Assembly Bill No. 674–Committee on Commerce and Labor
(On Behalf of Secretary of State)
March 22, 1999
____________
Referred to Committee on Commerce and Labor
SUMMARY—Provides for establishment of provisions regarding use of digital signatures. (BDR 59-672)
FISCAL NOTE: Effect on Local Government: No.
Effect on the State or on Industrial Insurance: Yes.
~
EXPLANATION – Matter in
bolded italics is new; matter between brackets
THE PEOPLE OF THE STATE OF NEVADA, REPRESENTED IN SENATE AND ASSEMBLY, DO ENACT AS FOLLOWS:
1-1
Section 1. NRS is hereby amended by adding thereto a new Title,1-2
designated Title 59 of NRS, and adding to that Title a new chapter to1-3
consist of the provisions set forth as sections 2 to 21, inclusive, of this act.1-4
Sec. 2. As used in this chapter, unless the context otherwise requires,1-5
the words and terms defined in sections 3 to 14, inclusive, of this act have1-6
the meanings ascribed to them in those sections.1-7
Sec. 3. "Asymmetric cryptosystem" means an algorithm or series of1-8
algorithms that provide a secure key pair.1-9
Sec. 4. "Certificate" means a computer-based record that:1-10
1. Identifies the certification authority using it;1-11
2. Identifies a subscriber;1-12
3. Sets forth the public key of the subscriber; and1-13
4. Is digitally signed by the certification authority issuing it.1-14
Sec. 5. "Certification authority" means a person who issues a1-15
certificate.2-1
Sec. 6. "Correspond" means, with reference to keys, belonging to2-2
the same key pair.2-3
Sec. 7. "Digital signature" means a transformation of a message2-4
using an asymmetric cryptosystem.2-5
Sec. 8. "Hold a private key" means to be authorized to use a private2-6
key.2-7
Sec. 9. "Key pair" means a private key and its corresponding public2-8
key in an asymmetric cryptosystem, which may be used in such a manner2-9
that the public key can verify a digital signature created by the private2-10
key.2-11
Sec. 10. "Message" means a digital representation of information.2-12
Sec. 11. "Private key" means the key of a key pair used to create a2-13
digital signature.2-14
Sec. 12. "Public key" means the key of a key pair used to verify a2-15
digital signature.2-16
Sec. 13. "Subscriber" means a person who:2-17
1. Is identified as such in a certificate;2-18
2. Accepts the certificate; and2-19
3. Holds the private key that corresponds to the public key set forth2-20
in the certificate.2-21
Sec. 14. "Verify a digital signature" means, in relation to a given2-22
digital signature, message and public key, to determine accurately that:2-23
1. The digital signature was created by the private key corresponding2-24
to the public key; and2-25
2. The message has not been altered since the digital signature was2-26
created.2-27
Sec. 15. The provisions of this chapter apply to any transaction for2-28
which a digital signature may be used to satisfy a requirement that a2-29
document or record be signed or in writing as set forth in section 16 of2-30
this act, including, without limitation, transactions carried out by private2-31
businesses and transactions carried out by governmental entities.2-32
Sec. 16. 1. Except as otherwise provided in subsection 2, if each2-33
person or governmental entity who will be involved in the submission and2-34
acceptance of a record or other document agrees to the use of a digital2-35
signature, where a statute or rule of law requires that the record or other2-36
document be signed or in writing, the use of a message which:2-37
(a) Represents the record or other document; and2-38
(b) Is transformed by a digital signature,2-39
shall be deemed to satisfy the statute or rule of law with respect to the2-40
requirement that the record or other document be signed or in writing.2-41
2. The provisions of this section do not apply with respect to:2-42
(a) A sworn statement;2-43
(b) An acknowledgment;3-1
(c) A record or other document that is required to be signed in the3-2
presence of a third party; or3-3
(d) A record or other document with respect to which the requirement3-4
that the record or other document must be signed or in writing is3-5
accompanied by an additional qualifying requirement.3-6
Sec. 17. 1. Except as otherwise provided by specific statute, a3-7
public agency may provide that any document submitted to the public3-8
agency may be submitted electronically if the document is transformed by3-9
a digital signature.3-10
2. As used in this section, "public agency" means an agency, bureau,3-11
board, commission, department or division of the State of Nevada or a3-12
political subdivision thereof.3-13
Sec. 18. 1. A person shall not conduct business as a certification3-14
authority without first obtaining a license as a certification authority3-15
from the secretary of state.3-16
2. The secretary of state may charge a reasonable fee for such3-17
licensure.3-18
Sec. 19. The secretary of state may:3-19
1. Issue injunctions and orders to enforce the provisions of this3-20
chapter and any regulations adopted by the secretary of state pursuant3-21
thereto.3-22
2. Impose a civil penalty not to exceed $10,000 for a willful violation3-23
of a provision of this chapter or a regulation adopted by the secretary of3-24
state pursuant thereto.3-25
Sec. 20. 1. It is unlawful for a person to:3-26
(a) Forge a digital signature; or3-27
(b) Provide false information knowingly to the secretary of state with3-28
respect to any provision of this chapter or a regulation adopted pursuant3-29
thereto that requires such a person to provide information to the3-30
secretary of state.3-31
2. A person who violates the provisions of subsection 1 is guilty of a3-32
gross misdemeanor.3-33
3. As used in this section, "forge a digital signature" means to create3-34
a digital signature that:3-35
(a) Is not authorized by the person who holds the private key used to3-36
create the digital signature; or3-37
(b) Although verifiable by a public key, the certificate that contains3-38
the public key identifies a subscriber who:3-39
(1) Does not exist; or3-40
(2) Does not hold the private key that corresponds to the public key3-41
contained in the certificate.4-1
Sec. 21. The secretary of state shall adopt regulations regarding4-2
digital signatures, including, without limitation, regulations pertaining4-3
to:4-4
1. The use of a digital signature, including, without limitation,4-5
standards for the commercial use of a digital signature;4-6
2. Licensure of a certification authority, including, without4-7
limitation, professional standards that a certification authority must meet4-8
in conducting its business;4-9
3. The verification of a digital signature;4-10
4. The liability that may be incurred by a subscriber, certification4-11
authority or recipient of a message transformed by a digital signature,4-12
including, without limitation, the limitation of such liability;4-13
5. The use of a digital signature as an acknowledgment, as that term4-14
is defined in NRS 240.002;4-15
6. The issuance of injunctions and orders and the imposition of civil4-16
penalties pursuant to section 19 of this act;4-17
7. The status of a private key as personal property;4-18
8. The responsibilities of a subscriber with respect to the use and4-19
handling of a private key;4-20
9. The confidentiality of information represented in a message that is4-21
transformed by a digital signature; and4-22
10. Any other aspect of the use or verification of digital signatures4-23
that the secretary of state determines to be necessary.4-24
Sec. 22. NRS 239.041, 239.042, 239.043 and 239.044 are hereby4-25
repealed.4-26
Sec. 23. The amendatory provisions of this act do not apply to4-27
offenses committed before the effective date of this act.4-28
Sec. 24. This act becomes effective upon passage and approval.
4-29
TEXT OF REPEALED SECTIONS
4-30
239.041 "Public agency" defined. As used in NRS 239.041 to4-31
239.044, inclusive, "public agency" means any agency, bureau, board,4-32
commission, department or division of the State of Nevada or any political4-33
subdivision thereof. 239.042 Electronic submission of records authorized; use of and4-35
conditions for acceptance of electronic symbol as signature.4-36
1. Except as otherwise provided by specific statute, a public agency4-37
may:4-38
(a) Provide that any document submitted to the public agency may be4-39
submitted electronically and may be signed with an electronic symbol; and5-1
(b) If the recipient of a document so authorizes, use an electronic5-2
symbol as the signature of a public officer or employee of the agency on5-3
any document for which a signature is required.5-4
2. An electronic symbol may be accepted pursuant to subsection 1 only5-5
if it is:5-6
(a) Unique to the person for whom it is used as a signature;5-7
(b) Capable of verification; and5-8
(c) Linked to data in such a manner that the signature is invalidated if5-9
the data is altered.5-10
239.043 Electronic symbols as substitute or supplement to5-11
signature: Regulations of secretary of state. The secretary of state shall5-12
provide by regulation for the use of electronic symbols to substitute or5-13
supplement the handwritten or facsimile signature of a person as provided5-14
in NRS 239.042. Such regulations must include, without limitation:5-15
1. The manner in which a public agency may accept an electronic5-16
symbol as a substitute or supplement to a handwritten or facsimile5-17
signature; and5-18
2. The manner in which an electronic symbol must be verified.5-19
239.044 Licensing of business to verify electronic symbols used as5-20
substitute or supplement to signature: Fees; regulations.5-21
1. The secretary of state may license a business to verify an electronic5-22
symbol that is used as a substitute or supplement to a handwritten or5-23
facsimile signature.5-24
2. The secretary of state may charge a reasonable fee for such5-25
licensure.5-26
3. The secretary of state may adopt regulations to carry out the5-27
provisions of this section.~