LEGAL REGULATION OF ATTRIBUTIVE DIGITAL SIGNATURE TECHNOLOGY IN UKRAINE

Abstract

The purpose of this work is to analyze the provisions of laws and regulatory documents of Ukraine, which regulate the use of electronic signatures, for compliance with the requirements for the implementation of digital signature technology based on the personal attributes of the signatory as a subject of personal data. The analysis was carried out to determine the compliance of the proposed version of the implementation of the technology with the requirements of the legislation of Ukraine regarding the processing and storage of the signer's personal data, which can be included in the digital signature based on attributes. The article discusses the main provisions of digital signature technology based on personal attributes, provides a classification of attributes used to form a signature, and analyzes the differences between a cryptographic electronic digital signature and a signature on attributes. To analyze the features of digital signature technology based on personal attributes, a method of formalized representation of various classes of attributes in a mathematical model is provided, and a signature synthesis scheme based on a formalized representation of the signer's personal attributes is presented. It was determined that the attribute digital signature technology provides maximum flexibility and adaptability to the signer's needs and can be both an alternative to the cryptographic electronic digital signature technology and its addition. The digital signature technology based on the personal attributes of the signer also increases the security and accuracy of the signer's identification, since not one, but an arbitrary number of attributes of different classes is used to identify the person. In order to determine the possibility of applying the attribute digital signature technology in the legal field of Ukraine, a comparative study of the basic provisions of the technology and the requirements of the current laws was conducted. The article proves the possibility of introducing electronic digital signature technology in Ukraine based on the attributes of the signatory person in accordance with current legislation and other regulatory documents. It was determined that the adaptation of the laws and standards of Ukraine to the normative legal documents of the European Union plays not the least role in creating the necessary conditions for this.