Section 2

whether the transformation was created using the private key that corresponds to the signer’s public key; and

whether the initial electronic record has been altered since the transformation was made;

“electronic record” means a record generated, communicated, received or stored by electronic, magnetic, optical or other means in an information system or for transmission from one information system to another;

“electronic signature” means any letters, characters, numbers or other symbols in digital form attached to or logically associated with an electronic record, and executed or adopted with the intention of authenticating or approving the electronic record;

“hash function” means an algorithm mapping or translating one sequence of bits into another, generally smaller, set (the hash result) such that —

a record yields the same hash result every time the algorithm is executed using the same record as input;

it is computationally infeasible that a record can be derived or reconstituted from the hash result produced by the algorithm; and

it is computationally infeasible that 2 records can be found that produce the same hash result using the algorithm;

Electronic Transactions 9 2008 Ed.

“information” includes data, text, images, sound, codes, computer programs, software and databases;

“information system” means a system for generating, sending, receiving, storing or otherwise processing data messages;

“key pair”, in an asymmetric cryptosystem, means a private key and its mathematically related public key, having the property that the public key can verify a digital signature that the private key creates;

“licensed certification authority” means a certification authority licensed by the Controller pursuant to regulations made under section 42;

“Minister” means the Minister of Finance;

“operational period of a certificate” begins on the date and time the certificate is issued by a certification authority (or on any later date and time stated in the certificate), and ends on the date and time it expires as stated in the certificate or when it is earlier revoked or suspended;

“private key” means the key of a key pair used to create a digital signature;

“public key” means the key of a key pair used to verify a digital signature;

“record” means information that is inscribed, stored or otherwise fixed on a tangible medium or that is stored in an electronic or other medium and is retrievable in perceivable form;

“repository” means a system for storing and retrieving certificates or other information relevant to certificates;

“revoke a certificate” means to permanently end the operational period of a certificate from a specified time;

“rule of law” includes a written law;

“security procedure” means a procedure for the purpose of —

verifying that an electronic record is that of a specific person; or

Electronic Transactions 10 2008 Ed.

detecting error or alteration in the communication, content or storage of an electronic record since a specific point in time, which may require the use of algorithms or codes, identifying words or numbers, encryption, answerback or acknowledgement procedures, or similar security devices;

“signed” or “signature” includes any symbol executed or adopted, or any methodology or procedure employed or adopted, by a person with the intention of authenticating a record, including electronic or digital methods;

“subscriber” means a person who is the subject named or identified in a certificate issued to him and who holds a private key that corresponds to a public key listed in that certificate;

“suspend a certificate” means to temporarily suspend the operational period of a certificate from a specified time;

“transaction” includes a transaction of a non-commercial nature;

“trustworthy system” means computer hardware, software and procedures that —

are reasonably secure from intrusion and misuse;

provide a reasonable level of availability, reliability and correct operation;

are reasonably suited to performing their intended functions; and

adhere to generally accepted security procedures;

“valid certificate” means a certificate that a certification authority has issued and which the subscriber listed in it has accepted;

“verify a digital signature”, in relation to a given digital signature, record and public key, means to determine accurately

—

that the digital signature was created using the private key corresponding to the public key listed in the certificate; and

Electronic Transactions 11 2008 Ed.

the record has not been altered since its digital signature was created.

Purposes and construction.