|
FSB Notification application rules ( appendix 9 decision 3 FSB notification from April 21th of 2015 ) |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
07.11.2017
Appendix N 9to the decision of the boardEurasian Economic Commissionon April 21, 2015 , N ThirtyRegulation on the importation into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) meansI. General provisions1. This Regulation determines the procedure for importation into the customs territory of the Eurasian Economic Union (hereinafter referred to as - the importation of the Union) and export from the customs territory of the Union (hereinafter - export) of encryption (cryptographic) means and products containing such funds included in the section 2.19 single list of goods which are subject to non-tariff measures in trade with third countries under the Protocol on measures of non-tariff regulation in relation to third countries (appendix N 7 of the Treaty on the Eurasian Economic Union by May 29, 2014 Year) (hereinafter - the encryption (cryptographic) means). 2. For the purposes of this Regulation used mean the following: "uniform register of notifications" - a list of information on registered consent of the states - members of the Union of notifications compiled according to the Annex N 1 and published on the official Online Union information and telecommunications network "Internet"; "Notification" - recorded the agreement of the State - a member of the Union in the manner prescribed by the Regulation on the notification of the characteristics of encryption (cryptographic) means and products containing them, in accordance with Annex N 2, notice the manufacturer's products (authorized representative of the manufacturer) in the form according to Appendix N 3, containing information about the technical and cryptographic characteristics of the goods, which are encryption (cryptographic) means, and products containing them, according to the list in accordance with Annex N 4; "Consent of the body" - a body of state power of the state - a member of the Union in the area of state (national) security, authorized in accordance with the law of that State for approval of licenses, issuing opinions (authorization documents) and the register of notifications. Other concepts used in this Regulation shall apply to the values defined by the Protocol on measures of non-tariff regulation in relation to third countries (appendix N 7 of the Treaty on the Eurasian Economic Union by May 29, 2014 year) and international treaties, outside the Union law. 3. Products included in the section 2.19 single list of goods which are subject to non-tariff measures in trade with third countries under the Protocol on measures of non-tariff regulation in relation to third countries (appendix N 7 of the Treaty on the Eurasian Economic Union by May 29, 2014 years), have the functions of encryption (cryptography) if they sell or provide incorporates the following tools (systems and complexes) a) encryption (hardware, software, and hardware and software systems and systems that implement algorithms for cryptographic transformation of data and for protecting data from unauthorized access during transmission via communication channels and (or) during its processing and storage); b) simulation protection means (hardware, software, and hardware and software systems and systems that implement algorithms for cryptographic transformation of data and for protecting against false information imposing); at) means of electronic digital signature (e-signature), determined in accordance with the laws of the - members of the Union (hereinafter - Member States); g) hardware, software, and hardware and software systems and systems that implement algorithms for cryptographic transformation of the information with the implementation of such a transformation by manual operation or automated tools based on such operations; d) hardware, software, and hardware and software systems and systems that implement algorithms and cryptographic transformation of information intended for the production of key documents (regardless of the type of media key information); e) hardware, software, and hardware and software, systems and complexes, designed or modified to perform cryptanalytic functions; x) hardware, software, and hardware and software, systems and complexes, which implements a cryptographic transformation of information, designed or modified to use cryptographic techniques to generate the spreading code for systems with an expanding range, including the hopping code for systems with frequency hopping; h) hardware, software, and hardware and software, systems and complexes, which implements a cryptographic transformation of information, designed or modified to use cryptographic techniques to classify or channelization codes for time-modulated ultra-wideband systems. 4. If encryption (cryptographic) means contain in their composition of radio electronic and (or) high frequency devices of civil use, included in Section 2.16 Uniform list of goods subject to bans or restrictions on the import or export of the states - members of the Customs Union within the Eurasian Economic Community in trade with third countries, approved the decision of the Board of the Eurasian Economic Commission on August 16, 2012 , N 134 (hereinafter - the Single List), or if the encryption (cryptographic) means part of such electronic means and (or) high frequency devices, the importation of such goods shall be in accordance with the provisions on the use restrictions (Regulation on the importation into the customs territory of the Customs Union electronic means and (or) high frequency devices of civil use, including built-in or a part of other goods), approved by the decision of the Board of the Eurasian Economic Commission on August 16, 2012 , N 134. If encryption (cryptographic) means includes in its composition special technical means intended for secret information included in section 2.17 Single List, the category of goods is determined by the matching body. 5. Import and (or) export of encryption (cryptographic) means carried out in the presence of information on the inclusion of the relevant notification of the single register of notifications (hereinafter - information on notification), or under license, drawn up in accordance with the Instruction on the design of an application for an export license, and ( or) import of certain kinds of goods and about the design of such a license approved by the decision of the Board of the Eurasian Economic Commission on November 6, 2014 , N 199 (hereinafter - the license) or imprisonment (of permission) in the form approved by decision of the Board of the Eurasian Economic Commission on May 16, 2012 , N 45 (hereinafter - resolution (permit)). II. Placed under the customs procedure6. Putting encryption (cryptographic) facilities under the customs procedure of release for domestic consumption and export is carried out by the customs authorities of the Member State of a license or notification information. Putting encryption (cryptographic) facilities under the customs procedure of release for domestic consumption and exports to ensure their own needs without the right of distribution and the provision of third party services in the field of encryption (cryptography) is carried out by the customs authorities of a Member State to enter into (permit document) or information about the notification. Not required to submit a license, imprisonment (of permission) or information about notification when placed under the customs procedure of release for domestic consumption or export of mobile operators samples test SIM cards for international exchange in the amount of not more than 20 pieces. 7. Putting encryption (cryptographic) facilities under the customs procedure for processing on customs territory,processing outside the customs territory, processing for domestic consumption, temporary admission (admission), temporary export, customs-free zone and free warehouse is carried out by the customs authorities of a Member State to enter into (permit document) or information about the notification. Putting encryption (cryptographic) facilities under the customs procedure of re-export or reimport at the completion of customs procedures for temporary admission (admission) or temporary export, respectively, is carried out upon the conclusion (of permission), under which such products have been placed under the customs procedure of temporary importation (tolerance) or temporary export, or information about the notification. In other cases, the premises of encryption (cryptographic) facilities under the customs procedure of re-import or re-export is carried out by the customs authorities of a Member State to enter into (permit document) or information about the notification. 8. Putting encryption (cryptographic) facilities under the customs procedure of customs transit for transportation from the customs authority in the place of arrival to the customs territory of the Union to the local customs authority, as well as transportation from the local customs authority to customs authority in the place of departure from the customs territory of the Union, as well as under customs procedures, customs warehouse and the refusal by the state is carried out under license or imprisonment (of permission) submitted for placement under other customs procedures, or information about the notification. Putting encryption (cryptographic) facilities under the customs procedure of customs transit for transportation from the customs authority in the place of arrival to the customs territory of the Union to the customs authority in the place of departure from the customs territory of the Union, as well as under the customs procedure of destruction carried out without submission to the customs authorities of Member States of the license, the conclusion (of permission) or information about the notification. 9. Putting encryption (cryptographic) facilities under the customs procedure of free trade is carried out by the customs authorities of Member State information about the notification. III. Grant of a license10. To obtain a license, legal persons and natural persons registered as individual entrepreneurs (hereinafter - applicants) shall submit to the competent authority of the Member State in whose territory the applicant is registered, the documents and information referred to in subparagraphs 1 - 5 points 10 Rules for issuing licenses and permits for export and (or) import of goods (Annex to Appendix N 7 of the Treaty on the Eurasian Economic Union by May 29, 2014 Year) (hereinafter - the Rules) and in accordance with subparagraph 6 points 10 Rules of the following documents and information: a) a notice of the applicant or any other document provided for by the legislation of a Member State, the absence of a part of the imported encryption (cryptographic) means of electronic means and (or) high frequency devices of civil appointment included in the section 2.16 Single List; b) other documents required by the legislation of a Member State. eleven. Copies of the documents submitted by the applicant, must be certified in the manner prescribed by paragraph 11 of the Rules. 12. The decision to issue a license is adopted the competent authority of the Member State in agreement with the consent of the procedure stipulated by the legislation of that Member State. The applicant, if the legislation of a Member State, to be submitted to the agreement of the documents referred to in paragraph 10 of these Regulations. At the same time the documents referred to in subparagraph "b" of item 10 hereof, the authorized body of a Member State is not represented. Reconciliation can be performed through the issuance of the conclusion (of permission). 13. In refusing to issue a license if there are grounds provided by subparagraphs 1 - 4 points 14 of the Rules, and in accordance with subparagraph 6 points 14 of the Regulation - in case of failure to agree on the agreement of license application. IV. Issuance of the conclusion (of permission)14. Conclusion (permit) for the premises of encryption (cryptographic) facilities under customs procedures provided for in points 6 and 7 of this Regulation shall be issued in agreement with the representation of the body the following documents: a) draft opinion (of permission), designed in accordance with the guidelines on filling in a single form of imprisonment (of permission) to import, export and transit of certain products included in the single list of goods subject to bans or restrictions on the import or export of the states - members Customs Union within the Eurasian Economic Community in trade with third countries, approved by the decision of the Board of the Eurasian Economic Commission on May 16, 2012 , N 45; b) technical documentation of encryption (cryptographic) means (view the source code is not mandatory, the applicant's refusal to present the source code is not grounds for denial of the conclusion (of permission)); at) other documents required by the legislation of a Member State. 15. The issue of detention (of permission) rejects the presence of the following grounds: a) failure to provide the applicant the documents specified in paragraph 14 of these Regulations; b) presence of incomplete or inaccurate information in the documents submitted by the applicant to obtain the opinion (of permission); at) other grounds provided by the legislation of a Member State.
Appendix N 1
to the Regulations on the import into the customs territory Eurasian Economic Union and exported from the customs territory Eurasian Economic Union encryption (cryptographic) means (form) Unified Register
|
room notification | Name of product | Manufactured goods | Publication date of notification | Validity | Identifier | Status * |
Cancellation date |
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 |
* In the column entry is "valid" or "canceled". In case of 7 entries in the column "canceled" in box 8 indicate the date of making the record in this register. The position is highlighted in color (shade of gray)
1. This Regulation establishes the procedure: a) filling and design district of ratification of the technical characteristics and cryptographic encryption (cryptographic) means and products containing them (hereinafter - notification); b) submission of the notification to the public authority of the State - a member of the Eurasian Economic Union in the area of state (national) security, authorized in accordance with the law of that State for approval of licenses, issuing opinions (authorization documents) and the register of notifications (hereinafter referred to as - the agreement of, the Member State Union); at) form and presentation of the consent of the Eurasian Economic Commission (hereinafter - Commission) information about registered notifications; g) published on the official Online Union information and telecommunications network "Internet" (hereinafter referred to as - the official website of the Union, the Internet) a single register of notifications on the characteristics of encryption (cryptographic) means and products containing them (hereinafter - a single register of notifications); d) cancellation notification. 2. Notification filled in the form specified in Annex N 3 of the Regulation on the importation into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) means (appendix N 9 to the decision of the board of the Eurasian Economic Commission on April 21, 2015 , N thirty). Notification filled in Russian. Allowed Latin letters names technologies, protocols, cryptographic algorithms and their generally accepted abbreviations, details of the manufacturer of the goods. 3. Notification issued by the manufacturer of goods or a person authorized by the manufacturer of goods (hereinafter - applicants) on the basis of the manufacturer's own evidence once. Applicant filled with items 1 - 9 notification. 4. The notification may be declared information about one type of goods or of a group of similar products containing in its composition identical encryption (cryptographic) means (functional finished products) that implement the same cryptographic algorithm having the same maximum length of working cryptographic key, the same a set of features that when administered to the same cryptographic key and the same input sequence providing the same output sequence). 5. In paragraph 1 the notification specifies a trade, commercial or other traditional name of the product or group of similar products containing in its composition identical encryption (cryptographic) means (with a list of specific items), as well as information on trademarks, brands, models, articles, standards, and other technical and commercial characteristics. For software version is indicated. It is also possible to add to the product name of "and spare parts." Each item of goods from a group of similar products listed on a separate line. After the name of the goods may be listed on a separate line remarks (for reducible notation). 6. In paragraph 2 the notification specifies a description and designation of the goods and the appointment of such a product used in the encryption (cryptographic) functions. 7. In paragraph 3 the notification shall include the name and address of the legal entity - the manufacturer of the goods, the location of its head office, telephone and fax numbers and e-mail addresses and the official website on the Internet (if available). 8. In paragraph 4, the notification shall contain the following information: names used encryption (cryptographic) protocols; name and destination are used in a range of cryptographic algorithms (features), the maximum length of all used cryptographic keys; the name and version of the software; the maximum range of the wireless action without amplification and retransmission in accordance with the manufacturer's specifications (in the case of using a cryptographic algorithm (function) in a wireless radio electronic equipment); encryption (cryptographic) function blocked by the manufacturer (if available). The names used in the product of encryption (cryptographic) protocols and algorithms are specified separately for each performing a specific function. In the description of cryptographic algorithms (features) on the right in a special cell, the number of the relevant item (category number) of the N 4 to the Regulations on the import into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) means (appendix N 9 to the Decision of the Board of Eurasian Economic Commission on April 2015 21, N 30). 9. In paragraph 5 the notification shall contain: a) undeclared functionality of the product (if any), the use of which may occur: breach of confidentiality, integrity or availability of information processed; violation of the authentication process; intervention mechanism for the use of electronic digital signature (e-signature); b) the presence or absence of opportunities for operational and search activities ("police" mode). 10. In paragraph 6, the notification stated expiration date of notification, before which the manufacturer guarantees the immutability of encryption (cryptographic) functions, in the format DD.MM.YYYY. eleven. In paragraph 7, the notification shall contain: for legal entities - the name, the location of its head office, telephone and fax numbers, email addresses, and the official site on the Internet (if available), as well as the position, surname, name and patronymic of the person authorized for the issue of the notification; for individuals - name, name of the person, the data of the identity document in accordance with the legislation of a Member State. The applicant Member State and shall provide information about its registration (registration authority, registration date, registration number, identification number) in accordance with the legislation of a Member State. 12. In paragraph 8, the notification specifies details (date and number) the identity document for registration notification (power of attorney agreement (contract), and so on. N.) (To be filled if the notification is made by an authorized person). 13. In paragraph 9, the notification shall indicate the date of filling the notification in the format DD.MM.YYYY. 14. The notification signed by an authorized person for the issue of the notification indicating the decoding signatures and certified stamp (if available). 15. The applicant is responsible for the accuracy of any information and documents. 16. In the event that all of the information does not fit on the blank notification of this information is indicated on the reverse side of the form and each additional page, with each sheet of the notification signed by the applicant and certified by the seal (if any). 17. Software for filling in paragraphs 1 - 8 of notification and forming it into an electronic form posted on the official website of the Union and shall allow the applicant: a) fill in the form of notification in accordance with this Regulation; b) to form a printed notification form and print it; c) create an electronic copy of the notification in accordance with the structure of the data file in accordance with Annex N 1; g) save generated print and electronic copy of the notification file. 18. In order to register the applicant in the notification submitted to the agreement of the cover letter included with the following documents: a) 2 copies of the notification, executed in accordance with this Regulation; b) an electronic copy of the notification to the electronic medium (CD-ROM, flash memory) according to the structure of the data file provided by the application N 1 hereto; c) a document confirming the authority of the person for the issue of the notification, certified (legalized) in accordance with the laws of the State of the manufacturer. In the case of preparation of the document in a foreign language to the original (notarized copy) of a document supplied certified in accordance with the legislation of a Member State, a translation into the official language of the Member State, the agreement of which registers notification. 19. In the case of registration of the notification by the applicant, is the organization of the manufacturer of the third country, notification should be legalized. 20. The notification and the documents may be submitted in the form of electronic document in accordance with the legislation of a Member State. It allowed the submission of documents in the form of scanned documents signed by electronic signature ( e- signature ) of the applicant, if the legislation of a Member State. 21. The consent of the Authority no later than 7 working days from the date of filing the registration notification registers (refuse to register) notification and submit to the Commission information on the registered notifications in accordance with the structure of the data file according to the application N 2. Matching authorities are responsible for the completeness and accuracy of information on the registered and canceled notifications. 22. The Commission no later than 3 working days from the date of receipt of the information about the registered notifications brings them into a single register of notifications published on the official website of the Union. Notification is valid from the date of making information about its registration in a single register of notifications. 23. The deadline for registration notification (notification of refusal to register) and entering data on registered consent of the notifications in a single register of notifications shall not exceed 10 working days from the date of filing the registration notification of the consent of the Authority. 24. The Commission is responsible for the completeness and accuracy of posted on the official website of the Union of information on the registered and canceled notifications. 25. On the official website of the Union, users are given the ability to view and search the data of registered notifications. 26. In the period from the date of submission of documents for registration of the notification to the applicant notifying the registration may be amended in the notification of these changes with the sight of an authorized person for the issue of the notification, at the same time within the period specified for the notification of registration, begins anew from the date of making changes to the notification. 27. In the case of non-notification submitted for registration documents with the requirements of this Regulation matching authority shall refuse to register a notification. 28. The consent of the Authority may decide to annul the notification in the following cases: a) the applicant files the application to the agreement of the termination of the notification indicating the reason; b) identification of the consent of the false or incomplete information provided in the notification; c) identification of encryption (cryptographic) functions, not specified in the notification, or contrast settings of encryption (cryptographic) functions from those indicated in the notification. 29. In case of cancellation of the agreement of the notification within 3 working days, inform the Commission thereof. 30. The action is terminated from the date of notification by making information about its cancellation in a single register of notifications or the date of its expiration.
Data file notifications shall be submitted to the agreement of the states - members of the Eurasian Economic Union in a format * .xls. Description of the structure of the file is shown in the table.
Name of structure element | Field type | The semantic content | Obligation |
1. Room | Character | registration number | no |
2. Name of product | Character | Product Name | Yes |
3. Manufactured goods | Character | manufactured goods | Yes |
4. Date of notification (1) | date format | date of registration notification | no |
5. Validity | DD.MM.YYYY date format br DD.MM.YYYY |
validity notification |
Yes |
6. Status (1) | logical | Status notification is set: Action / canceled | no |
7. An identifier (2) | Character | Product ID (12-digit) |
Yes |
(1) To be completed by the consent of the states - members of the Eurasian Economic Union. (2) To be filled in based on the information listed in paragraph 4, notification under the form specified in Annex N 3 to the Regulations on the import into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) means (appendix N 9 to the Decision of the College Eurasian Economic Commission, 2015 April 21, N 30). The index value is formed from 12 characters, each of which corresponds to the number of the list of categories of goods that are of encryption (cryptographic) means or containing in the structure of encryption (cryptographic) means, technical and cryptographic specifications are subject to notification under Annex N 4 to the Regulations on the import into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) means (appendix N 9 to the Decision of the Board of Eurasian Economic Commission on April 2015 21, N 30). If the serial number is equal to the character identifier item number specified list, the symbol is assigned a value of one, otherwise - the value of zero.
The data file of registered notifications submitted the consent of the states - members of the Eurasian Economic Union in the Eurasian Economic Commission in the format * .xls. Description of the structure of the file is shown in the table. The data file of registered notifications contain information about registered and canceled notifications since the last presentation of the Eurasian Economic Commission and must have the following name: nXX_DD_MM_YYYY.xls, where: n - an element indicating that this file is a data file recorded on the notifications; XX - the country code in accordance with the Classifier of countries of the world (AM - Armenia, BY - Republic of Belarus, KZ - The Republic of Kazakhstan, RU - Russian Federation); DD_MM_YYYY - the date of sending the file to the Eurasian Economic Commission. For example, a data file on March 2015 registered 15 g. notifications directed the consent of the Russian Federation shall have the following name: nRU_15_03_2015.xls.
Name of structure element | Field type | The semantic content | Obligation |
1. Number |
character in the format: XXNNNNNNNNNN, where: the XX-th - the country code in accordance with the Classifier of countries of the world; NNNNNNNNNN - sequence number |
registration number. The value of the field must be unique | Yes |
2. Item Name | Character | Product Name | Yes |
3. Head manufactured goods | Character | manufactured goods | Yes |
4. Date of notification | date format DD.MM.YYYY |
date of registration notification | Yes |
5. Validity | date format DD.MM.YYYY |
validity notification |
Yes |
6. Identifier | Character | Product ID (12-digit) | Yes |
7. Status | logical | Status notification is set: Action / canceled | Yes |
8. Date cancellation | the date of cancellation of the notification | validity notification |
Yes (in case of cancellation) |
It is registered in the register of "____" __________ 20 ___ g. N __________________ MP _______________________________________ _____________________ (signature of the official consent (Name) Body) -------------------------------------------------- ------------------- ---- NOTIFICATION on the characteristics of _______________________________________________________ (coding (ie creep ograficheskih) and (or) products containing them, - indicate that apply) 1. Name of product __________________________________________________ ______________________________________________________________________ ___ 2. Appointment of goods ____________________________________________________ ______________________________________________________________________ ___ 3. Information about the manufacturer Product ______________________________________ ______________________________________________________________________ ___ 4. Used cryptographic algorithms (function) N category of and their purpose: the N 4 ┌──────────────────────────────────────────────────────────┐ ┌─────┐ a) │ │ │ │ │ │ └─────┘ │ │ ┌─────┐ b) │ │ │ │ │ │ └─────┘ │ │ ┌─────┐ in) │ │ │ │ └──────────────────────────────────────────────────────────┘ └─────┘ 5. The presence in the product functionality is not described in operational documentation provided by the user _______________ ______________________________________________________________________ ___ 6. The validity of the notification ___ / ___ / _______ 7. For information about the applicant _________________________________________________ ______________________________________________________________________ ___ 8. DocInformation manufacturer, attesting to the authority of the person registration notification (if necessary) _______________________________ ______________________________________________________________________ ___ 9. Date of completion notification ___ / ___ / _______ Accuracy and completeness of the information included in the notification, confirm: MP ________________________ ______________________________ (signature of the applicant) (Name)
1. Products containing in its composition of encryption (cryptographic) means, having any of the following: 1) a symmetrical cryptographic algorithm using the cryptographic key length not exceeding 56 bits; 2) an asymmetric cryptographic algorithm, based on any of the following methods: factorization integers that do not exceed 512 bits; calculation of discrete logarithms in a multiplicative group of a finite field, the size of which does not exceed 512 bits; discrete logarithm in the group of a finite field other than the field specified in the third paragraph of this subparagraph, the amount of which does not exceed 112 bits. Notes: 1. The parity bits are not included in the key length. 2. The term "cryptography" does not refer to fixed compression techniques or data encoding. 2. Products containing encryption (cryptographic) means, having the following limited functions: 1) authentication, which includes all aspects of access control where there is no encryption of files or text except for encryption, which is directly related to the protection of passwords, personal identification numbers or similar data to prevent unauthorized access; 2) digital signature (e-signature). Note. The functions of authentication and digital signature (e-signature) include the related functions of key distribution. 3. Encryption (cryptographic) means, which are the software components operating system, cryptographic capabilities that can not be changed by users, which are designed for installation by the user without further substantial support provider and technical documentation (description of the algorithms of cryptographic transformations, communication protocols, a description of the interfaces and so on. Etc. .) which is available to the user. 4. Personal smart cards (smart cards): 1) The cryptographic capabilities are limited in terms of their use of goods (products) specified in paragraphs 5 - 8 of this list; 2) for wide public use, the cryptographic capability is not user and which as a result of a special design have a limited ability to protect the stored personal data on them. Note. If the personal smart card (smart card) can perform several functions, the control status of each function is determined separately. 5. Receiving equipment for radio broadcast, pay television or similar equipment for commercial broadcasting in limited audience, without digital encryption except when used solely for managing the encryption of video or audio channels, send invoices or return information related to the program providers broadcast. 6. Equipment where the cryptographic capability is not user specially designed and limited to allow any of the following ways: 1) The software is executed in the form of a copy-protected; 2) access to any of the following: Copy-protected contents stored only in a readable electronic medium; information stored in encrypted form on electronic media, which are offered for sale in identical sets; 3) copy control audio and video protected by copyright. 7. Encryption (cryptographic) equipment specially designed and limited for banking use or money transactions. Note. Financial transactions include including fees and payment for transport services and lending. 8. Portable and mobile radio-electronic means of civil use (eg for use with commercial civil cellular radiocommunications systems) that are not capable of end encryption (from subscriber to subscriber). 9. Wireless electronic equipment, encrypts the information only in the radio channel with a maximum range of wireless action without amplification and retransmission of less than 400 meters according to the manufacturer's specifications. 10. Encryption (cryptographic) means used to protect the technological channels of information and telecommunication systems and networks. eleven. Goods cryptographic function which is locked by the manufacturer. 12. Other products that contain encryption (cryptographic) means, other than those specified in paragraphs 1 - 11 of the list, and meet the following criteria: 1) are publicly available for sale to the public in accordance with the law of the State - a member of the Eurasian Economic Union, without limitation of the available range of retail displays by any of the following: cash sales; sale by mail order; electronic transactions; telephone sales orders; 2) encryption (cryptographic) functionality which can not be changed by the user in a simple manner; 3) are designed for installation by the user without further substantial support by the supplier; 4) technical documentation confirming that the goods comply with the requirements of subparagraphs 1 - 3 of this paragraph, the manufacturer is placed in the public domain and submitted, if necessary, the manufacturer (the person authorized by him) by the consent of his request.
|
||||||||
|