS Member State, with the exception of the Argentina since is the host country.

· Operations and technology managers, R & D managers, legal, regulatory, and supervisory managers or vice presidents, network managers, government officials involved in technical security control, auditors of regulatory bodies, engineers of network technical/operation areas with responsibility for aspects related to corporate e-commerce or e-business, ministry technical auditors, government agencies and regulatory bodies, and heads of division or similar posts interested in refreshing and deepening their knowledge of the importance, use, and meaning of digital signatures.

· At least two years’ experience in the area of study.

· The request should include an e-mail. Requests that do not include an e-mail will not be considered.

· A health certificate is not required.

· Computer: should include the last versions of browsers. Access to Internet: it should have access to the network from its work place or home. The minimum acceptable modem speed is: 28.8 kbps. . Browser: The browser that you use is very important. The e-learning platform requires a browser that allows to use Java, Javascript. These options should be enabled in the browser.

· Submission of completed application form by the deadline set by the National Liaison Organization (ONE).[1] It is the candidate’s responsibility to ascertain the deadline set by the ONE in his or her country of residence

12) Benefits:

The OAS and the institutions offering the course will cover the complete registration fee of the selected candidates.

13) Responsibilities of selected candidates:

· Upon selection, candidates should accept scholarships by confirming to the Department of Human Development their availability to follow to course during the period indicated and their acceptance of the duly provided terms and conditions of study.

· Computer access and communication costs (Internet access and e-mail) are the responsibility of the student.

· In the event a selected candidate accepts the scholarship and then, for good reason, is unable to follow the course, he or she must so inform the Department of Human Development immediately so that it may decide what actions to take.

14) Certification: The participants can print the certificate on line after finishing the course with the endorsement of the Universidad Blas Pascal.

15) Presentation of candidacies:

The form to request the scholarship should be completed on line and is available at: http://www.educoas.org/portal/es/oasbecas/distancia.aspx?culture=es&navid=281

If you have any difficulties to complete or send your request, please send an e-mail to: [email protected]

All the other forms must be completed by electronic means or typewriter. After the candidate has completed and submitted the form to request the scholarship on line, he will receive a copy of the completed form in this e-mail address. This form must be printed, signed and submitted to the National Liaison Office (ONE) in your country, with the other forms to request scholarships that are available at: http://www.educoas.org/portal/es/oasbecas/formapd.aspx?culture=es&navid=281

Including the documents required by the National Liaison Office, the official channels established by the government of each country (ONE). This is a mandatory requirement.

The following is the list of National Liaison Organizations (ONEs) in the OAS Member states: http://www.educoas.org/portal/en/oasbecas/ones.aspx?culture=en&navid=282

Please note that the official announcement is published in the language of instruction of the course and is available via the Educational Portal of the Americas Web page at: http://www.educoea.org.

IMPORTANT NOTICE: THESE SCHOLARSHIPS ARE SUBJECT TO THE AVAILABILITY OF FUNDS CORRESPONDING TO THE 2008 REGULAR BUDGET

Maria Levens, Director

Department of Human Development