Electronic Signatures in EU and Turkish Law
Electronic Signatures in EU and Turkish Law
H.Tarık EROL
Sayfa Sayısı
:
354
Kitap Ölçüleri
:
21x18 cm
Basım Yılı
:
2003
ISBN NO
:
975295247X





Preface
Electronic signatures are vital for electronic transactions involving electronic contracts. National laws stipulate signatures of contracting parties in order to provide contracts enforceability and admissibility as evidence. National and international electronic signature legislations and initiatives provide electronic signatures admissibility as evidence in court proceedings and legal equivalence to handwritten signatures, thus electronic signatures can fulfil the signature requirement stipulated by law.
The main subject of this book is the legal treatment of electronic signatures under the European Union and Turkish Law. The sections of this book include a survey of the E.U. legal framework for electronic signatures, the technical infrastructure of electronic signatures, and their legal treatment.
This book is the extended version of my LL.M. thesis entitled "Electronic Signatures in the EU Law" at the European Community Institute of Marmara University, istanbul. The thesis was successfully defended on 24 April 2003.
I would like to acknowledge my beloved parents İhsan and Sevinç EROL for their support and encouragement as this book would not be in existence without their constant presence. I would like to thank Murat ÖZVARDAR for his vital contributions and İpek ATABARUT for her support and guidance.
I would also like to acknowledge the assistance and encouragement of Banu ŞEN, Ahmet SEVER, İlter SEVER, Ömer ÖZVARDAR and Sabah ALTAY throughout the writing of this book.
Finally, I would like to thank the president of Beta Publishing, Rahmi ARIKAN, and ali the people at Beta for their great work.
H. Tarık EROL, LL.M.
Attorney-at-Law
15July 2003
TABLE OF CONTENTS
Foreword V
Preface VII
Abbrevlaüons XV
INTRODUCTION
I. HISTORY AND IMPORTANCE OF ELECTRONIC SIGNATURES 1
II. GENERAL VIEW OF ELECTRONIC SIGNATURE LEGISLATIONS AND
INITIATIVES İN THE WORLD 4
A. National Aspects 5
1. Turkey 5
2. Germany 10
a. Digital Signature Act and Its Ordinance 10
b. New German Electronic Signature Law and Its Statutory
Ordinance 11
c. ISIS Project 13
d. A New Legislation Effort in Regard to Qualified Electronic
Signatures in Administrative Procedures (Draft Bili) 13
e. E-Government: BundOnline 2005 13
3. The United States of America 14
a. Digital Signatures Guidelines 15
b. Unifor m Electronic Transactions Act (UETA) oftheU.S.A 15
c. Electronic Signatures in Global and National Commerce Act
(E-SIGN Act) 17
4. The United Kingdom 19
a. Electronic Communications Act 2000 (ECA) 19
b. Activities of T-Scheme 20
c. The Consultation Document 21
d. The Electronic Signature Regulaüons 2002 22
B. International Level: 23
1. UNCITRAL (United Nations Commission on International Trade
Law) "Model Law on Electronic Signatures with Guide to
Enactment 2001" 23
2. IDENTRUS As An Organisation For Bank Hosled-PKI 25
SECTION I ELECTRONIC SIGNATURES İN THE EU LAW
I. GENERAL REMARKS 27
II. DEFINITIONS OF ELECTRONIC SIGNATURES AND RELEVANT
SERVICES İN THE EU DIRECTIVE 1999/93/EC ON ELECTRONIC
SIGNATURES 28
III. THE EUROPEAN UNION DIRECTIVE 1999/93/EC ON ELECTRONIC
SIGNATURES 30
A. General Framework of the EU Directive 1999/93/EC On Electronic
Signatures 30
B. Main Points of the EU Directive 1999/93/EC on Electronic .
Signatures 34
IV. THE EUROPEAN ELECTRONIC SIGNATURE STANDARDIZATION
INITIATIVE (EESSI) 37
SECTION II
ELECTRONIC SİGNATURES AND INFRASTRUCTURE
I. TYPES OF ELECTRONIC SİGNATURES 41
A. General Remarks 41
B. Electronic Signatures Using Technologies Other Than "Asymmetric
Cryptosystem" 41
C. Digital Signatures Using "Public Key Cryptography-(Asymmetric
Cryptosystem)" 47
1. General Remarks 47
2. Cryptography 48
a. in General 48
b. Governmental Controls Över The Cryptographic Products ....51
aa. U.S. Controls on Export of Cryptographic Products 53
bb. The European Union Restrictions on the Export of Dual
Use Items 54
c. Private-Key Cryptography (Symmetric Cryptosystem) 54
d. Public Key Cryptography- (Asymmetric Cryptosystem) 55
3. Hash Function 57
4. Public and Private Keys 58
5. Digital Signatures 59
6. Verification of Digital Signatures 59
7. Cerüficaüon Service Providers (CSPs) 60
8. Public Key Infrastructure (PKI) 66
a. Hierarchical (Tree-Like Structure) Way of Establishment 66
b. Fiat (equal-level) Way of Establishment 68
c. PKI Approaches - Pretty Good Privacy (PGP) and X.5O9 68
aa. Pretty Good Privacy 68
bb. X.5O9 70
9. Digital Signature′s Working Procedure (Summary) 73
10. Diagram of Digital Signatures′ Working Procedure 75
11. Fields in Which Digital Signatures Are Used 76
a. General Remarks 76
b. Home Banking Computer Interface (HBCI) 77
12. Advantages of the Digital Signatures 80
II. ELECTRONIC SIGNATURE INFRASTRUCTURE WITH PARTICULAR
REFERENCE TO CERTIFICATION SERVİCE PROVIDERS (CSPs) 82
A. General Remarks 82
B. General Provisions and Requirements for the Certificaüon Service
Providers 84
C. Issuance of Qualified Certificates 87
1. General Requirements For The Certificaüon Service Providers
Issuing Qualified Cerüficates 87
2. Verificaüon of Idenüty and Proof fer Attributes 90
3. Register of Certificates 91
4. Content and Validity Period of Tht Qualified Cerüficates 91
D. Revocation of The Qualified Certificates 93
E. Time-Stamp 94
F. Documentation 94
G. Voluntary Accreditaüon 95
H. Supervision of Certificaüon Service Providers 97
1. The Competent Authority (Supervisory Body) 97
2. Testing and Confirmation Offices 97
3. Costs and Contributions 98
4. Obligatory Co-operaüon 99
I. Cessaüon of Cerüfication Service Provider′s Operations 99
J. Fines 100
III. LIABILITIES AND DUTIES OF CERTIFICATION SERVİCE PROVİDERS,
SIGNATORIES AND RELYING THIRD PARTIES 101
A. Cerüficaüon Service Providers′Duty to Provide Informaüon 101
B. Data Protecüon 101
C. Cerüficaüon Service Provider′s Liability and Cover 105
D. Cerüfication Service Provider′s Liability Under Turkish Law 115
E. Duties of The Signatories and Relying Third Parües 125
IV. SECURITY STANDARDS FOR THE ELECTRONIC SIGNATURES 126
A. Secure Signature-Creation Devices 126
B. Secure Signature-Verification 127
V. FOREIGN CERTIFICATES ISSUED AS QUALIFIED CERTIFICATES TO
PUBLIC BY CSPs ESTABLISHED OUTSIDE OF THE EU 128
SECTION III
LEGAL IMPLICATIONS OF THE ELECTRONIC SIGNATURES
I. EXCEPTIONS TO THE USE OF ELECTRONIC SIGNATURES 131
II. DISPUTE SETTLEMENT PROCEDURES 134
III. ELECTRONIC NOTARY 137
A. General Remarks 137
B. Notarial Acts Based on Electronic Signatures 137
IV. LEGAL IMPLICATIONS OF ELECTRONIC SİGNATURES ON LAW OF
FORM AND PROOF 140
A. General View of The Signatures′ Legal Functions 140
B. Legal Implications of Electronic Signatures on Law of Fprm and Proof
in The EU Law 143
1. Law of Form 143
2. Law of Proof 144
C. The German Law 146
1. Lawof Form 146
2. Law of Proof 150
D. The Law of the U.K 153
E. TheTurkish Law 155
1. Law of Form 155
a. in General 155
b. Specifıc Forms Required By Law 156
c. The Draft Bili of Electronic Signature Act 162
d. Consumer Protection 163
2. Law of Proof 165
a. in General 165
b. Deeds 165
c. Commencement of a Documentary Evidence 167
d. Evidence Contracts 168
e. Special Grounds For Ruling 169
f. The Draft Bili of Electronic Signature Act 170
g. Foreign Deeds of Covenant 171
3. International Arbitration Rulings 174
4. Conflict of Laws 176
CONCLUSION 179
Appendix A The European Union Directive 1999/93/EC on Electronic
Signatures 181
Appendix B Electronic Signature Law of the U.K 193
Appendix C The U.S. Federal E-Sign Act 199
Appendix D Uniform Electronic Transactions Act of The U.S 211
Appendix E EU Directive 2000/31/EC on Electronic Commerce 249
Appendix F German Electronic Signature Law and Ordinance of 2001 ..269
Appendix G UNCITRAL Model Law on Electronic Signatures (2001) 297
Appendix H Turkish Draft Bili of The Electronic Data, Electronic Contract
and Electronic Signature Act (in English) 301
Appendix I Turkish Draft Bili of Electronic Signature Act (in English) ....329
REFERENCES 351
Electronic signatures are vital for electronic transactions involving electronic contracts. National laws stipulate signatures of contracting parties in order to provide contracts enforceability and admissibility as evidence. National and international electronic signature legislations and initiatives provide electronic signatures admissibility as evidence in court proceedings and legal equivalence to handwritten signatures, thus electronic signatures can fulfil the signature requirement stipulated by law.
The main subject of this book is the legal treatment of electronic signatures under the European Union and Turkish Law. The sections of this book include a survey of the E.U. legal framework for electronic signatures, the technical infrastructure of electronic signatures, and their legal treatment.
This book is the extended version of my LL.M. thesis entitled "Electronic Signatures in the EU Law" at the European Community Institute of Marmara University, istanbul. The thesis was successfully defended on 24 April 2003.
I would like to acknowledge my beloved parents İhsan and Sevinç EROL for their support and encouragement as this book would not be in existence without their constant presence. I would like to thank Murat ÖZVARDAR for his vital contributions and İpek ATABARUT for her support and guidance.
I would also like to acknowledge the assistance and encouragement of Banu ŞEN, Ahmet SEVER, İlter SEVER, Ömer ÖZVARDAR and Sabah ALTAY throughout the writing of this book.
Finally, I would like to thank the president of Beta Publishing, Rahmi ARIKAN, and ali the people at Beta for their great work.
H. Tarık EROL, LL.M.
Attorney-at-Law
15July 2003
TABLE OF CONTENTS
Foreword V
Preface VII
Abbrevlaüons XV
INTRODUCTION
I. HISTORY AND IMPORTANCE OF ELECTRONIC SIGNATURES 1
II. GENERAL VIEW OF ELECTRONIC SIGNATURE LEGISLATIONS AND
INITIATIVES İN THE WORLD 4
A. National Aspects 5
1. Turkey 5
2. Germany 10
a. Digital Signature Act and Its Ordinance 10
b. New German Electronic Signature Law and Its Statutory
Ordinance 11
c. ISIS Project 13
d. A New Legislation Effort in Regard to Qualified Electronic
Signatures in Administrative Procedures (Draft Bili) 13
e. E-Government: BundOnline 2005 13
3. The United States of America 14
a. Digital Signatures Guidelines 15
b. Unifor m Electronic Transactions Act (UETA) oftheU.S.A 15
c. Electronic Signatures in Global and National Commerce Act
(E-SIGN Act) 17
4. The United Kingdom 19
a. Electronic Communications Act 2000 (ECA) 19
b. Activities of T-Scheme 20
c. The Consultation Document 21
d. The Electronic Signature Regulaüons 2002 22
B. International Level: 23
1. UNCITRAL (United Nations Commission on International Trade
Law) "Model Law on Electronic Signatures with Guide to
Enactment 2001" 23
2. IDENTRUS As An Organisation For Bank Hosled-PKI 25
SECTION I ELECTRONIC SIGNATURES İN THE EU LAW
I. GENERAL REMARKS 27
II. DEFINITIONS OF ELECTRONIC SIGNATURES AND RELEVANT
SERVICES İN THE EU DIRECTIVE 1999/93/EC ON ELECTRONIC
SIGNATURES 28
III. THE EUROPEAN UNION DIRECTIVE 1999/93/EC ON ELECTRONIC
SIGNATURES 30
A. General Framework of the EU Directive 1999/93/EC On Electronic
Signatures 30
B. Main Points of the EU Directive 1999/93/EC on Electronic .
Signatures 34
IV. THE EUROPEAN ELECTRONIC SIGNATURE STANDARDIZATION
INITIATIVE (EESSI) 37
SECTION II
ELECTRONIC SİGNATURES AND INFRASTRUCTURE
I. TYPES OF ELECTRONIC SİGNATURES 41
A. General Remarks 41
B. Electronic Signatures Using Technologies Other Than "Asymmetric
Cryptosystem" 41
C. Digital Signatures Using "Public Key Cryptography-(Asymmetric
Cryptosystem)" 47
1. General Remarks 47
2. Cryptography 48
a. in General 48
b. Governmental Controls Över The Cryptographic Products ....51
aa. U.S. Controls on Export of Cryptographic Products 53
bb. The European Union Restrictions on the Export of Dual
Use Items 54
c. Private-Key Cryptography (Symmetric Cryptosystem) 54
d. Public Key Cryptography- (Asymmetric Cryptosystem) 55
3. Hash Function 57
4. Public and Private Keys 58
5. Digital Signatures 59
6. Verification of Digital Signatures 59
7. Cerüficaüon Service Providers (CSPs) 60
8. Public Key Infrastructure (PKI) 66
a. Hierarchical (Tree-Like Structure) Way of Establishment 66
b. Fiat (equal-level) Way of Establishment 68
c. PKI Approaches - Pretty Good Privacy (PGP) and X.5O9 68
aa. Pretty Good Privacy 68
bb. X.5O9 70
9. Digital Signature′s Working Procedure (Summary) 73
10. Diagram of Digital Signatures′ Working Procedure 75
11. Fields in Which Digital Signatures Are Used 76
a. General Remarks 76
b. Home Banking Computer Interface (HBCI) 77
12. Advantages of the Digital Signatures 80
II. ELECTRONIC SIGNATURE INFRASTRUCTURE WITH PARTICULAR
REFERENCE TO CERTIFICATION SERVİCE PROVIDERS (CSPs) 82
A. General Remarks 82
B. General Provisions and Requirements for the Certificaüon Service
Providers 84
C. Issuance of Qualified Certificates 87
1. General Requirements For The Certificaüon Service Providers
Issuing Qualified Cerüficates 87
2. Verificaüon of Idenüty and Proof fer Attributes 90
3. Register of Certificates 91
4. Content and Validity Period of Tht Qualified Cerüficates 91
D. Revocation of The Qualified Certificates 93
E. Time-Stamp 94
F. Documentation 94
G. Voluntary Accreditaüon 95
H. Supervision of Certificaüon Service Providers 97
1. The Competent Authority (Supervisory Body) 97
2. Testing and Confirmation Offices 97
3. Costs and Contributions 98
4. Obligatory Co-operaüon 99
I. Cessaüon of Cerüfication Service Provider′s Operations 99
J. Fines 100
III. LIABILITIES AND DUTIES OF CERTIFICATION SERVİCE PROVİDERS,
SIGNATORIES AND RELYING THIRD PARTIES 101
A. Cerüficaüon Service Providers′Duty to Provide Informaüon 101
B. Data Protecüon 101
C. Cerüficaüon Service Provider′s Liability and Cover 105
D. Cerüfication Service Provider′s Liability Under Turkish Law 115
E. Duties of The Signatories and Relying Third Parües 125
IV. SECURITY STANDARDS FOR THE ELECTRONIC SIGNATURES 126
A. Secure Signature-Creation Devices 126
B. Secure Signature-Verification 127
V. FOREIGN CERTIFICATES ISSUED AS QUALIFIED CERTIFICATES TO
PUBLIC BY CSPs ESTABLISHED OUTSIDE OF THE EU 128
SECTION III
LEGAL IMPLICATIONS OF THE ELECTRONIC SIGNATURES
I. EXCEPTIONS TO THE USE OF ELECTRONIC SIGNATURES 131
II. DISPUTE SETTLEMENT PROCEDURES 134
III. ELECTRONIC NOTARY 137
A. General Remarks 137
B. Notarial Acts Based on Electronic Signatures 137
IV. LEGAL IMPLICATIONS OF ELECTRONIC SİGNATURES ON LAW OF
FORM AND PROOF 140
A. General View of The Signatures′ Legal Functions 140
B. Legal Implications of Electronic Signatures on Law of Fprm and Proof
in The EU Law 143
1. Law of Form 143
2. Law of Proof 144
C. The German Law 146
1. Lawof Form 146
2. Law of Proof 150
D. The Law of the U.K 153
E. TheTurkish Law 155
1. Law of Form 155
a. in General 155
b. Specifıc Forms Required By Law 156
c. The Draft Bili of Electronic Signature Act 162
d. Consumer Protection 163
2. Law of Proof 165
a. in General 165
b. Deeds 165
c. Commencement of a Documentary Evidence 167
d. Evidence Contracts 168
e. Special Grounds For Ruling 169
f. The Draft Bili of Electronic Signature Act 170
g. Foreign Deeds of Covenant 171
3. International Arbitration Rulings 174
4. Conflict of Laws 176
CONCLUSION 179
Appendix A The European Union Directive 1999/93/EC on Electronic
Signatures 181
Appendix B Electronic Signature Law of the U.K 193
Appendix C The U.S. Federal E-Sign Act 199
Appendix D Uniform Electronic Transactions Act of The U.S 211
Appendix E EU Directive 2000/31/EC on Electronic Commerce 249
Appendix F German Electronic Signature Law and Ordinance of 2001 ..269
Appendix G UNCITRAL Model Law on Electronic Signatures (2001) 297
Appendix H Turkish Draft Bili of The Electronic Data, Electronic Contract
and Electronic Signature Act (in English) 301
Appendix I Turkish Draft Bili of Electronic Signature Act (in English) ....329
REFERENCES 351