ORDER OF THE MINISTER OF INVESTMENTS AND DEVELOPMENT OF THE REPUBLIC OF KAZAKHSTAN

of January 19, 2016 No. 10

About approval of Rules of classification of the state services electronically for determination of method of authentication of uslugopoluchatel

According to the subitem 62) of article 7 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" I ORDER:

1. Approve the enclosed Rules of classification of the state services electronically for determination of method of authentication of uslugopoluchatel.

2. To committee of communication, informatization and information of the Ministry for Investments and Development of the Republic of Kazakhstan To? азангап) provide T.B.:

1) state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) the direction of the copy of this order in printing and electronic type on official publication in periodic printing editions and information system of law of Ad_let within ten calendar days after its state registration in the Ministry of Justice of the Republic of Kazakhstan, and also in the Republican center of legal information within ten calendar days from the date of receipt of the registered order for inclusion in reference control bank of regulatory legal acts of the Republic of Kazakhstan;

3) placement of this order on Internet resource of the Ministry for Investments and Development of the Republic of Kazakhstan and on the intranet portal of state bodies;

4) within ten working days after state registration of this order in the Ministry of Justice of the Republic of Kazakhstan submission to Legal department of the Ministry for Investments and Development of the Republic of Kazakhstan of data on execution of the actions provided by subitems 1), 2) and 3) of Item 2 of this order.

3. To impose control of execution of this order on the supervising vice-minister of investments and development of the Republic of Kazakhstan.

4. This order becomes effective on the expiration of ten calendar days after day of its first official publication.

Approved by the Order of the Minister of investments and development of the Republic of Kazakhstan of January 19, 2016 No. 10

Rules of classification of the state services electronically for determination of method of authentication of uslugopoluchatel

Chapter 1. General provisions

1. These rules of classification of the state services electronically (further - Rules) are developed for determination of method of authentication of uslugopoluchatel according to the subitem 62) of article 7 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" and determine procedure for classification of the state services rendered electronically for determination of method of authentication of uslugopoluchatel.

2. In these rules the following concepts and reducings are applied:

1) authorized body in the field of informatization - the central executive body performing management and cross-industry coordination in the field of informatization and "the electronic government";

2) the one-time password - the password valid only for one session of authentication of subjects of receipt of services electronically;

3) the base containing personal data (further - base) - set of the arranged personal data;

4) the instant message - the technology of data transmission allowing to organize interactive interaction between the subscriber of network of cellular communication and service appendix in the mode of transfer of instant short messages;

5) composite service - complex of the interconnected services for which provision the request of the subject of receipt of service electronically and obligatory the certificate by means of the digital signature suffices;

6) uslugopoluchatel - physical persons and legal entities, except for the central state bodies, foreign institutions of the Republic of Kazakhstan, local executive bodies of areas, the cities of republican value, the capital, areas, the cities of regional value, akims of areas in the city, the cities of district value, settlements, villages, rural districts;

7) the service provider - the central state bodies, foreign institutions of the Republic of Kazakhstan, local executive bodies of areas, cities of republican value, the capital, areas, cities of regional value, akims of areas in the city, the cities of district value, settlements, villages, rural districts, and also the physical persons and legal entities rendering the state services according to the legislation of the Republic of Kazakhstan;

8) the short text message - the service rendered by mobile operator in acceptance and information transfer by means of network of cellular communication;

9) login - name (identifier) of accounting record of the user on the portal;

10) the state service - one of the forms of realization of the separate state functions performed in individual procedure according to the address of uslugopoluchatel and directed to realization of their rights, freedoms and legitimate interests, provision of the corresponding material or non-material benefits by it;

11) authentication - confirmation of authenticity of the subject or access object by determination of compliance of the shown details of access available in system;

12) the subscriber structure of cellular communication - the means of communication of individual use creating signals of electric communication for transfer or acceptance of information set by the subscriber and connected to network of mobile operator, not having the permanent geographically determined location within the serviced territory, working in networks of cellular communication;

13) the web portal of "the electronic government" (further - the portal) - the information system representing single window of access to all consolidated government information including the regulatory legal base, and to the state and other services rendered electronically;

14) mobile application of "the electronic government" (further - mobile application) - the software product established and started on the subscriber structure of cellular communication and providing access to the state services and other services rendered electronically by means of cellular communication and the Internet;

15) the digital signature (further - the EDS) - set of electronic digital symbols created by means of the digital signature and confirming reliability of the electronic document, its accessory and invariance of content.

Chapter 2. Procedure for classification of the state services electronically for determination of method of authentication of uslugopoluchatel

3. For the purpose of determination of method of authentication of uslugopoluchatel for each state service rendered electronically the analysis by the following criteria is carried out:

1) the risk of potential damages from disclosure of personal data determining probability of approach of adverse effects for the service provider and (or) the uslugopoluchatel connected with illegal receipt of rendering the state services by the third parties of results.

Assessment of risk probability is performed by the service provider independently;

2) changes following the results of rendering the state service of data on uslugopoluchatel in base of the service provider;

3) the term of rendering the state service from the moment of filing of application and until issue of result of rendering the state service;

4) the paid nature of rendering the state service according to article 553 of the Code of the Republic of Kazakhstan of December 25, 2017 "About taxes and other obligatory payments in the budget (Tax code).

4. Methods of authentication of uslugopoluchatel for receipt of the state services are electronically given in appendix 1 to these rules.

5. The analysis of the state services and determination of method of authentication of uslugopoluchatel is performed in the following procedure:

1) if the state service in case of disclosure of personal data has risk of potential damage to uslugopoluchatel and/or the service provider, then the point 2 is appropriated. If the specified risk is absent, then the point 1 is appropriated;

If rendering the state service leads 2) to change of data in base of the service provider, then the point 2 is appropriated. If rendering the state service does not lead to change of data in base, then the point 0 is appropriated (services of which rendering different types of references are result belong to such services);

If the term of rendering the state service exceeds 3) 30 minutes, then the point 1 is appropriated. If the term of rendering the state service does not exceed 30 minutes, then the point 0 is appropriated;

4) if the state service is rendered on paid basis, then the point 1 is appropriated. If the state service is rendered on free basis, then the point 0 is appropriated.

The table of calculation of points, according to criteria of classification of the state services, is given in appendix 2 to these rules.

Score of the chosen criteria and determination on its basis of method of authentication of uslugopoluchatel is result of classification of the state services.

The final point from 0 to 1 implies use of method of authentication "login/password".

The final point from 2 to 3 implies use of method of authentication "the login/password + the one-time password".

The final point from 4 to 6 implies use of method of authentication "the login/password + the EDS".

6. Classifications are subject all state services rendered electronically by means of the portal and the subscriber structure of cellular communication.

7. Classification of the state services according to these rules, is performed independently by each state body responsible for development of the standard and regulations of the state service.

8. Each state body after independent determination of method of authentication for each state service, sends results of classification of the state services to authorized body in the field of informatization.

Appendix 1

to Rules of classification of the state services electronically for determination of method of authentication of uslugopoluchatel

Methods of authentication of uslugopoluchatel for receipt of the state services electronically

1. For receipt of the state services the following methods of authentication of uslugopoluchatel are electronically used:

1) in case of the method "login/password" the uslugopoluchatel on the portal or in mobile application uses login and the password, chooses the state service, creates request and sends it to the service provider;

2) in case of the method "login/password + EDS" the uslugopoluchatel on the portal or in mobile application uses login and the password, chooses the state service, creates request and for the direction to the service provider certifies EDS request;

3) in case of the method "login/password + one-time password" the uslugopoluchatel on the portal or in mobile application uses login and the password, chooses the state service, creates request, enters the one-time password sent to subscriber number of cellular communication of uslugopoluchatel and sends inquiry to the service provider.

Alternative method of authentication "the login/password + the one-time password" is use of the method "login/password + EDS".

In case of receipt of the state service electronically by means of the instant message and in the form of the short text message the one-time password is not applied.

2. Concerning the state services in issue of allowing documents and composite services the authentication method "the login/password + by the EDS" is used.

Appendix 2

to Rules of classification of the state services electronically for determination of method of authentication of uslugopoluchatel

Table of calculation of points

№	Name of criterion	Options
		Choice 1	Point	Choice 2	Point
1	Risk of potential damages from disclosure of personal data	the risk is available	2	the risk is absent	1
2	Influence on change of data in base	the service leading to changes in base	2	the service which is not leading to changes in base	0
3	Term of rendering service	the service requiring certain time (more than 30 min.)	1	instant service (up to 30 min.)	0
4	Paid nature of rendering service	paid services	1	the rest	0

 

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info