List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item
Implementation Ordinance
Guidelines
Conformity with the Accreditation criteria
１ Criteria for the facilities
1.1 Measures Necessary for Access Control to Certification Facility Room
(1) Items 2 and 3 below shall be defined clearly and appropriately in the1111 Of the facilities provided for use of Measures necessary for access control
the business pertaining to thecorresponding to the level of importance ofadministration guidelines, etc., and implemented.
application, the electronic
operation as provided in item 1 of Article 4 of thecomputers used for compiling or
Ordinances are classified as follows and shallmanaging electronic certificatesmeet requirements specified in the corresponding(2) Access to the certification facility room requires operation of1112 (magnetic recordings compiled to
items
(i)
The
"certification
facilityroom"
isdescribed
asbiometric verification devices (devices employed to identify distinctive
certify that the particulars
the
room
in
which
the
certification
business
physical characteristics) by a multiple number of persons accessing the(hereinafter referred to as the “userroom.
signature verification code”) used facilities (as defined in item 1 of Article 4 of theOrdinance)areinstalled.
However,when
eitherto verify that the user is the person
who performed electronic signature the facility used chiefly for the registration ofelectronic certificate users (hereafter called theare related to the concerned user
1113
"registration terminal") or the facility used chiefly (3) For access to the certification facility room, certification andand other facilities (hereinafter
identification via biometric verification that the person desiring accessfor identifying the information related to users
referred to as the “certification
has been authorized to do so in advance is required.
business facilities”) shall be set up (hereafter called the "user information") and user
identification codes (hereafter called the "userat locations devised with theidentification facility") is installed, the room inrequired measures in accordancewith the importance of business for which the certification business facilities, except
managing entrance and departure for the said registration terminal/user
identification facility is not installed, is to befrom the site. (Article 4)
excluded.
The following requirements are to be met.
(a) Access to be authorized only withidentification of distinctive physicalcharacteristics (referring to cross-check with preregistered fingerprint, iris, or other distinctive
physical characteristics of private individuals) of
two or more persons entering the room.
1121(b) Control over the number of persons entering (1) Items 2 and 3 below shall be defined clearly and appropriately inthe room and identical number of persons leaving the administration guidelines, etc., and implemented.
the room.

1122(2) Exit is completed with exit of the same number of persons whoentered the room, confirming that the number of persons who exited is
identical with the number of persons who entered the room.

1123(3) After exit is complete and the certification room is empty, a motion
sensor in the room will be activated to sound an alarm any movementtakes place.

1131(c)Alarm to be set off in case abnormal time isspent on operation of access control devices.

(1) Items 2 and 3 below shall be defined clearly and appropriately inthe administration guidelines, etc., and implemented.

(2) Length of time required for access operation (including time the door
is kept open) and number of tries are defined and registered. Length oftime required for access operation is defined as length of time taking
into account the number of tries executed for cross-comparison (multiple
number of tries must be allowed in view of instability in biometricverification) needed to satisfy, for instance, verification accuracy (false
rejection rate & false acceptance rate), biometric device cross-checking
speed and verification accuracy (that is, tolerable access control
operation time).

1132

1/37

List of the Accreditation criteria
Item
1133

1141

1142

Implementation Ordinance

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(3) If access operation exceeds the number of tries or length of time
defined and registered as in (2), alarm is set off at a location manned on
24-hour basis. Otherwise, the state of access operation is to bemonitored on 24-hour basis with remote surveillance devices for
immediate action in case of extraordinary behavior.

(d) Remote surveillance devices and video(1) Items 2 through 7 below shall be defined clearly and appropriately inrecording devices to be installed for monitoring
the administration guidelines, etc., and implemented.
automatically and continuously persons entering
and/or leaving the room and persons inside theroom.
(2) Remote surveillance cameras are to be installed at positions thateliminate a "dead angle" in photographing persons entering or exiting
the certification facility room or persons inside the room. If a dead-angle
camera view cannot be eliminated, personnel operating the certification
facilities will be trained to not position themselves in these locations
and will be monitored in such a way that no one will be positioned insuch a location.

1143(3) Videotape recording devices capable of videotaping for more than one
week are to be installed.

1144(4) Persons entering or exiting the certification facility room or persons
inside the said room are to be videotaped and monitored on 24-hourbasis with remote surveillance devices. In addition, access detectors andremote surveillance devices are to be coordinated for automatic andcontinuous surveillance and videotaping when persons are entering or
exiting the certification facility room or persons are present inside thesaid room.

1145(5) Lapse in videotaping and monitoring should not take place in case of
replacement of recording medium in videotape recording devices. If thiscannot be avoided, replacement shall be done swiftly while confirmingthat there are no persons entering or exiting the certification facility
room or persons inside the said room.

1146(6) Video photography with remote surveillance camera and film
recording is to make recorded object clearly identifiable.

1147(7) Remote surveillance devices and videotape recording devices are tohave UPS, etc., for operation in case of power failure.

1151(ii) In a room in which a registration(1) Items 2 and 3 below are to be defined clearly and appropriately interminal/user identification facility is located (but the certification business rules and administration guidelines, etc., andthat is not a certification facility room), measures implemented.
(e.g., locking) are to be implemented to prevent
easy access of the registration terminal/user
identification facility by unauthorized personnel. (2) The entrance to the room in which the registration terminal/user
identification facility is installed is to have a lock and key and is to belocked when no one is in the room.

1152(3) In the room in which the registration terminal/user identification
facility is installed, the location of the registration terminal/user
identification facility is to be sectioned off from other facilities in orderto impede easy access to the terminal/facility by persons other thanauthorized personnel.

1153

2/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
1.2 Measures Necessary to Prevent Unauthorized Access, Etc., to Certification Business Facilities
Measures necessary to prevent unauthorized(1)Items 2 through 4 below shall be defined clearly and appropriately in
1211 (ii) Facilities for certification
business shall be equipped with the access, etc., by means of telecommunications
the administration guidelines, etc., and the facilities are to be inrequired measures to prevent
circuits as provided in item 2 of Article 4 of thecompliance with the standards.
illegal access via
Ordinance are to be the following .(Article 5)
telecommunication lines, etc.
(i )In connection of certification business facilities (2) If certification business facilities (excluding registration terminal)
1212 （Article 4 ）via telecommunications circuit, certification
are linked to external network, the said facilities are to be equippedbusiness facility (excluding registration terminal) with communication devices with firewall function and network-based
shall be equipped with firewall and system topenetration detection function to prevent unauthorized access.
detect unauthorized access, etc., in order toCommunication is to be executed via such devices.
prevent unauthorized access.

1213(3) Communication devices with firewall function are to satisfy thefollowing requirements.
① Communication with unregistered protocol is to be severed.
② Origin of communication and recipient of communication are to be
specified, and other communications are to be severed.
③ Communication with network business not registered is to be
severed.
④ Communications processed are to be recorded.

1214(4) Communication devices with network-based penetration detection
function are to satisfy the following requirements.
① Packet communication on the network can be monitored, andunauthorized access or business obstruction attack can be detected.
② (Signature) file that signals unauthorized access, on which detection
is based, can be defined manually or updated regularly with software,etc.
③ When detecting unauthorized access or signs of such an access, it isreported to the system manager

1221(ii) If certification business facilities are(1) Items 2 and 3 below shall be defined clearly and appropriately in theseparated into two or more components, measures administration guidelines, etc., and the facilities are to be in complianceare to be taken to prevent erroneous recognition with the standards.
of facility transmitting message, as well as thewiretapping and tampering of the communication (2) If certification business facilities consist of two or more components,
contents from one component to anotheri.e., equipment designed for issuance and equipment designed forcomponent.
registration, and if these components are connected via an outside1222

network, communication between said components must be
implemented in such a way to prevent erroneous recognition of theequipment, as well as the wiretapping and tampering of thecommunication content.
(3) If certification business facilities consist of two or more components
and are installed in the same certification facility room, communication
between said components must be implemented with measures that areequivalent to those specified in the example of adaptation (2) in terms ofsystem setup, access control, internal checks, and other operational
measures.

1223

1231

1232

(iii) If computer systems used for receiving user
signature verification codes, user information,and user identification codes throughtelecommunications lines are installed, measures
are to be taken to prevent erroneous recognitionof a computer used for sending this information,
as well as the wiretapping and tampering of thecommunication content from a computer to thecertification business facility.

3/37(1) When user signature codes are created by users, if the computer
systems (hereafter referred to as "facilities for receiving user
identification codes, etc.") used to receive user signature verification
codes, user information, and user identification codes throughtelecommunications lines are installed, Items 2 below shall be defined
clearly and appropriately in the administration guidelines, etc., and thefacilities are to be in compliance with the standards.
(2) For communications sent from the facilities for receiving user
identification codes, etc. to a certification business facility, measures
shall be taken to prevent the erroneous recognition of these facilities, aswell as the wiretapping and tampering of the communication content.

List of the Accreditation criteria
Item

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
1.3 Measures to Prevent Operation of Certification Business Facilities by Persons Without Authorization
Measures to prevent operation of certification(1) Regarding those operating the certification business facilities, Items
business facilities by persons without
2 through 4 below shall be defined clearly and appropriately in theauthorization are to satisfy the following
administration guidelines, etc., and the facilities are to be in compliancerequirements.(Article 6)with the standards.

1311 3. Facilities used for for
certification business shall beequipped with the required
measures to prevent operations byparties with proper rights, and1312
shall be equipped with functions to(i) When operating a certification businessrecord operations of the concernedfacility, the authority of each operator is to be
facilities for certification business.
1313
defined the operator's authority must be able to（Article 3）
be confirmed.

1322

1323

1324

1331

1332

(2) Restrictions in access to certification business facilities can be
defined by each operator.
(3) Certification business facilities are to have a system in place forverifying authorized personnel by password, electronic signature, orbiometrics, etc.

(4) Certification business facilities connected to registration terminals
are to be equipped with systems specified in Items 2 and 3 above.

1314

1321

Ver.3.2(2015.12.28)(ii) When operating a certification business(1) When user signature codes are created by users and if certification
facility automatically using user information/user business facilities are used to identify user information/user
identification codes, it should be possible to set
identification codes automatically, Items 2 through 4 below shall beuser identification codes, install the computer
defined clearly and appropriately in the administration guidelines, etc.,
systems (in rooms that can be locked) that are to and the facilities are to be in compliance with the standards.
be used to receive user signature verification(2) In certification business facilities, user identification codes are to becodes, user information, and user identification
be set for each user.
codes via telecommunication lines. It also should
be possible to set the functions for identifying theuser information/user identification codes sent
(3) The entrance(s)/exit(s) of any room equipped with facilities forfrom a computer system via telecommunication
receiving user identification codes, etc. shall be outfitted with locks/keys
lines, and to confirm user information/user
and shall be locked when no one is in the room.
identification codes.
(4) Certification business facilities are to have systems in place fordifferentiating the specific user information and user identification
codes sent from the facilities for receiving user identification codes, etc.,
through telecommunication lines. They also are to have systems inplace for confirming the specific user information and user
identification codes.
(iii) Facilities to be set to make remote operation
via telecommunications circuit impossible.
However, this shall not apply to operation ofregistration terminal necessary for electronic
certificate management, such as electronic
certificate issue or invalidation requests.

4/37(1) Item 2 below is to be defined clearly and appropriately in theadministration guidelines, etc., and facilities shall be in compliancewith the standards.
(2) Certification business facilities are to be designed in such a way as
to make remote operation via network impossible, other than forhandling electronic certificate issue requests from the registration
terminal and the operations necessary for electronic certificate
management, e.g., requests for electronic certificate revocation, etc

List of the Accreditation criteria
Item
1341

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria(iv) The location of certification business facilities (1) Item 2 below shall be defined clearly and appropriately in theis not to be displayed.
administration guidelines, etc., and implemented.
(2) A name, sign, or signboard that displays or suggests the location of acertification business facility is not to be posted outside or inside a
structure that houses such a facility. Examples are as follows:*On the exterior of a structure that houses a certification business*At the entrance of a structure that houses a certification business*In the elevators of a structure that houses a certification business*At the entrance of a certification facility room.
*At a reception desk.
*In pamphlets or on website homepages, etc.

1342

1351

Ver.3.2(2015.12.28)(2) The functions for recording operations ofcertification business facilities as provided initem 3 of Article 4 of the Ordinances are as
follows.

1352(i) Functions for recording the name of arequesting party (only when operated by theoperator), as well as the content, date, results,
etc., of each activity in the operation history.

(1) Item 2 below is to be defined clearly and appropriately in theadministration guidelines, etc., and facilities shall be in compliancewith the standards.
(2) Each certification business facility is to have the following functions
in place for recording daily operations.
① Identifying the person executing each activity (when an operator isinvolved).
② Reporting the exact location where the activity took place (e.g., a③ Reporting the type of event (e.g., file open/close, name change,
attribute change, deletion, etc.)④ Reporting the date/time of each activity.
⑤ Reporting the results of each activity.

1361(ii) Functions for displaying the operation history (1) Item 2 below shall be defined clearly and appropriately in thefor a specific operator (only when operated by the administration guidelines, etc., and the facilities are to be in compliance
operator).
with the standards.

1362(2) A certification business facility's operations history is to be displayedfor each operator.

5/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
1.4 Encryption device employed for generation of issuer signature code
(1) Encryption device used for generation and management of issuer
1411 (iv) Of the certification businessfacilities, the electronic computerssignature code (that is, computer system exclusively used for thisused to verify the issuer (ifpurpose as described in item 4 of Article 4 of the Ordinances) isdifferentiated in accordance withequipped with the following functions to curb possibility of leakage,
the name of certification activities,
damage, loss, etc., of the issuer signature code to the least possible
the activities shall be included,
minimum.
hereinafter the same) of electronic
certificates, and compile or manage① If interface exists for input/output of unencrypted encryption code,
1412 the codes used by the issuer
certification data, etc., and other important data in unprotected form
(hereinafter referred to as theinto encryption device, the interface is physically separate from“issuer signature codes”) to comply
interface for other data input/output.
with the criteria in Article 2 shallbe exclusive electronic computerswith the required functions to② The encryption device is to have the following functions and at the1413 prevent the leakage of theconcerned issuer's signature codes.
same time have access rights restricted by function and by operator of（Article 4 ）the device.
(a) Operator function: Encryption, signature, and others for
implementing regular encryption functions.
(b) System manager function: Functions for encryption device
management, such as initializing the device and setting importantparameters such as signature code.

③ In order to prevent theft of issuer signature code and other data, theencryption device will have the following physical security measures
implemented.

1414(a) If the encryption device consists of independent IC chip, the chip isto be covered by non-transparent coating made of material that issturdy and cannot be removed easily.
(b) If the encryption device is covered, tamperproof measures are
implemented against physical violation, such as encryption device
function terminated, internal data voided, etc.
(c) If the encryption device has air vent or pores on the case, measures
are taken to ensure that such openings are sufficiently small andprevents probing the inside without detection.
④ The following measures are to be implemented in management ofissuer signature code used for the encryption device.

1415(a) If the issuer signature codes are to be generated inside theencryption device, secure algorithm for generating pseudo-random
numbers is to be used.
(b) Regarding the input/output of an issuer signature code within an
encryption device, said input/output is to be executed using either of thefollowing methods.
*The issuer signature codes are encrypted in input/output.
*If the issuer signature codes are to be split into two or morecomponents and input/output, it should be done directly within theencryption device. In this case, operator verification must be executedfor each component of the issuer signature code. The components of theissuer signature code are to be split and united inside the encryption
device.
(c) If the issuer signature codes are to be stored inside the encryption
device without encryption, the mechanism must be accessible
externally.
(d) It has the function of nullifying issuer signature codes and othersecurity parameters when scrapping issuer signature codes.

6/37

List of the Accreditation criteria
Item
1421

Implementation Ordinance

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(2) If the operating system of the computer in which the encryption
device is installed is able to satisfy the following functions andrequirements and to assure security comparable to security measures
for the certification business facilities and for the entire certification
facility room notwithstanding (1) above, it can replace such measures1422① Software, etc., installed to drive encryption device are installed in
executable code only.

1423② Encryption software, signature code, and other important security
parameters, as well as control information, status, information, etc., areunder control of the operating system equipped with functions forinspecting input/output of data.

1424③ Operating system is equipped with functions to protect signaturecode, verification data, and other important security parameters fromunauthorized access, etc.

1425

④ If provisions on physical independence of interface described in (1)-(1)above are not satisfied, input/output of important data is to be executedin secure method without mixing with other types of data by theoperating system of the computer in which the encryption device isinstalled.
⑤ If access right cannot be defined for each operator as described in (1)(2) above, operator right can be defined by the operating system of thecomputer in which the encryption device is installed.

1426⑥ If encryption device tamperproofing measure is any of the following,protection is to be secured by storage of the device in secure location
when not in operation, monitoring with surveillance device, etc., against
physical attack on the computer system, and computer operating system
protection against logical attack.

1427(a) The IC chip is covered with non-transparent coating that makes
attempt at unauthorized access, etc., detectable.
(b) The encryption device is covered with non-transparent case, etc., andwith non-transparent coating that makes attempt at unauthorizedaccess, etc., detectable.
⑦ Regarding (1)-(4)-(b), the operating system of the computer in which
the encryption device is installed does not allow input/output inmethods other than that described in (1)-(4)-(b).

1428

7/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
1.5 Measures necessary to prevent damages on certification business facilities from natural disasters(1) Measures for protecting the certification facility room and the1501 (v) Certification business facilities Measures necessary to boost resistance toand required machines for devising damages from disasters such as power failure,
structure that houses it against natural and other disasters/events (e.g.,measures of item 1 shall beearthquake, and flood, prescribed in item 5 ofpower failure, earthquake, fire, flood, etc.) shall be defined clearly andequipped with the required
Article 4 of the Regulations are classified as
appropriately in the administration guidelines, etc., and the required
measures in accordance with thefollows and shall meet requirements specified in measures are to be implemented.
level of importance of business so
the corresponding items..（Article 7 ）that they are not easily affected by(i) Certification business facilities: Fixture of(1) As earthquake preparation, the certification equipment is protected
1511 natural disasters such as powersystemcomponents
and
other
earthquakeagainst moving and falling with either of the following means:failure, earthquakes, fires, andresistantmeasurestobe
implemented
toprevent
floods.（Article 4 ）① Measures to prevent movement or falling are implemented withfalling or displacement of facility components
attention to installation methods recommended by certification businessfrom earthquake of foreseeable magnitude.
facility manufacturer, in view of floor response of the room in whichsuch facilities are installed.
② Facilities are fixed to the structure with earthquakeproof supports,
fall-prevention joints, etc.
③ The entire structure, floor on which certification business facilities
are installed, etc., are seismic-shock-absorbent in design or certification
business facility is supported by seismic-shock-absorbent platform.
1512(2) Computer rack is protected from movement and prevention throughfixture to structure, etc.

1513

(3) Components of a certification business facility that are set on racks
are to be secured using fall-prevention joints, earthquake-proof straps,
etc.

1514

(4) Reinforcement measures that incorporate angles, stringers, etc., areto be implemented to prevent damage on a free-access floor in the eventof an earthquake.

1515(5) Earthquake-proof measures are implemented on fixtures, supplies,
etc., in the certification facility room in order to prevent earthquake
damages on the certification business facilities.

1521(ii) Certification facility room: The following
requirements are to be satisfied.
(a) Measures to be taken to prevent flooding.

(1) Either Item 1 or 2 is satisfied.
① Certification facility room is located on the second floor or higher inthe structure.
② If certification facility room is located on the ground floor or lower,
adequate measures are implemented against flood/water damage.
Flooding prevention measures must especially be taken if located insites that had sustained flood damages in the past or in sites locatedbelow sea level.

1522(2) Waterproofing measures are taken on floor immediately above theroom, such as application of asphalt or urethane waterproof paint, etc.
If such measures are not possible, full-range water detectors are to beinstalled on beams and pillars around the floor above the room, andwaterproof cover is available inside the room.

1523(3) Certification facility room does not have wash basin, tea maker, andother water-use facilities.

1524(4) When installing air conditioning system in the certification facility
room, water control embankment or water receptacle is to be installednear the air conditioning system, with water leakage sensor installedinside either the embankment or receptacle.

1525(5) Water leakage is monitored continuously with centralized
surveillance panel, etc.

8/37

List of the Accreditation criteria
Item
1531

Implementation Ordinance

Guidelines(b) Partitioning by walls

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(1) The certification facility room is to be separated from other rooms
with a partition or wall that is designed in such a way that it cannot beeasily destroyed.

(2) A certification facility room is to be designed in such a way that
there is no entrance/opening that is vulnerable to invasion.

1532

1541

(c) Installation of automatic fire detectors and fire (1) Automatic fire detectors and fire extinguishers that conform withextinguishers.
Ordinances under the Fire Defense Act and shall undergo regularinspection by fire stations, etc.

1551(d) Installation in fire-protection areas.

(1) The area of the structure that houses a certification facility room is
to be protected against fire as defined under the Construction
Standards Act.

1552

(2) If a cable passes through the fire protection area, the area where thecable passes and area within 1 meter from the area are to be made fireretardant with non-flammable materials, etc.

1553

(3) If there are ventilation, heating, or air conditioning ducts passing
through the fire protection area, the area where the duct passes andarea near the area are to have fire-resistant dampers.

1561(e) Measures to be taken against power failure for (1) Uninterrupted power supply (UPS) or constant-voltage, constantpower source facilities used inside the room.
frequency (CVCF) power supply and storage batteries are to be installed
for certification business facility and room access control devices used in
the certification facility room

1571

(3) Structure in which the certification facility
room is to be installed, the following
requirements are to be satisfied.
(a) Foundation of land on which the structure is
to be built is to have little possibility ofearthquake damages. This shall not apply,
however, in unavoidable cases and whenmeasures are to be taken to prevent unequal
subsidence.

(1) Structure in which certification facility room is to be housed is to belocated in areas not likely to be susceptible to earthquake damages. If
this cannot be avoided, measures to prevent uneven subsidence in a soft
foundation (e.g., pile driving), are to be implemented.
Methods to control uneven subsidence are based on basic principles
such as:*Compaction method: Sand compaction, vibro-flotation*Water pressure dispersion method: Gravel drainage*Pressurized dehydration method: Well point*Solidification method: Grouting, deep-strata mixing*Others: Replacement method, etc.

1581(b) Structure to satisfy the provisions of theConstruction Standards Act (No. 201 of 1950) for
safety against earthquakes and relevant orders
and ordinances .

(1) Structure in which certification facility room is housed to beinspected by construction project owner and comply with Construction
Standards Act standards in structure strength, etc.

1591(c) Structure to be fire-resistant or quasi-fireresistant as provided in the Construction
Standards Act.

(1) Structure in which certification facility room is housed is to conformwith Construction Standards Act standards on fire-resistant structuresand quasi-fire-resistant standards.

9/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item
Implementation Ordinance
Guidelines
Conformity with the Accreditation criteria
２ Methods for verifying authenticity of users
2.1 Application for use of certification business, etc.
(1) Items 2 through 5 below shall be defined clearly and appropriately in
2101 The methods provided by theordinance of competent ministers
the certification business rules and administration guidelines, etc., andas set forth in Article 6.1.2 of theimplemented.
Act are listed below:(2) The method of application for the certification business shall be
2102 (i) Persons applying to use thedefined, i.e., whether the application will be made in person, by mail, or
certification business (hereinafter
via secure telecommunications, etc.
referred to as "user applicants”),
shall be required to submit a copy
(3) The type of document that will be used to verify the authenticity of2103 of the Resident Record as
the user and proxy as prescribed in Articles 5.1.1, 5.1.2, and 5.2 shall beprescribed in Article12.1 of thedefined for the specific method of application.
Residential Basic Book Act (Act No.
81 of 1968) or a Certificate of Items(4) User applicants are asked to submit copies of their resident cards,
2104
Stated in the Resident Record, andCertificate of Items Stated in the Resident Record, family register ora copy of a family register/abstract
abstract register (applies only when submission/presentation ofregister (applies only whencertificates indicating current address is required), certificate of status
submission/presentation ofof residence issued by the consulate (or director/deputy of thecertificates indicating current
embassy/legation acting as consulate), electronic certificates as
address is required) or a Certificate
prescribed in Article 3.1 of the Law on Certification Business of Localof Status of Residence issued by the
Public Organizations related to Electronic Signature (hereinafter
consulate (or director/deputy of thereferred to as public individual certificates), or the following documents
embassy/legation acting as
as prescribed in the notification issued by a competent minister
consulate), or a document
comforming to the above (September 8, 2015 Ministry of Internal Affairs
conforming to this as prescｒibed by
and Communications, Ministry of Justice, Ministry of Economy, Tradea competent minister. Also, one or
and Industry Notice No. 3).
more of the following methods will
①Copy of judicial scrivener register as prescribed in the Judicial
be used to verifying the
Scriveners Act (Act No. 197 of 1950) Article 8.1 (including those createdauthenticity of the applicant.
as an electromagnetic record).
However, when implementing the②Copy of land and house investigator register as prescribed in theapproved certification business, theLand and House Investigators Act (Act No. 228 of 1950) Article 8.1
proxy will accept documents(including those created as an electromagnetic record).
indicating whether the application③Copy of notary public register as prescribed in the Notary Public Act
has actually been made for the use(Act No.4 of 1951) Article 6.1 (including those created as anof the certification business or theelectromagnetic record).
application as prescribed in (c), and④Copy of tax accountant register as prescribed in the Tax Accountant
a letter of proxy (if the user
Act (Act No.237 of 1951) Article 18 (including those created as anapplicant is living outside of Japan,
electromagnetic record).
the letter shall conform to the⑤Copy of social insurance consultant register as prescribed in the
country of residence) that has beenSocial Insurance Consultants Act (Act No.89 of 1968) paragraph 1 ofsigned or stamped (applies only
Article 14-2 (including those created as an electromagnetic record).
where a certificate of stamp
registration for the stamp used is(5) The procedure for handling the application for use by methods other2105 provided) by the person applying
for use that confirms the rights tothan those specified shall be defined.
the concerned proxy.
Authentication of the proxy shall be
confirmed by more than one of themethods listed below (Article 5.1.1)

10/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
2.2 Method of verifying authenticity of users, etc.
2201 (a) The Act that requires(1) Items 2 through 11 below are to be defined clearly and appropriately
submission of one or more of thein the certification business rules and administration guidelines, etc.,
following: A passport as prescribedand implemented.
in item 5 of Article 2 of the Entry
and Departure Management and(2) When using a method in Article 5.1.1.a of the Ordinance to verify the2202 Refugee Approval Act (No. 319 ofauthenticity of a user or proxy, the certificates and other documents
1951); a residence card asissued by the specified authorities must be confirmed as genuineprescribed in Article 19-3 of theregarding their content, format, period of validity, etc. Further
same Act; a special permanentauthentication will be conducted by checking the photo attached to theresident certificate as prescribed incertificate or similar document against the person presenting the
Article 7.1 of the Special Law on
certificate.
the Immigration Control (Act No.
71 of 1991) for persons who haverenounced Japanese citizenshipbased on peace treaties with Japan;
licenses, permits, or a certificate ofqualifications issued by theministries/agencies listed in
Separate Table; Individual Number
Card as prescribed in Article 2.7 of
the Act on the Use of Numbers to
Identify a Specific Individual in the
Administrative Procedure (Act No.
27 of 2013); or documents used byministries/agencies (Incorporated
Administrative Agency(Incorporated Administrative
Agency as prescribed in Article 2.1of the Act on General Rules for
Incorporated Administrative
Agency (Act No. 103 of 1999), Local
Incorporated Administrative
Agency (Local Incorporated
Administrative Agencies asprescribed in Article 2.1 of the
Local Incorporated Administrative
Agency Act (Act No.118 of 2003)),and special public corporations (setup directly in accordance with Act
or corporations set up with special
establishment acts in accordancewith special Acts, subject to item 15of Article 4 of Act for Establishmentof the Ministry of Internal Affairs
and Communications [Act No. 91 of1999]), to certify the identification
issued to their employees attachedwith the photograph of that specificemployee. (Article 5.1.1.a)2203 (b) Method which requires thesubmission of stamp registration
certificate related to the stampused to stamp the application foruse (if the party applying for use isliving outside Japan, the letter
shall conform to the country ofresidence)(Article 5.1.1.b)(3) When using a method in Article 5.1.1.b of the Ordinance to verify theauthenticity of a user or proxy, the seal registration certificate must be
confirmed as genuine regarding its content, format, period of validity,
etc. If the official seal of the user or proxy is impressed on theapplication form and the seal registration certificate is attached asmaterial to confirm identity of the user or proxy, the seal impression on
the application form shall be confirmed as a match for the impression
on the seal registration certificate.

11/37

List of the Accreditation criteria
Item
Implementation Ordinance2204 (c) The method for mailingdocuments that inquire into theinformation in the application andthe acceptance of replies to theinquiry shall be done via postal
services that allow the post to bereceived only by the person towhom the document was addressedor to the person(s) designated by
2205 the sender to receive the post
(hereafter referred to as"addressee). The addressee shall be
required to present one of thefollowing documents to receive the
post.

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(4) When using a method in Article 5.1.1.c of the Ordinance to verify
the authenticity of a user or proxy, the document confirming that it
actually has been issued to the user or proxy shall be received.

(5) In case of application by proxy and in case of acceptance of
document inquiring into information in the application stipulated by
Article 5.1.1.c of the Ordinance, the letter of proxy to be submitted muststate clearly the content of application entrusted by the user to proxy orthat acceptance will be by proxy.

(1) One or more of the documents
given in (a).

2206

(6) In case of application by proxy and in case of acceptance of document
inquiring into information in the application stipulated by Article
5.1.1.c of the Ordinance, the signature by the user themselves on the
power of attorney form must be confirmed. At the same time, theimpression of the official seal of the user affixed to the same document
is confirmed to match the seal impression certified by the seal
registration certificate attached to the power of attorney form.

(2) Two or more of the following
documents: insurance certificate
such as health insurance, national
health insurance, seaman's
insurance, mutual aid association
membership certificate, national
pension account book, national
pension, social insurance orseaman's insurance related pension
certificate or mutual aid pension,
military pension, etc.

(3) One or more of the documents
given in (2) together with one ormore of the following: student card,company’s identification card or
qualifications certification issued
by a public organization (excluding
those in (a)) attached with a photo.
(Article 5.1.1.c)
2207 (d) The same methods as thosedescribed in a, b, and c, as
approved by a competent minister.
(Article 5.1.1 d)(7) When using signed certificates to verify the authenticity of the useror proxy (limited to those issued by foreign consular offices in Japan;
e.g., embassies, consulates, etc.), the validity of the signed certificatesmust be confirmed as to the description, format, expiry date, etc. Also, if
the application form is signed by the user or proxy and the signed
documents related to the signature are attached as identity verification
documents of the user or proxy, the signature on the application form
and that on the signed certificate attached to the application form shallbe verified as the same.

2208 The method for verifying
authenticity of user applicants
using electronic signatures forelectronic certificates for
signatures they already possess,
as prescribed in Article 3.1 of the
Act on Certification Business ofJapan Agency of Local Authority
Information Systems related toElectronic Signatures, etc. (ActNo. 153 of 2002). (Article 5.1.2)(8) When using the methods of Article 5.1.2 of the Ordinance to verify
user authenticity, the validity of the electronic certificate for public
identification shall be confirmed in terms of description, format, expiry
date, expiration status, etc. The validity of the electronic signature on
the electronic certificate attached to the application also shall beverified.

2209 (2) When a user applies for a newelectronic certificate forthemselves, if the term of validityof that electronic certificate has
expired within five years from thedate of issue of the authentic,
verified electronic certificate issued
to that user (in accordance with themethods as described above), theissuer shall verify the authenticityof that specific user by theelectronic signature on theelectronic certificate currently
possessed by the user. (Article 5.2)

(9)In case of confirmation of user identity when updating electronic
certificate under provisions of Article 5.2 of the user employed in
information for use application is verified and validity of the electronic
certificate on which the said signature is attached is confirmed, such as
absence of information regarding revocation.
The validity of the new electronic certificate will expire in less than five
years after the issue date of the electronic certificate that has
authenticated the user and has been issued with any method of each
Article 5.1.

12/37

List of the Accreditation criteria
Item
220A

Implementation Ordinance

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(10) When users create user signature codes, if confirmation of theauthenticity of the user and acceptance of the user's signature
verification code are not implemented simultaneusly, confirmation thatthe person submitting the user signiture verification code and the user
for which the confirmation of authenticity has been executed are one
and the same shall be done by alotting the user identification code
(information known only to the user whose identification is to be
confirmed) to that specific user.
(11) In case of dispute in verifying authenticity of the user or proxy,identify of the user or proxy is confirmed according to procedure
established in advance and in writing.

220B

13/37

List of the Accreditation criteria
Item
Implementation Ordinance
3. Methods for other business3111 (i) Important particulars on theimplementation of electronic
signature and use of certification
business shall be explained to theapplicant by appropriate methods
3112 such as the issue of documents.
（Article 6）

3113

Ver.3.2(2015.12.28)

Guidelines
Conformity with the Accreditation criteria
3.1 Items to be explained to applicants
Items to be explained to prospective users(1) Items 2 and 3 below shall be defined clearly and appropriately in theprescribed in item 1 of Article 6 of the Ordinance certification business rules and administration guidelines, etc.
are to contain the following items（Article 8 ）(i) In designated certification business, persons
who allow false certification to users by means of (2) The following essential items shall be explained to the user clearlyand concretely.
false user application are to be penalized underprovision of Article 41 of the Act.
① The certification business is accredited by the relevant Minister in(ii) In order to acquire legal effect corresponding charge, and penalty is imposed in case of application based on falsehoodto handwritten signature and seal impression,
which is revealed and proven.
user signature code for electronic signature is to② Electronic signature has legal force comparable to handwritten
be managed with adequate caution.
signature and seal impression, and user signature code is to be(iii) In case user signature code is endangeredmanaged with due caution and confidentiality.
(namely, placed in a state of being available to③ If a user signature code is compromised (i.e., a state in which it canother persons through theft, leakage, etc.;
hereafter the same) or is likely to be endangered, be used by others due to theft, leak, etc.) or is likely to be put into
jeopardy, or if the content of an electronic certificate is changed, or if
in case of change in provisions recorded in thethe use of an electronic certificate is to be terminated, etc., a request forelectronic certificate, or in case use of thecertificate is discontinued, request for revocation certificate revocation shall promptly be made.
of the said certificate must be made promptly.
(iv) Algorithm employed for electronic signature ④ Electronic signature algorithm used in the electronic certificate is toin use of electronic certificate for designatedbe that specified by the certification business in question.
certification business must be that designated by
the certification business provider.
(3) Important information shall be explained to users by one of thefollowing methods.
① Document issue (by mail, handed over in person, or by email)② Explanation in person③ Method comparable to 1 or 2.

3.2 Items to be shown for applicants, etc.
(ii)
In
order
to
verifytheapplicant'sUser application and other written or application- (1) Items 2 and 3 below shall be defined clearly and appropriately in the3211
intentions related to application,
related information in item 2 of Article 6 of thecertification business rules and administration guidelines, etc.
the applicant shall be asked toOrdinance shall show or contain in recording thesubmit application form on use or following items.（Article 9）other documents with the user's(i) The name, address, and date of birth of thesignature or stamp (applies only
applicantwhen the seal registration(ii) Specific uses of the electronic certificate for(2) The application form or information related to the application for use
3212 certificate of the stamp used iswhichapplication
was
submitted.
shall contain the following:attached) or send information① The user's name, address, and date of birth.
related to the application for use(iii) The name of the applicant for use in Rōmaji ② The purpose of the electronic certificate used for the application.
(only those to which the electronic(Roman letters).
③ The name of the applicant for use in Rōmaji (Roman letters).
signature is implemented and④ Handwritten signature of the applicant or seal impression of seal forwhich is acknowledged with the(iv) Handwritten signature of the applicant or
the certification, if official seal registration certificate is to be employedelectronic certificate provided byseal impression of seal for the certification, if
as method of verifying authenticity of the user (excluding cases in which
certification business to be
official seal registration certificate is to be
information on application is to be transmitted)
accredited (hereinafter referred to employed as method of verifying authenticity ofas the "accredited certification
the user (excluding cases in which information on
business".) or any operation similar application is to be transmitted).
thereto).（Article 6）(v) In application by proxy, the name and(3) In the event of application by proxy, in addition to (2), the3213
handwritten signature of the proxy applicant inapplication form shall be signed by the proxy or stamped using theaddition to the aforementioned items, seal
registered seal certified by the seal regisration certificate of the proxy
impression from the seal (if official seal
(only when a seal registration certificate is used as the method forregistration certification is to be employed asverifying authenticity of the proxy) and the reason(s) stated formethod of verifying authenticity of the proxy),application by proxy.
and reason for application by proxy.

14/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
3.3 Measures necessary for generation of user signature code by certification business(1) So that the certification business provider can generate a user
3301 (iii) In the event the certification
business provider creates the codes
signature code, Items 2 through 5 below shall be defined clearly and(hereinafter called the "userappropriately in the certification business rules and administration
signature codes") that users will
guidelines, etc., and implemented.
use to sign an electronic signature,(2) The user signature code is to be generated by multiple persons and3302 the certification business provider
measures are to be taken to prevent tapping, alteration, and/or othermust issue or send the user
incidents by controlling access rights, conducting internal checks, etc.,
signature code to each specific user
in the certification business facility room or in an environment in which
via a safe and accurate method.
comparable safety has been secured.
They also must promptly delete thespecific user signature codes and(3) When transferring, outputting, etc., user signature codes, measures3303
any copies of them.（Article 6）
shall be taken to prevent tapping, alteration, and/or other incidents bycontrolling access rights, conducting internal checks, etc., in thecertification business facility room or in an environment in which
comparable safety has been secured.
3304(4) When PINs, etc., used to activate the user's signature code are
generated, transfered, and outputted, measures shall be taken toprevent tapping, alteration, and/or other incidents by controlling accessrights, conducting internal checks, etc.
In addition, after removing PINs, etc from devices used for generating,transferring, outputtting, etc. then, PINs, etc. used for activating user
signature codes must be completely discarded or erased without delay.

3305(5) The generated user signature code shall be provided to the specificuser via a safe, secure method, and the user must provide a receipt thathas been signed by that user with a signature that identifies the user,or stamped with a seal that identifies the user, or electronically signedby that user

15/37

List of the Accreditation criteria
Item
Implementation Ordinance3311 When the user creates a user
signature code and thecertification business provider
receives the user signature
verification code that corresponds
to that specific user signature code
via telecommunication, the user
identification code (a one-timecode to identify a specific user thathas been created in such a way as
to not be easily guessed) shall be3312 sent to the user via a safe andreliable method. This code mustnot be revealed to anyone otherthan the specific user until it has
been used to identify that user.
3313 (item 3-2 of Article 6)

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(1) When the user creates a user signiture code and the certification
business facility is automatically operated by identifying the user
information and user identification code, and if the certification
business provider receives the user signature verification code that
corresponds to that specific user sigunature code via
telecommunications, Items 2 through 6 below shall be defined clearly
and appropriately in the certification business rules and administration
guidelines, etc., and implemented.
However, Item 5 shall include the provision that the certification
business facility is not to be operated automatically by identifying theuser information and the user identification code.
(2) The user identification code must be created using a safe, pseudorandom, number generating algorithm in a certification business facility
room or in an environment in which comparable safety has been
secured, and the process must be involved by multiple number of
persons.
(3) The user identification code must be sent to the user via a safe andreliable method. When electronic certificates are issued to a specificuser, receipt of the user identification code must be verified.

3314(4) The user identification code must be stored using methods such as
encryption, etc., in a certification business facility room or equivalentenvironment that ensures safety.

3315(5) When sending a user identification code, the user must verify thefacilities for receiving user identification codes, etc., and implement
measures to prevent tapping and/or alteration of the communicated
data.

3316

(6) Measures to prevent a user identification code from being used for
identification processes thereafter must be implemented immediately(i.e., measures to prevent the use of a user identification code that
corresponds to the user identified in the certification business facility
through discarding or flagging as "used").

16/37

List of the Accreditation criteria
Item

Implementation Ordinance

Guidelines
3.4 Items related to electronic certificate

Ver.3.2(2015.12.28)
Conformity with the Accreditation criteria

3401 (iv)Term of validity of electronic
certificates shall not exceed five
years.（Article 6）(1) Item 2 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.

3402(2) The period of validity of an electronic certificate issued to a user
shall be less than five years from the date of determination for issuance.

3411 (v) Electronic certificates should
list the following particulars.
（Article 6）(a) Name and issue number ofissuer of concerned electronic
certificate.
(b) Date of issue of concerned
electronic and term of validity.
(c) Name of user of concerned
electronic certificate.
3412 (d) Identifiers of user signature
verification codes related toconcerned electronic certificate andalgorithms related to concerneduser signature verification codes.

(1) Items 2 and 3 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.

(2) The format and language of the electronic certificate issued to theuser shall be prescribed and the certificate shall contain the following
information.
① Name of issuer (including type of business if engaged in various typesof certification business)② Issue number (to be unique in the certification business, including
the accredited certification business in question)③ Period of validity showing starting date to termination date(including hour, minute, and second).
④ Name of user
⑤ User signature verification code and algorithm ID related to theverification code(3) If the user creates a user signature code, the user signature
verification code recorded in the electronic certificate as stipulated in
Item 5 (d) of Article 6, of the Ordinances shall be confirmed to have acorresponding user signature code. This will be done by employing
methods to verify an electronic signature executed with a user
signature code by using the user signature verification code in question.
In addition, when verifying a specific user signature verification code,
the key length and cryptgraphic algorithm shall be checked.

3413

17/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item
Implementation Ordinance
Guidelines
Conformity with the Accreditation criteria
3421 (vi) Electronic certificates should be The electronic signature system that satisfies the (1) Item 2 below shall be defined clearly and appropriately in theequipped with issuer verification
criteria set forth in Article 2 of the Ordinancecertification business rules and administration guidelines, etc., andmeasures which conform to theshall be any of the following:(Article 3)
implemented.
criteria set forth in Article 2.
（Article 6）(i) RSA/SHA-1(object identifier 1 2 840 113549 1 15) , RSA/SHA-256 (object identifier 1 2 840
3422
113549 1 1 11), RSA/SHA-384 (object identifier 1 (2) The electronic signature system used in issuing electronic
certificates is to employ any of the following:
2 840 113549 1 1 12) or RSA/SHA-512 (object
identifier 1 2 840 113549 1 1 13) with modulus
consisting composite numbers of more than 1,024
bits.
①RSA/SHA-1(object identifier 1 2 840 113549 1 1 5) , RSA/SHA-256(ⅱ)RSA-PSS(object identifier 1 2 840 113549 1 1(object identifier 1 2 840 113549 1 1 11), RSA/SHA-384 (object identifier
10)/SHA-1(object identifier 1 3 14 3 2 26), RSA1 2 840 113549 1 1 12) or RSA/SHA-512 (object identifier 1 2 840 113549
PSS(object identifier 1 2 840 113549 1 1 10)/SHA1 1 13) with modulus consisting composit numbers of more than 1,024
256(object identifier 2 16 840 1 101 3 4 2 1), RSAbits.
PSS(object identifier 1 2 840 113549 1 1 10)/SHA384(object identifier 2 16 840 1 101 3 4 2 2) or
RSA-PSS(object identifier 1 2 840 113549 1 1②RSA-PSS(object identifier 1 2 840 113549 1 1 10)/SHA-1(object
10)/SHA-512(object identifier 2 16 840 1 101 3 4
identifier 1 3 14 3 2 26), RSA-PSS(object identifier 1 2 840 113549 1 12) with modulus consisting composite numbers of 10)/SHA-256(object identifier 2 16 840 1 101 3 4 2 1), RSA-PSS(object
more than 1,024 bits.
identifier 1 2 840 113549 1 1 10)/SHA-384(object identifier 2 16 840 1
101 3 4 2 2) or RSA-PSS(object identifier 1 2 840 113549 1 1 10)/SHA512(object identifier 2 16 840 1 101 3 4 2) with modulus consisting
composit numbers of more than 1,024 bits.
(ⅲ)ECDSA/SHA-1(object identifier 1 2 840 10045
4 1), ECDSA/SHA-256(object identifier 1 2 840
10045 4 3 2),ECDSA/SHA-384(object identifier 1 2
840 10045 4 3 3) or ECDSA/SHA-512(object
identifier 1 2 840 10045 4 3 4) with elliptic curve ③ECDSA/SHA-1(object identifier 1 2 840 10045 4 1), ECDSA/SHAdefinition and order consisting of more than 160 256(object identifier 1 2 840 10045 4 3 2), ECDSA/SHA-384(object
identifier 1 2 840 10045 4 3 3) or ECDSA/SHA-512(object identifier 1 2
bits.
840 10045 4 3 4) with elliptic curve definition and order consisting of(ⅳ)DSA/SHA-1(object identifier 1 2 840 10040 4 more than 160 bits.
3) with modulus consisting of elements of 1,024
bits.

18/37

④DSA/SHA-1(object identifier 1 2 840 10040 4 3) with modulus
consisting of elements of 1,024 bits.

List of the Accreditation criteria
Item

Implementation Ordinance3511 (vii )Appropriate measures should
be taken to prevent erroneousrecognition between accredited
certification business and otherbusiness by the user or others.
（Article 6）

3512

3513

Ver.3.2(2015.12.28)

Guidelines
Conformity with the Accreditation criteria
3.5 Measures to prevent error in recognition between accredited certification business and other businessAppropriate measures to prevent erroneous(1) Items 2 and 3 below shall be defined clearly and appropriately in therecognition between accredited certification
certification business rules and administration guidelines, etc., andbusiness and other business by the user or others implemented.
prescribed in item 7 of Article 6, of the Ordinanceshall include the measures listed below.
(i) Do not use for business other the accredited
certification business, except for the following:(Article 10)(a) Use for mutual certification with certification
business provided by national or local
governments in compliance with standards
comparable or exceeding other accredited
certification business.
(b) Use when necessary to maintenance ormanagement of the accredited certification
business.

(ⅱ)Accredited certification business shall be
specified according to the value for the electronic
certificate relating to the issuer signature
verification code that has been transformed by
one or more of SHA-1,SHA-256,SHA-384 or SHA512

19/37(2) Uses of the issuer signature code is restricted to signature onelectronic certificate issued for the certification business in question.
Uses of the issuer signature code other than the above are restricted to
the following.
① An electronic signature on mutual certification with a certification
business provided by national or local governments in compliance withstandards comparable to or exceeding other accredited certification
businesses.
② An electronic signature on electronic certificate of the certification
business in question (own signature).
③ An electronic signature on new electronic certificate for certification
business in question for updating issuer signature code in question.
④ An electronic signature on old electronic certificate for certification
business for updating issuer signature code in question.
⑤ An electronic signature on electronic certificate issued to certification
business facilities or person operating such facilities.
⑥ An electronic signature on magnetically recorded information about
revocation.
⑦ An electronic signature on electronic certificate issued to facility fordisclosure of electronic certificate revocation information andinformation on the certification business in question.
(3) A record is kept of the value determined by converting with one ormore of SHA-1,SHA-256,SHA-384 or SHA-512 the value in theelectronic certificate related to the issuer's signature verification code
corresponding to the issuer's electronic code. When the particular
operation begins, the information is disclosed as tamper-proof.

List of the Accreditation criteria
Item

Implementation Ordinance

Guidelines
3.6 Record of attributes in electronic certificate

3601 (viii) When recording the user's
title and other attributes (excluding
the user's name, address, and dateof birth) on the electronic
certificate, appropriate measures
should be taken to prevent
3602 erroneous recognition by the useror others that the certification of
the concerned attributes are related
to the accredited certification
business.（Article 6）

Ver.3.2(2015.12.28)
Conformity with the Accreditation criteria(1) If the user's title or other attributes shall be recorded on theelectronic certificate, Item 2 below shall be defined clearly andappropriately in the certification business rules and administration
guidelines, etc., and implemented.

(2) It must be noted on the electronic certificate that the user's title andother attributes (excluding the user's name, address, and date of birth)
recorded on the electronic certificate are excluded from certification inaccordance with the Electronic Signature Act (Act on Electronic
Signature and Certification Business) or a link to the information must
be included on the electronic certification.

3.7 Providing information to parties seeking signature verification(1) Items 2 and 3 below shall be defined clearly and appropriately in the3711 (ix) The signature verifier (receives Information necessary as provided in item 9 of
information from the user that
Article 6, of the Ordinance shall contain the items certification business rules and administration guidelines, etc., andelectronic signature was performed, described as follows: (Article 11)
implemented.
and verifies that the concerned user
performed the concerned electronic (i) The party verifying signature shall confirm theissuer of the electronic certificate by obtaining
signature, hereinafter the same)the issuer signature verification code andshould have easy access to the3712 codes used for verifying the issuer verifying the electronic signature by the issuer in (2) Items describing the signature verifier, including the following Items① through ③, must be described in such a way that they can be clearly
the electronic certificate.
of the electronic certificate
understood, and the location of the link to the electronic certificate must(hereinafter referred to as the
be included.
“issuer signature verification code”)(ii) The signature verifier shall confirm the① The issuer's signature verification code and fingerprint must be
and other necessary information.
objective of electronic certificate use, range of use properly obtained and the electronic signature by the issuer of the（Article 6）of the certificate, and its range of authority
electronic certificate must be verified, in order to verify the issuer of the(including requirements for use reported inelectronic certificate.
② The purpose of use or the scope of the application of the electronic
advance to the user).
certificate, or the restrictions thereof (including requirements for use(iii) The signature verifier is to confirm through notified to user) must be confirmed.
appropriate means that information on revocation ③ Confirmation of whether an electronic certificate revokes shall bedone using appropriate methods.
of the electronic certificate is not recorded.
(3) The signature verifier must be able to easily obtain Items ① to ③
below that are required to confirm the information described in (2) via
links on the electronic certificate.
① Electronic certificate and fingerprint of the issuer② Documents describing the purpose of use or the scope of theapplication of the electronic certificate, or the restrictions thereof(including requirements for use notified to user).
③ Revocation information for an electronic certificate.

3713

20/37

List of the Accreditation criteria
Item

Implementation Ordinance

Guidelines
3.8 Items on electronic certificate revocation

Ver.3.2(2015.12.28)
Conformity with the Accreditation criteria

3801 (x) In the event the user requests
that the electronic certificate be
revoked or discovers a fAct in theparticulars recorded on theelectronic certificate within theterm of validity, the date of
revocation of the concerned
electronic certificate and otherinformation on revocation should berecorded by electromagnetic
methods promptly (electronic3802 method, magnetic method, or othermethods which cannot berecognized by perception of others,
hereinafter the same).（Article 6）
3803(1) Items 2 through 5 below shall be defined clearly and appropriately inthe certification business rules and administration guidelines, etc., andimplemented.

3804(4) If an revocation request is accepted, the method for verifying theauthenticity of the applicant, the procedure for recording information
related to the revocation, etc., shall be defined and the measuresassociated with the revocation are to be immediately implemented.

3805(5) The format of revocation information recorded electromagnetically,
the content of the revocation informaion, and the updating cycle shall beclearly defined.

3811 (xi). The signature verifier shouldbe able to easily verify informationon the revocation of the preceding
item by the method which
automatically sends the3812 information when requested by thesignature verifier and othermethods within the term of validityof the electronic certificate.（Article
6）(1) Items 2 and 3 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.

(2) Reason(s) for the revocation of an elecronic certificate by the user,
etc., and reason(s) for revocation by the certification business provider
shall be clearly defined.
(3) The revocation request method, the document required for the
revocation request, and the described items shall be defined.

(2) One of the following methods must be used so that the signature
verifier is able to easily confirm the revocation information for anelectronic certificate during the time frame that certificate is valid, as
indicated on the certificate.
① Disclosure of electronic certificate revocation list showing certificatesthat have been revoked② Confirmation of state of electronic certificate revocation based on online certificate status confirmation protocol③ Other methods comparable in function to Items ① or ② above.

3813(3) The method of inquiry by the signature verifier, if the validity of an
expired electronic certificate is to be defined.

3821 (xii) When information on the
revocation of the electronic
certificate is recorded pursuant to3822 the provision of item 10, the user ofthe concerned electronic certificate
should be notified of this promptly.
（Article 6 ）(1) Item 2 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc.
(2) In the event of revocation of an electronic certificate, the user ofthat electronic certificate must be immediately notified.

21/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
3.9 Ordinances on management of certification business(1) Items 2 through 13 below shall be defined clearly and appropriately
3901 (xiii) The contact of the certification (1) Regulations on execution of certification
business, business conditions, and business as provided in item 13 of Article 6, of the in the certification business rules, and recorded and disclosed
other provisions on the
Ordinance shall contain provisions shown in the electromagnetically.
implementation of certification
following items: (Article 12)
business should be appropriately
prescribed, the concerned
3902 provisions should be recorded by a (i) Name and contact address of the certification (2) Name and address of the certification business provider*Address of the certification business provider (including postal code,business provider (address, telephone number,electromagnetic method, and thename of prefecture, name of building, floor, etc.)
facsimile
number,andelectronicmailaddress)
user and other parties should be*Name of contact officeable to easily read the concerned*Telephone number (including the certification business provider'sprovisions by a method which
number and area code)
automatic sends the information*Business hours
when requested by the user or*Facsimile number (including the certification business provider'sother parties or other methods.
number and area code)（Article 6 ）*Email address
3903(ii) Restriction items when restrictions apply toobjective, target, and range of certificate use.

3904(iii) Restriction items if restrictions apply to(4) Scope of guarantee and immunity restrictions, if any.
range of guarantee and responsibility to be taken ① Guarantee or responsibility of the certification business provider② Scope of guarantee and immunity restrictions

3905(iv) Items on methods of verifying authenticity of (5) Items on verifying authenticity of the use application and user.
① Method of application for the electronic certificate and required
the user and method of user application
documents② Method of verifying the authenticity of the user and documents to be
used to verify their authenticity, etc.

3906(v) Items on requesting revocation of electronic
certificate

3907(vi) Items on method of confirming information on (7) Method of confirming the revocation information for an electronic
revocation of electronic certificate and period for certificate and items on period of validity① Information about the revocation to be disclosed, the method of
confirmation
disclosure, and the cycle of updates to the revocation information of anelectronic certificate.
② Method of giving notice to users of electronic certificates regarding
revocation③ Method for dealing with an inquiry from a signature verifier
regarding information about the revocation of an electronic certificate
after the expiration of that certificate.

22/37(3) Items on purpose, target, and restrictions on certification① Party to which electronic certificate is issued by the certification
business in question② Purpose and restrictions on use and other relevant items onelectronic certificate issued by the certification business in question③ Method for confirming that the user attributes (excluding user name,address, and date of birth) shown on the electronic certificate outside
the scope of the certification of the Electronic Signature Act (Act on
Electronic Signature and Certification Business).

(6) Items on the request for the revocation of an electronic certificate① Method of the request for the revocation② Items to be recorded and required to be recorded in written request
for the revocation or request information③ Reason(s) for electronic certificate revocation (including those fromthe certification business provider)④ Method of verifying authenticity of requesting party

List of the Accreditation criteria
Item
3908

Implementation OrdinanceVer.3.2(2015.12.28)

Guidelines
Conformity with the Accreditation criteria
(8)
Items
on
security(vii) Items on security in certification business(including items on handling private information ① Matters regarding security management in the certification business② Matters regarding handling personal informationon the user)

3909(viii) Items on fees related to use of certification
business(9) Items on fees
① Charges required for the use of the certification business andpayment methods, etc., or where this information can be found

390A(ix) Items on preservation of books and(10) Items on preservation of books and documents① Preservation period and method, etc., for important books anddocuments to be stored by the certification business

390B(x) Items on termination of business(11) Items on termination of business① Revocation method for an electronic certificate that already has been
issued and the timing and method for notifying users in the event thatbusiness is terminated.

390C(xi) Acts and Ordinances applied in case of
dispute between certification businesses
providers and items on procedure for resolution(12) Act and Ordinances applied in case of dispute between certification
business provider and relevant parties and items on procedure forsettlement① Act and Ordinances applied in case of dispute between certification
business provider and relevant parties regarding certification business(in principle, Japanese domestic act, etc.)② Procedure for dispute resolution, court of jurisdiction, etc.

390D(xii) Items on revision of relevant Ordinances and (13) Provisions in revising the Ordinances and items on notification
items on notification method of users and other method① Operation procedures and approval for revision of the Ordinances② Notification method users and other persons in the event of revisionof the Ordinances

23/37

List of the Accreditation criteria
Item

Implementation Ordinance

3A01

3A02

3A03

3B01 (xiv) In the event the person
recorded as the user in theelectronic certificate reports of the
3B02 infringment of rights or interests,
or the risk of invasion, thedocuments indicated in Article
12.1.1 b and c on the user related tothe concerned electronic certificate
should be disclosed to the person
making the report promptly inresponse to the request.（Article 6 ）Ver.3.2(2015.12.28)

Guidelines
Conformity with the Accreditation criteria
3.10 Termination of certification business(2) Provisions listed in item 10 in the preceding(1) Items 2 and 3 below shall be defined clearly and appropriately inparagraph shall also apply to report to users for the certification business rules and administration guidelines, etc., andtermination of accreditation-related business no implemented.
later than 60 days prior to the termination (onthe date of expiration of certification business in (2) When terminating an accredited certification business, including in
the event an accreditation extension has not been the event an accreditation extension has not been sought, the users
must be notified of termination of the certification business no latersought) (although not applicable underunavoidable circumstances such as invalidation than 60 days prior to the termination.
of accreditation under Article 14.1 of the Act) andfor revocation procedure for electronic certificate (3) The electronic certificates of all users issued by the concerned
accredited certification business must be revoked by the date ofissued to user by date of termination of thetermination of the accredited certification business, and the method ofaccredited certification business..(Article12)verifying the information related to the revocation after the terminationmust be defined and implemented.
3.11 Information disclosure to owner of electronic certificate(1) Item 2 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.
(2) In the event the person recorded as the user of an electronic
certificate reports an infringment of rights or interests, or the risk of an
infringment , the following items shall be defined and implemented if
the required information is disclosed.
① Documents required for reporting and the reporting method② Method for verifying authenticity when receiving the report③ Information to be disclosed (the application form of the electronic
certificate, the documents used for verifing the authenticity of the user,
the data recorded on the electronic certificate, etc.)

24/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
3.12 Organization, etc., for management of certification business(1) Regarding the procedure(s) for business being carried out according
3C01 (xv) The following items should beprescribed clearly andto the responsibilities and scope of authority of each worker in theappropriately, and business should
certification business, and Items 2 and 3 below shall be defined clearlybe implemented appropriately
and appropriately in the administration guidelines, etc., andbased on the concerned particulars.
implemented.
(2) In the event of change(s) in the procedure(s) of the certification
3C02 （Article 6 ）(a) Procedure of businessbusiness, the change(s) shall be recorded promptly in theadministration guidelines, etc.
(3) Training programs on the certification business procedure(s) shall be
3C03
developed and implemented according to the scope of responsibility andauthority of each worker involved in the certification business.
Moreover, appropriate training shall be implemented in the event thatthe certification business procedure(s) change.
３C11 (b) Responsibility, rights, and chainof commands and orders of thepersons providing business(1) Responsibility, authority, and chain of command of the persons
involved in the certification business and Items 2 and 3 below shall bedefined clearly and appropriately in the administration guidelines,
etc.with attention to internal job jurisdiction.

3C12(2) In the event of change(s) in responsibility, authority and chain ofcommand, the change(s) shall be recorded promptly in theadministrative guidelines.

３C13(3) Training programs on the responsibility, authority and chain ofcommand for each worker involved in the certification business shall be
developed and implemented according to the scope of responsibility andauthority of each worker involved in the certification business.
Appropriate training shall be implemented in the event the
responsibility, authority and chain of command of each worker involvedin the certification business change.

3C21 (c) In the event of entrusting part ofbusiness to others, the scope ofbusiness entrusted. Details, methodof managing the management of
the concerned business by theentrusted party, method of
ensuring the appropriate
implementation of concerned
3C22 business.

(1) Items 2 and 3 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.
When business is entrusted, the scope is limited to a portion of thebusiness. This portion of the business includes the business related toverifying the authenticity of users, the business related to certification
business management and administration, and the business related tothe storage of books and documents, etc.

3C23(3) Proper business management shall be ensured by monitoring
through regular reports, etc., from the contractor on the businessconsigned.

(2) In the event of consignment agreement, procedure(s) related to thebusiness consignment and content of the business contracted shall bedefined clearly, with strict compliance with entrustor instructions,definition or responsibilities, guarantee, etc., to be clarified, as well.

25/37

List of the Accreditation criteria
Item
Implementation Ordinance
3C31 (d) Particulars on the auditing ofbusiness

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(1) Items 2 and 3 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.

3C32(2) Audit standards for the certification business shall be defined (i.e.,the standards for confirming the appropriate administration inaccordance with the procedures, etc., defined in item 13 of Article 6, anditem 15-a of Article 6 of the Ordinance), and regular audits shall be
implemented.

3C33(3) Measures including the review of facilities, ordinances, etc., shall be
implemented in accordance with audit results, updates in security
technology and any additional requests in the audit report, and theresults shall be evaluated.

3C41 (e) Allocation of persons withadequate knowledge and experienceon the technologies related to
3C42 business(1) Item 2 below shall be defined clearly and appropriately in theadministration guidelines, etc., and implemented.

3C51 (f) Measures required to prohibit
the use of the accessed information
for purposes other than thoseintended when verifying
3C52 authenticity of the user, and toprevent the leakage, loss, or
damage of the contents of books
and documents listed in each items
3C53 of Article 12.1.

(1) Items 2 through 4 below shall be defined clearly and appropriately inthe certification business rules and administration guidelines, etc., andimplemented.

3C54(4) Training programs on the handling and protection of personal
information appropriate to role shall be developed and implemented foreach employee involved in the certification business.

3C55(5) Storage of books and documents defined in each item of Article 12.1of the Ordinances, including Items in (6) below shall be defined clearly
and appropriately in the certification business rules and administration
guidelines, etc., and implemented.

(2) The number of engineers with the knowledge and experience
necessary to the execution/administration of electronic signaturetechnology/key management technology, as well as security for theadministration of certification business, shall be defined and allocatedas workers in the certification business.

(2) Handling and protection of personal information shall be defined,
storage location(s) shall be secured, and personal information submitted
by users shall be managed appropriately.
(3) At application for the electronic certificate, the handling of personal
information and scope of information entry in the certificate shall bepresented clearly to the user and approved by the user.

26/37

List of the Accreditation criteria
Item
3C56

Implementation Ordinance

Guidelines

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(6) The following measures shall be implemented to prevent theleakage, loss, or damage of each record.
① Common requirements*Each record is to be stored in a room with a door that can be placed
under lock and key and separated by partition or wall, etc.
*Room in which records are stored is to be equipped with automatic fire
detectors and extinguishers.
*Records are to be kept in a place away from direct sunlight or
insulated to prevent exposure to direct sunlight.
② Documents and information on paper shall be stored in the original*Environment developed to prevent original record from not becoming*Kept in customized files.
③ Additional requirements for records to be stored in electromagnetic* The computers and peripherals, operating systems, and applications
shall be maintained and stored to allow the contents of the recording
media to be displayed. If any computer, peripheral, operating system, orapplication is to be upgraded, then the personnel concerned must takemeasures to ensure its compatibility with the particular recording
media and prevent display failures.
* Recording media shall be stored in an appropriate case, etc., toprevent failure of data display. Measures shall be taken to ensure
recording according to the characteristics of each medium. However,measures that do not compromise the entirety and confidentiality of thecontent must be taken.

3C61 (g) Particulars on risk management(1) Items 2 through 5 below shall be defined clearly and appropriately inthe certification business rules and administration guidelines, etc., andimplemented.

3C62(2) Measures in the event of compromise to or possible compromise to of
the issuer's signature code and the recovery procedure shall contain thefollowing.
① Revocation of electronic certificates issued to all users by the specificcertification business.
② Notification to the electronic certificate users, disclosure to theverifying parties, and the methods used
③ Study into cause and damages and measures specific to cause④ Notification to relevant Minister

3C63(3) Measures damages caused by natural disaster, etc., with terminationof business and operation and recovery procedure are to contain thefollowing.
① Notification to the electronic certificate users, disclosure to thesignature verifier, and the methods used
② Study into cause and damages and measures specific to cause

3C64(4) If there is compromise or possible compromise to the issuer
signature code; e.g., disasters or breakdown of certification equipment
or any other event that would result in suspension of the ability toprovide information regarding revocation to the signature verifiers forany length of time exceeding that stipulated in the certification
ordinances, and that the signature verifier has no means of learning
about the suspension, the contents of the problem, the date and time ofoccurrence, measures, and other matters that have been confirmed
must be disclosed promptly to the relevant minister.

3C65(5) Training programs on the measures and recovery procedures forproblems resulting from compromise to the issuer signature code, orfrom disasters, etc., shall be planned and implemented according to thescope of responsibility and authority of each employee involved in thecertification business.

27/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Implementation Ordinance

Guidelines
Conformity with the Accreditation criteria
3.13 Authorization, etc., on operation, etc., of certification business facilities
Permission for access to room where certification (1) Items 2 and 3 below shall be defined clearly and appropriately in the
3D11 (xvi) The inspection of the room
installed with the facilities for the business facilities are installed and operation of certification business rules and administration guidelines, etc., andconcerned certification business,such facilities under item 16 of Article 6, of theimplemented.
approval of related operations, and Ordinance and appropriate management of the(2) Designation and registration of the persons authorized to enter the
3D12 management of identification codes identification code related to such permits shallcertification facility room shall be conducted, and access to the room
related to the concerned approval
be implemented by satisfying the following(i)
Accesstothecertification
facility
room
is
to
be
shall be executed in multiple number of persons only.
should be appropriately
executedinmultiplenumberofpersons
only.
implemented in accordance with
(3) Continuous surveillance is conducted whether the person enter the
3D13 the degree of importance of thecertification facility room in the defined access method and procedures.
business implemented at thefacilities for certification business.
(ii) If a person not authorized for access should be (1) Items 2 and 3 below shall be defined clearly and appropriately in the
3D21（Article 6 ）required to access the certification facility room
certification business rules and administration guidelines, etc., andfor facility maintenance and other circumstances implemented.
necessary for business management, a multiple
3D22
number of persons with authority shall escort the (2) In the event that an unauthorized persons must be allowed into thecertification facility room, they must be escorted by multiple number of
persons who are authorized to have access to the room.
(3) Continuous surveillance is conducted whether the persons not
authorized enter the certification facility room in the defined accessmethod and procedures.

3D23

3D31

(iii) Identification code for the system manager(1) If access control to the certification business facility is controlledshall be placed under exceptionally strict control. with passwords, Items 2 and 3 below shall be defined clearly andappropriately in the administration guidelines, etc., and implemented.

3D32(2) The procedure for and management of user account password
settings and changes, including regular revisions, etc., shall be carriedout. In addition, electronic records of passwords, such as password files,
must be encrypted and accessible only by authorized personnel.

3D33(3) The account password for the system manager shall be strictly
controlled by the inclusion of special characters distinguished from Item(2) above, as well as a shorter update cycle, the prohibition of password
changes via remote control, etc.

28/37

List of the Accreditation criteria
Item

Ver.3.2(2015.12.28)

Guidelines
Conformity with the Accreditation criteria
3.14 Measures necessary to prevent leakage of issuer signature code
3E11 (xvii) Measures should be taken to Measures necessary to prevent leakage of issuer (1) Items 2 and 3 below shall be defined clearly and appropriately in theprevent the creation andsignature code provided in item 17 of Article 6 of certification business rules and administration guidelines, etc., andmanagement of issuer codes by
the Ordinance shall satisfy the following
implemented.
several persons, and the leakage of requirements: (Article 14)
other concerned issuer signature(i) Generation and management of issuer(2) Issuer signature code is to be generated by a multiple number of
3E12 codes.（Article 6 ）signature code shall be executed by a multiple
persons and cannot be generated by only one in the group.
number of persons in the certification facility(3) Generation of the issuer signature code shall take place in the
3E13room with computer system specified for thiscertification facility room using an encryption device.
purpose under item 4 of Article 4 of theOrdinance.
3E21

3E22

3E23

3E24

Implementation Ordinance(ii) Duplication of the issuer signature code
(1) Items 2 through 4 below shall be defined clearly and appropriately inneeded for backup shall be executed in any of the the certification business rules and administration guidelines, etc., andfollowing methods.
implemented.
(a) Execution by computer system specified forthis purpose under item 4 of Article 4 of theOrdinance and issuer signature code duplicated (2) Backup copies of the issuer signature code are to be executed in thefor backup to be stored in a location with security certification facility room by a multiple number of persons and cannot
be generated by only one in the group.
comparable to that of the certification facilityroom.
(3) If issuer signature code backup is done by using duplication feature(b) information on the issuer signature code shall of the encryption device, the following requirements are to be satisfied① The encryption device executing backup is to be kept in the
be split in the certification facility room andstored separately in separate secure locations by certification facility room or in a location with a comparable level ofseparate persons (when a number of persons are security.
to assemble when issuer signature code is to be(4) If issuer signature code backup is not done by using duplication
restored).
feature of the encryption device, secret dispersion is adopted, and thefollowing requirements are to be satisfied.
① The scattered codes are to be stored with access control by lock andkey, etc., to deny contact by unauthorized persons and with measures
executed to prevent fire.
② The scattered codes are to be kept in different locations.

29/37

List of the Accreditation criteria
Item
3E31

3E32

3E41

3E42

Implementation Ordinance

Guidelines(iii) Modification in certification businessfacilities to enable or disable use of issuer
signature code shall be executed by a multiple
number of persons inside the certification facility
room.

Ver.3.2(2015.12.28)

Conformity with the Accreditation criteria(1) Item 2 below shall be defined clearly and appropriately in thecertification business rules and administration guidelines, etc., andimplemented.
(2) To change an issuer signature code, the following requirements must
be met.
① The change shall be executed inside the certification facility room.
② The change procedure shall involved multiple personnel and shall bedone using a method that cannot be performed by only one person.

(iv) If use of the issuer signature code is to be(1) Items 2 and 3 below shalｌ be defined clearly and appropriately in theterminated, it and the duplicated issuer signature certification business rules and administration guidelines, etc., andcode shall be disposed of simultaneously
implemented.
completely by a multiple number of persons(2) To discard issuer signature code (including backup), any of thethrough physical destruction or complete
following method is to be employed and executed by a multiple number
initialization.
of persons to confirm that it is destroyed irreversibly.
① physical destruction② complte initialization③ Other ways to assure that all issuer signature codes to be destroyed
are destroyed irreversibly.
(3) The issuer signature code and backup copies of the code (including
the code that has been reproduced and dispersed) shall be discarded
immediately in accordance with a specific procedure.

3E43

30/37

List of the Accreditation criteria
Item Implementation Ordinance
4 Books and documents
4101 Those books and documents
relating to the application for theuse of authentication operation as
described below (Article 12.1.1)
must be kept for 10 years after the
expiration of validity of theelectronic certificate relating
thereto (Article 12.2).
Such books and documents (onlythose documents on which no
signature or seal of the user or
proxy is affixed) may be stored inelectromagnetic recording media(Article 12.4).
Those books and documents to be
stored must be the original thereof(except those documents provided
in the preceding paragraph)(Article 12.5).

Ver.3.2(2015.12.28)

Conformity with Accreditation Criteria
Examples of Books and Documents
4.1 Books and documents, etc. related to the application for certification business(1) The records relating to the explanation
Records of explanation given to the user
described in item 1 of article 6 are created andExamples:preserved. (The explanation shall be given to the * User agreement
applicant as to the important matters relating to * Written consent for matters explained
the method of implementing electronic signatures
and the use of an certification business bydelivering relevant documents or any otherappropriate method.)

Such records include any additional information
relating to the date of implementation thereof
and the identification of the person who
implemented it(a) Records relating to the
explanation in item 1 of Article 6(Article 12.1.1(a))

4102 (b) Application for use (Article (2) The documents or information relating to the Documents or information relating to the application for use.
12.1.1)application submitted by the user of its proxy
Examples:(only those to which the electronic signature is* Application for use (including power of attorney in the case of an
implemented and which is acknowledged with the application by proxy)electronic certificate provided by accredited* Information related to the application for use by electronic signature
certification providor or any operation similar
and validation confirmation records
thereto, including records for which the validityof the electronic signature is confirmed) arepreserved.
Such documents or information include any
additional information relating to the date ofreceipt thereof and the identification of theperson who received them.
4103 (c) Copies of documents or (3) Copies of documents and certificates relating
certificatessubmitted
tothe to the application for use submitted for
certification business provider to confirmation of authenticity of the user or proxyconfirm the authenticity of the user or any information relating thereto (only those to(Article 12.1.1(c))
which the electronic signature verified by theelectronic certificate provided by accredited
certification providor or any operation similar
thereto is implemented, including records forwhich the validity of the electronic signature isconfirmed) are preserved.

Documents submitted for confirmation of authenticity
Examples:* Copy of residence certificate* Proof of personal seal registration* Authenticity verification management book relating to the user andits proxy* Official personal certificate and validity check records used for anelectronic signature

Such copies of documents and certificates or any
books relating to the management thereof include
any additional information relating to the date ofreceipt thereof and the identification of theperson who received them.
4104 (d) Name of the person who (4) The name of the person who determines the Name of the person who determines the approval or denial of thedetermines the approval or denial approval or denial of the application for use and applicationof the application for use (Article the date of such determination are recorded, andExamples:12.1.1(d))
such record is preserved.
* Electronic certificate issue instruction
4105 (e) In the event the application for (5) In the event the application for use is not Books that describe the reason for not approving the application
use is not approved, the documents approved, the documents that describe the reason
that describe the reason therefor therefor are prepared and preserved.
Examples:(Article 12.1.1(e))* Electronic certificate issue instruction* Copy of notice describing the reason for rejecting the issuance4106 (f) Electronic certificate and records (6) The electronic certificate and any records
relating to the creation thereof relating to the creation thereof are prepared and(Article 12.1.1(f))
preserved.
The foregoing records include any additional
information relating to the date of
implementation thereof and the identification of
the person who implemented such operation as
well as the person who is responsible for suchoperation.

31/37

Electronic certificate and electronic certificate issuance managementbookList of the Accreditation criteria
Item Implementation Ordinance4107 (g) Issuer signature verification
code (Article 12.1.1(g))

Ver.3.2(2015.12.28)

Conformity with Accreditation Criteria
The issuer signature verification code-related
records are preserved.

Examples of Books and Documents
Issuer electronic signature or issuer signature verification code andproduction records

The foregoing records include any additional
information relating to the date of
implementation thereof and the identification of
the person who implemented such operation as
well as the person who is responsible for suchoperation.

Examples:* Issuer electronic certificate generation instructions (production
request and reception)* Issuer electronic certificate generation work management book4108 (h) Records relating to the(8) The records relating to the generation and Records relating to the generation and management of the issuer
generation and management of the management of the issuer signature code are signature codeissuer signature code (Article
prepared and preserved.
Examples:12.1.1(h) )Books relating to the generation and management of the issuer① The records relating to the generation andsignature code
management of the issuer signature code include
those relating to the following:(a) Provisions stipulating the scope of use of theissuer signature code;(b) Generation and preservation of the issuer
signature code (backup-related)(c) Change in the settings of certification businessfacilities which makes the use of the issuer
signature code possible or impossible;(d) Backup of the issuer signature code;(e) Restoration of the issuer signature code;(f) Abolishment of the issuer signature code.
The foregoing records (except (a)) include any
additional information relating to the date of
implementation thereof and the identification of
the person who implemented such operation as
well as the person who is responsible for suchoperation.
4109 (i) In the event the certification (9) ① In the event the certification business① Books related to the generation and deletion of a user signature code.
business provider generates the provider generates the user signature code, theExamples:user signature code, the records records relating to the generation and* User signature code generation/deletion management books
relating to the generation and abolishment of such user signature code are② Receipts from the user
abolishment of such user signature prepared and preserved.
Examples:code and the receipts from the user
* Receipts
The foregoing records include the records relating(Article 12.1.1(i) )* Receipts management books
to the distribution as well as any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation and theperson who is responsible for such operation.
② The receipts from the user or any information
relating thereto are preserved (only those towhich the electronic signature is implemented
which is acknowledged by the electronic
certificate provided by accredited certification
providor or any operation similar thereto,
including records for which the validity of theelectronic signature is confirmed).
The foregoing records include any additional
information relating to the date of receipt thereof
and the identification of the person who received
them.

32/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item Implementation OrdinanceConformity with Accreditation Criteria
Examples of Books and Documents
4.2 Books and documents, etc. related to the revocation of an electronic certificate
4201 The books and documents relating (1) The written requests for invalidation of an
Written requests for revocation and other records relating to theto the revocation of an electronic electronic certificate and other records relating to determination of revocation (including the reasons for revocation)
certificate as described below the determination of invalidation are preserved
Examples:(Article 12.1.2) must be preserved (including those materials that are used for the* Written request for the revocation of an electronic certificate
for the period of 10 years after the verification of authenticity of the person who* Materials to confirm the authenticity of the person in question or the
expiration of validity of an requested the invalidation of the electronic
proxyelectronic certificate relating to certificate). The foregoing records include the* Information on the request for the revocation of an electronicsuch books and documents (Article reasons for the invalidation.
certificate with an electronic signature affixed and the electronic
12.2).
certificate for public identification, along with validation confirmation
The foregoing written requests for invalidation of records* Request for revocation and authenticity verification implementation
Such books and documents (only an electronic certificate or any information
management book (written confirmation)
those documents on which no relating thereto (only those to which theelectronic
signatureverifiedbytheelectronic* Revocation instruction
signature or seal of the user or
certificate
providedbyaccredited
certification
proxy is affixed) may be stored inelectromagnetic recording media providor or any operation similar thereto is
implemented, including records for which the(Article 12.4).
validity of the electronic signature is confirmed)
Those books and documents which are preserved and other records relating to thedetermination of invalidation include any
are stored must be the original
additional information relating to the date ofthereof (except those documents
receipt thereof and the identification of theprovided in the preceding
person who received them.
paragraph) (Article 12.5).
(a) The written requests forinvalidation and other records
relating to the determination ofinvalidation (Article 12.1.2(a) )4202 (b) Name of the person who (2) The name of the person who determines the Name of the person who determines the revocation
determines the revocation of an revocation of an electronic certificate and the date Examples:electronic
certificate(Article when such revocation is determined are recorded, * Revocation instruction
12.1.2(b))
and such records are preserved.
* Revocation procedure management book4203 (c) In the event the request for (3) In the event the request for revocation of an Reasons of rejection of revocation request
revocationofanelectronic electronic certificate is rejected, the documents
certificate
isrejected,
the that state the name of the person who makes the Examples:
documents that state the reasons determination thereof, the date when such * Written decision of rejection of revocation request
therefore (Article 12.1.2(c))
determination is made, and the reasons therefore * Revocation procedure management book
* Copy of notice of reason for rejection of revocation request
are prepared and preserved.
4204 (d) Information relating to the (4) The information relating to the revocation Any and all information on revocation (CRL, etc.)
revocation defined in item 10 of defined in item 10 of article 6 of the ordinance Examples:
Article 6 and the records relating to and the records relating to the preparation * Revocation instruction
the preparation thereof (Article thereof are prepared and preserved. In the event * Revocation procedure management book12.1.2(d))
the request for invalidation of an electronic
certificate is made by the user or any mattersthat are not based on the facts are discovered in
the records stated in the electronic certificate
within the validity term of an electronic
certificate, the date of invalidation of suchelectronic certificate and other information
relating to the invalidation shall be promptly
recorded by electromagnetic method (means any
electronic method, magnetic method and othermethod that can not be recognized by humanperception,andhereinafter
theanysame).
The
foregoingrecords
includeadditional
information relating to the date of
implementation thereof and the identification of
the person who implemented such operation andthe person who is responsible for such operation.

33/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item Implementation OrdinanceConformity with Accreditation Criteria
Examples of Books and Documents
4.3 Books and documents, etc. related to the organizational management of the certification business provider
4301 The books and documents relating (1) The regulations described in item 13 of Article Certification business rules and the records relating to the amendment
to the organization management of 6 of the Ordinance and the records related to the thereof
the certification business provider amendment thereof shall be prepared andas described below (Article 12.1.3) preserved. (The contact information, terms andmust be preserved for 10 years conditions of provision of authentication
after the expiration of validity of an operation, and other provisions on theelectronic certificate relating to implementation of authentication operation shallsuch books and documents (Article be appropriately determined, and such provisions
12.2).
shall be recorded by electromagnetic method that
Such books and documents (only allows automatic transmission thereof or
those documents on which no otherwise if requested by the user and othersignature or seal of the user or parties so that the user and other parties are able
proxy is affixed) may be stored in to access easily to such provisions.)
electromagnetic recording media
The foregoing records include any additional(Article 12.4).
information relating to the date ofThose books and documents to be
implementation thereof and the identification ofpreserved must be the original
the person who implemented such operation andthereof (except those documents
the person who is responsible for such operation.
provided in the preceding
paragraph) (Article 12.5).
(a) Regulations defined in item 13of Article 6 and the records relating
to the amendment thereof (Article
12.1.3(a))
4302 (b) Matters described in item 15(a) (2) The matters described in item 15(a) of Articleof Article 6 and the records relating 6 of the Ordinance (Operational Procedures) andto the amendment thereof (Article the records related to the amendment thereof
12.1.3(b) )shall be prepared and preserved.

Records relating to the amendment of operational procedures.
Examples:* Administration guidelines and the regulations based thereon(including amendment records)* Document management regulations (including document architecture)

The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.

4303 (c) Matters described in item 15(b) (3) The matters described in item 15(b) of Article Records relating to operational responsibilityof Article 6 and the records relating 6 of the Ordinance (responsibility and power of
Examples:to the amendment thereof (Article the person who engages in the operation and* Organizational chart, including command structure
12.1.3(c))
command structure) (including the organizational * Amended records of the organizational chart, including command
chart or system diagram related to personnel
structureengaged in the certification business facility* Operational responsibility, authority regulations and amended records
operation) and the records related to thethereofamendment thereof shall be prepared and* Records of the work order and order of removal
preserved.
The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.
4304 (d) In the event the authentication (4) In the event the authentication operation is
Consignment agreement and supplemental memorandum
operation is delegated in part to delegated in part to any other party, the
any
other
party,
documents documents relating to the consignment
relating to consignment agreement agreement are prepared and preserved.
(Article 12.1.3(d))
The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.

34/37

List of the Accreditation criteria
Item Implementation OrdinanceConformity with Accreditation Criteria
4305 (e) Records relating to the results of (5) The following records related to the results ofaudit described in item 15(d) of an audit as described in item 15(d) of Article 6 of
Article 6
the Ordinance (matters relating to the operation
audit) shall be prepared and preserved:① Audit implementation records (including
unscheduled audits)② Audit report (relating to periodic audits)③ Corrective measures report based on the
results of audit

Ver.3.2(2015.12.28)

Examples of Books and Documents
Audit implementation records
Examples:* Audit criteria and procedures* Matters to be audited and the details of audit* Questionnaire, etc.
* Audit implementation records* Audit report* Security audit report* Corrective measures report

The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.

4401 The books and documents relating
to the facilities and security
measures as described below(Article 12.1.4) must be preserved
from the date of preparation until
the date of renewal ofauthentication (Article 12.3).
Such books and documents (onlythose documents on which no
signature or seal of the user or
proxy is affixed) may be stored inelectromagnetic recording media(Article 12.4).
Those books and documents to bepreserved must be the original
thereof (except those documents
provided in the preceding
paragraph) (Article 12.5).

4.4 Books and documents, etc. related to certification business facilities and security measures(1) The following matters related to the measures Records relating to the access to the roomdescribed in item 1 of Article 4 of the Ordinance Examples:shall be recorded and the records shall be* Access control records for the certification facility roompreserved. (Of the facilities used for the operation * Records relating to the alarm
pertaining to the application, the computers and * Unauthorized personnel access records
other systems/facilities used in the
preparation/management of an electronic
certificate shall be installed where the required
measures have been implemented in accordancewith the importance of the operations, for the
purpose of managing access to/exit from thefacility.)① Date/hour and place of access to the room
② Information relating to the identification of theperson who accesses to the room
③ Records relating to the operation of devices toaccess to the room
④ Records relating to the alarm(a) Records relating to themeasures described in item 1 of
Article 4 (except visual records)(Article 12.1.4(a) )4402 (b) Records relating to the (2) The following matters related to the measures Unauthorized access records
measures described in item 2 of described in item 2 of Article 4 of the Ordinance Examples:
Article 4 (only those in the event of shall be recorded and the records shall be* Firewall setting information and abnormal log
any unauthorized access) (Article preserved. (All necessary measures shall be* Abnormal log of intrusion detection system (e-mail information to the12.1.4(b))
implemented in the certification business facility manager including the reasons for determining any abnormality
to prevent unauthorized access via* Security audit records
telecommunications.)① Of the firewall and intrusion detection system
history, the records that show any abnormal
condition (abnormal occurrence date and time, IP
address of source computer, IP address ofdestination computer, communication protocol
used, etc.)
4403 (c) Records relating to the operation (3) The following matters related to the operation Records relating to the operation of certification business facilities
of certification business facilities of a certification business facility as described in Examples:
described in item 3 of Article 4 item 3 of Article 4 of the Ordinance shall be* Records relating to the abnormal operation and failure(Article 12.1.4(c))
recorded and preserved. (All necessary measures
shall be implemented in the certification businessfacility to prevent operation by any unauthorized
person and such facilities must be able to record
such operations.)① Of the records relating to the operation ofcertification business facilities, the records
related to the operation other than those related
to the normal authentication operation and therecords relating to any failure

35/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item Implementation OrdinanceConformity with Accreditation Criteria
Examples of Books and Documents
4404 (d) Records relating to the (4) The records related to the permission as
Permission records (including the person who determines to permit)
permission described in item 16 of described in Item 16, Article 6 of the Ordinance
Examples:Article 6 (Article 12.1.4(d))
shall be prepared and the records shall be* Books relating to the authorization (including information recording
preserved. (The permission related to the access to biometrics device, password management records, etc.)
to the room where the certification businessfacilities are installed and the operation thereof
as well as the management of identification codes
relating to such permission shall be appropriately
implemented in accordance with the importanceof the operation conducted by such certification
business facilities.)① The foregoing records include the records
regarding authorization management based on
the regulations related to the permission bypermission type.
The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.
4405 (e) Records relating to the (5) The records relating to the maintenance and Maintenance records related to the certification business facilities
maintenance and management of management of certification business facilities
Examples:certification business facilities and and other facilities necessary for complying with * Maintenance records of certification business facilities* History ofother facilities
necessary for the criteria described in each item of Article 4 of modification of certification business facilities
complyingwith
thecriteria the Ordinance are prepared and preserved.
* History of modification of certification business facilities
described in each item of Article 4* Records of transition to backup facilities(Article 12.1.4(e))① The records that include the records relating to * Records of maintenance and management of institution
the maintenance of facilities and the history* Records of maintenance and management of certification facility room
relating to the modification of system.
* Records of maintenance and management of certification facility room
The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.
4406 (f) Records relating to accident (6) The records related to the accident shall be(Article 12.1.4(f))
prepared and preserved.

Reports relating to the failure and restoration
Examples:* Reports related to the failure of a certification business facility and① The foregoing records include records related the restoration thereof
to the unauthorized access of certification facility * Reports relating to the failure of access management device and theroom, shutdown/unauthorized operation of a
restoration thereof
certification business facility, and the* Reports relating to the failure of registration terminal and the
shutdown/unauthorized operation of devices used restoration thereof
to manage access to the certification facility room(with the exception of historical records for
firewall/intrusion detection systems indicating
abnormal conditions), the reports related to thefailure thereof (including the date/time failure
occurred), and reports related to the restoration
thereof. This includes the results related torestoration, (including the date/time ofrestoration and the name of the person who
implemented the restoration.)
The foregoing records include any additional
information relating to the date of
implementation thereof, the identification of theperson who implemented such operation, and theperson who is responsible for such operation.

36/37

List of the Accreditation criteria

Ver.3.2(2015.12.28)

Item Implementation OrdinanceConformity with Accreditation Criteria
Examples of Books and Documents
4407 (g) Records relating to the use and (7) The records related to the use and disposal of Records relating to the use and disposal of books and documents
disposal of books and documents books and documents shall be prepared and Examples:(Article 12.1.4(g))
preserved.
* Records related to the use and disposal of certification business rules,
user agreements, signature verifier agreements, personal information
The foregoing records include any additional
protection regulations, and regulations based on administration
information relating to the date of
implementation thereof, the identification of the guidelines
person who implemented such operation, and theperson who is responsible for such operation.

37/37