***********************************************

The new smart identity card and the digital identity which it offers will enable Hong Kong residents to perform secure transactions over the Internet, the Secretary for Security, Mrs Regina Ip, said today (March 6).

Mrs Ip was speaking in Singapore at an international conference on Cyber Security co-hosted by the Singapore Institute of Defence and Strategic Studies and the US Center for Strategic and International Studies.

In a speech entitled "Hong Kong Perspective on Security and E-commerce", Mrs Ip said that with the introduction of the new identity card, Hong Kong would be the first administration to offer free digital certificates to its 6.8 million residents.

"We see this as a big step forward in enhancing cyber security and e-business," she said.

"The free digital certificate to be loaded onto the smart identity card will be issued by Hongkong Post. The digital certificate, by generating the digital signature, provides a number of important features which make possible secure electronic transactions.

"First, the digital signature ensures confidentiality by protecting the privacy of personal information and making it inaccessible to third parties.

"Second, it authenticates the user by providing the means to ascertain the identity of an individual over cyberspace.

"Third, it guarantees data integrity by proving that the information received has not been tampered with during transit.

"Finally, it executes transactions that cannot be repudiated, for the digital signature will ensure that all information passed cannot be disowned," Mrs Ip said.

The new identity card remains a proof of identity but in a radically more secure form.

Since the card will capture the template of the cardholder's thumbprints, Immigration Department can use the fingerprint identification technology to quickly authenticate the cardholder's identity. Among other things, this will make possible the introduction of an automated passenger clearance system at control points in future.

The more secure identity card will also facilitate identity checks by patrolling policemen.

The Hong Kong smart identity card, when linked together with the digital certificate, will be more trustworthy than most other forms of electronic identity.

Mrs Ip said, "To our knowledge, few governments have an equally stringent system with digital certificates embedded in personal documents issued to their citizens."

"Thus, although originally conceived as no more than a tool for curbing illegal immigration, the new smart identity card will become also a highly potent tool of ensuring security in electronic transactions."

Earlier in her speech, Mrs Ip acknowledged that cyberspace was a potential security minefield where vigilance was of paramount importance.

"The Government is determined to make Hong Kong a leader in the use of information technology (IT), to employ IT to sustain our economic competitiveness and be a forerunner in e-business.

"This calls for a sound IT policy, a robust legal framework, vigorous law enforcement, joint efforts between the public and private sectors, and co-operation with our business partners worldwide, towards greater regulation of cyberspace," Mrs Ip said.

Mrs Ip said that a local public key infrastructure had been established, with the setting up of a "root Certificate Authority" to provide digital certificate service in Hong Kong and, through the use of digital certificates and the services of the certification authorities, to authenticate the identity of transaction parties, thereby ensuring the integrity and confidentiality of the information during transaction process.

Noting that effective regulation would not be possible without a comprehensive legal framework, Mrs Ip pointed out that Hong Kong's existing laws enabled the government to attack most forms of reported computer crimes.

She said, "We have provisions in the Crimes Ordinance to deal with access to a computer with criminal or dishonest intent or misuse of computer programme or data. The Telecommunications Ordinance contains provisions penalising unauthorized access to a computer by telecommunication. The Electronic Transactions Ordinance further reduces the opportunity for computer crime through the use of false identities."

Mrs Ip added that Hong Kong had adopted a series of effective control and enforcement measures. "Action is spearheaded by a high-powered Inter-departmental Working Group which studies and reviews the government's response to computer related crime," she pointed out.

"Out there on the frontline, we have expanded a small Police Computer Crime section in July 2001 to a full-blown Technology Crime Division staffed by over 70 officers," she said.

In maintaining e-security, the Hong Kong Government places great emphasis on contributions by the private sectors.

An action party comprising representatives from four government law enforcement agencies in Hong Kong has been formed to look into collaboration between law enforcement and the private sectors, such as the banking and financial industry, the stock exchange, major telecommunication and Internet services providers, and computer software vendors.

"Law enforcement agencies have been maintaining close cooperation with local universities in setting up accredited computer forensic training for law enforcement officers, and in applying the fruits of computer research in the academia to facilitate the prevention and detection of cyber crimes."

Hong Kong also recognises the importance of cooperation with other jurisdictions in the fight against cyber crime.

"Other than experience-sharing in international conferences at different levels, our law enforcement agencies are making extra efforts to

build partnership worldwide.

-

"Hong Kong maintains close liaison with the Interpol and assisting the Interpol in running the Interpol Asia and South Pacific Working Party on IT Crime.

"We are also a member of the High-Tech Crime Technology network organised by the National Police Agency of Japan. We will be joining more international liaison network to combat computer crime," Mrs Ip said.

The cyber security conference, held from March 4 to 6, was attended by representatives from Australia, Hong Kong, Japan, Singapore and the United States.

END/Wednesday, March 06, 2002

NNNN