LAWS OF BRUNEI 2008 Ed. Electronic Transactions CAP. 196 9 “information” includes data, text, images, sound, codes, computer programs, software and databases; “information system” means a system for generating, sending, receiving, storing or otherwise processing data messages; “key pair”, in an asymmetric cryptosystem, means a private key and its mathematically related public key, having the property that the public key can verify a digital signature that the private key creates; “licensed certification authority” means a certification authority licensed by the Controller pursuant to regulations made under section 42; “Minister” means the Minister of Finance; “operational period of a certificate” begins on the date and time the certificate is issued by a certification authority (or on any later date and time stated in the certificate), and ends on the date and time it expires as stated in the certificate or when it is earlier revoked or suspended; “private key” means the key of a key pair used to create a digital signature; “public key” means the key of a key pair used to verify a digital signature; “record” means information that is inscribed, stored or otherwise fixed on a tangible medium or that is stored in an electronic or other medium and is retrievable in perceivable form; “repository” means a system for storing and retrieving certificates or other information relevant to certificates; “revoke a certificate” means to permanently end the operational period of a certificate from a specified time; “rule of law” includes a written law; “security procedure” means a procedure for the purpose of — (a) verifying that an electronic record is that of a specific person; or B.L.R.O. 4/2008