The Licensing and the Work of Certification Service Providers Trust services regulation establish a legal framework to ensure standardization, security, and reliability of digital transactions in the state of Qatar. It defines the guidelines for (qualified) trust services providers and outlines the requirements to become a (Qualified) Trust Service Provider ((Q)TSP), a designation offering a higher level of assurance and legal validity for their services.
This regulation establishes the CRA as the national supervisory body responsible for licensing and managing (Q)TSPs. This authority allows the CRA to oversee and regulate the (Q)TSPs, ensuring they adhere to the regulation, standards and guidelines. This is important to maintain trust and security in the digital ecosystem. The CRA, in this role as a regulatory entity, can set rules, enforce compliance, and take necessary actions in case of any misconduct or breaches by (Q)TSPs.
The regulation provides further detailed requirements for the provision of (qualified) trust services by (qualified) trust service providers and for the provision the following (qualified) trust services:
• Trust services:
1. The issuance of certificates for website authentication (TLS) and code signing.
2. The issuance of certificates for electronic signature.
3. The issuance of certificates for electronic seal.
4. The remote creation as a service of electronic signatures and advanced electronic signatures.
5. The remote creation as a service of electronic seals and advanced electronic seals.
• Qualified trust services:
1. The issuance of qualified certificates for electronic signature
2. The issuance of qualified certificates for electronic seal
3. The remote creation as a service of qualified electronic signatures
4. The remote creation as a service of qualified electronic seals
5. The qualified validation of qualified electronic signatures
6. The qualified validation of qualified electronic seals
7. The qualified preservation of qualified electronic signatures
8. The qualified preservation of qualified electronic seals
9. The provision of qualified time stamps
10. The provision of qualified electronic signature creation devices
11. The provision of qualified electronic seal creation devices
12. The remote management of qualified signature creation devices
13. The remote management of qualified seal creation devices
14. The provision of qualified electronic archiving services
15. The provision of qualified electronic delivery services