1. A. The following words and terms, when used in this Section, shall have the following meanings unless the context expressly indicates otherwise.

   1. Asymmetric Cryptosystem―a computer-based system that employs two different but mathematically related keys with the following characteristics:

      1. a. one key encrypts a given message;
      2. b. one key decrypts a given message; and
      3. c. the keys have the property that, knowing one key, it is computationally infeasible to discover the other key.

   2. Certificate―a message which:

      1. a. identifies the certification authority issuing it;
      2. b. names or identifies its subscriber;
      3. c. contains the subscriber's public key;
      4. d. identifies its operational period;
      5. e. is digitally signed by the certification authority issuing it; and
      6. f. conforms to ISO X.509 Version 3 standards.
   3. Certificate Manufacturer―a person that provides operational services for a certification authority or PKI service provider. The nature and scope of the obligations and functions of a certificate manufacturer depend on contractual arrangements between the certification authority or other PKI service provider and the certificate manufacturer.
   4. Certificate Policy―a document prepared by a policy authority that describes the parties, scope of business, functional operations, and obligations between and among PKI service providers and end entities who engage in electronic transactions in a public key infrastructure.
   5. Certification Authority―a person who issues a certificate.
   6. Certification Practice Statement―documentation of the practices, procedures, and controls employed by a certification authority.
   7. Digital Signature―an electronic identifier intended by the person using it to have the same force and effect as the use of a manual signature, and that complies with the requirements of this Section.
   8. Digitally-Signed Communication―a message that has been processed by a computer in such a manner that ties the message to the individual that signed the message.
   9. End Entities―subscribers or signers and relying parties.
   10. Escrow Agent―a person who holds a copy of a private key at the request of the owner of the private key in a trustworthy manner.
   11. Handwriting Measurements―the metrics of the shapes, speeds and/or other distinguishing features of a signature as the person writes it by hand with a pen or stylus on a flat surface.
   12. Key Pair―a private key and its corresponding public key in an asymmetric cryptosystem. The keys have the property that the public key can verify a digital signature that the private key creates.
   13. Local Government―a parish, municipality, special district, or other political subdivision of this state, or a combination of two or more of those entities.
   14. Message―a digital representation of information.
   15. Person―an individual, state agency, local government, corporation, partnership, association, organization, or any other legal entity.
   16. PKI―Public Key Infrastructure.
   17. PKI Service Provider―a certification authority, certificate manufacturer, registrar, or any other person that performs services pertaining to the issuance or verification of certificates.
   18. Policy Authority―a person with final authority and responsibility for specifying a certificate policy.
   19. Private Key―the key of a key pair used to create a digital signature.
   20. Proof of Identification―the document or documents or other evidence presented to a certification authority to establish the identity of a subscriber.
   21. Public Key―the key of a key pair used to verify a digital signature.
   22. Public Key Cryptography―a type of cryptographic technology that employs an asymmetric cryptosystem.
   23. Registrar―a person that gathers evidence necessary to confirm the accuracy of information to be included in a subscriber's certificate.
   24. Relying Party―a state agency that has received an electronic message that has been signed with a digital signature and is in a position to rely on the message and signature.
   25. Role-Based Key―a key pair issued to a person to use when acting in a particular business or organizational capacity.
   26. Signature Digest―the resulting bit-string produced when a signature is tied to a document using signature dynamics.
   27. Signer―the person who signs a digitally signed communication with the use of an acceptable technology to uniquely link the message with the person sending it.
   28. State Agency―a department, commission, board, office, council, or other agency in the executive branch of state government that is created by the constitution, executive order, or a statute of this state. Higher education, the legislature and the judiciary are to be considered state agencies to the extent that the communication is pursuant to a state law applicable to such entities.

   29. Subscriber―a person who:

       1. a. is the subject listed in a certificate;
       2. b. accepts the certificate; and
       3. c. holds a private key which corresponds to a public key listed in that certificate.
   30. Technology―the computer hardware and/or
       software-based method or process used to create digital signatures.
   31. Written Electronic Communication―a message that is sent by one person to another person.

Authority Note

AUTHORITY NOTE: Promulgated in accordance with R.S. 39:4(c).

Historical Note

HISTORICAL NOTE: Promulgated by the Office of the Governor, Division of Administration, LR 27:526 (April 2001).