WORLD TRADE G/TBT/Notif.97.584
30September 1997
ORGANIZATION
(97-4099)
Committee onTechnical Barriers toTrade
NOTIFICATION
Thefollowing notification isbeing circulated inaccordance withArticle 10.6.
1. Member toAgreement notifying: FRANCE
Ifapplicable, name oflocalgovernment involved (Articles 3.2and7.2):
2. Agency responsible: Service desindustries decommunication etdeservice
3/5,rueBarbet deJouy
75353 PARIS 07SP
Agency orauthority designated tohandle comments regarding thenotification canbe
indicated ifdifferent from above:
3. Notified under Article 2.9.2 [X],2.10.1 [],5.6.2 [],5.7.1 [],other:
4. Products covered (HSorCCCN where applicable, otherwise national tariff heading.
ICSnumbers maybeprovided inaddition, where applicable): Services andequipment
associated withencryption keys
5. Title, number ofpages andlanguage(s) ofthenotified document: Draft Decree Defining
theConditions forAccreditation Organizations Responsible forManaging, onBehalf of
Another Party, Secret Agreements onEncryption Facilities orServices fortheProtection
ofConfidentiality
6. Description ofcontent: Thepurpose ofthisdraft Decree istointroduce, inaddition to
theother forms ofencryption, thefunction ofaccredited organization acting asatrusted
third party (TTP) inthefieldofcryptology withtheroleofproviding users withthe
encryption keysrequired fortheoperation oftheirencryption facilities, todefine therole
oftheTTPs, andtolaydown theadministrative procedures fortheiraccreditation.
7. Objective andrationale: Thedraft Decree wasdrawn uppursuant toArticle 28ofthe
LawontheRegulation ofTelecommunications of29December 1990 asamended by
Article 17oftheLawontheRegulation ofTelecommunications of26July1996. Its
provisions areessential totheimplementation oftheobligations andprocedures laid
down bythelawinrespect oftheTTPs.
Theprovisions oftheregulations concerning theuseofcryptology need tobe
made more flexible: withthedevelopment ofinformation highways these willbea
considerable increase inelectronic transactions which willhavetobeprotected inorder
6October 1997 toguarantee theirreliability andconfidentiality.
Atthesame time, theState must acttopreserve theinstruments thatcontribute
topublic security, suchasinterceptions.
./.G/TBT/Notif.97.584
Page2
7. Objective andrationale: (cont'd)
Thus, while untilnowanexpress authorization hasusually beennecessary, the
newlegislation isdesigned tomake itconsiderably simpler fortheend-user toresort to
encryption.
TheDecree provides fortotalfreedom touseencryption facilities toensure the
confidentiality ofamessage provided theconfidentiality services usedaremanaged by
theTTP.
TheTTPisanauthorized entity which manages encryption keysonbehalf ofthe
user. Theuserconcludes acontract with thetrusted third party, which regularly
supplies theuserwithkeysfortheencryption ofitsinformation. Thelicence ofthe
trusted thirdparty contains aclause whereby itmustturnovertheencryption keystothe
competent authorities under thelaw. Thus, while theuser cancount onthehigh-quality
services ofaprofessional inthefield ofcryptology, theState hasaccess tothe
information where necessary.
These liberal provisions which areintheinterest oftheuserplace theburden of
regulation onprofessionals inthefield ofcryptology, whomust inform thepublic
authorities ofanytools theyputonthemarket. They alsorequire anauthorization in
order tobecome trusted thirdparties. They must comply strictly withtheregulations to
which theyhavesubscribed, andthere arespecific criminal provisions forthose whofail
tocomply.
8. Relevant documents:
-Article 28oftheLaw ontheRegulation ofTelecommunications of
29December 1990;
-Article 17oftheLaw ontheRegulation ofTelecommunications of
26July1996.
9. Proposed dateofadoption:
Proposed dateofentry intoforce:December 1997
10. Final dateforcomments: 24November 1997
11. Texts available from: National enquiry point [X]oraddress andtelefax number ofother
body: CINORTECH
Mme Vaquier (AFNOR) -Tour Europe 92049 Paris LaDefense