[ CHAPTER 1 - GENERAL PROVISIONS ]

Article 1. Purpose

The purpose of this Act is to establish the basic framework for digital signatures in order to
achieve the integrity and reliability of electronic messages and to promote their use, thereby
stimulating the use of electronic records and communications on a national level and to
advance social benefit and convenience.

Article 2. Definition

The following definitions shall be used throughout this Act:

1. “Electronic message” means information generated, communicated, received, or stored
in an electronic form by a device possessing data processing capabilities such as a
computer.

2. “Digital signature” means information, which is unique to an electronic message,
created by a private key using an asymmetric cryptosystem such that the identity of the
person generating the electronic message and any possible alteration thereof can be
verified.

3. “Private key” means information in electronic form used to create a digital signature.

4. “Public key” means information in electronic form used to verify a digital signature.

5. “Key pair” means a private key and its corresponding public key.

6. “Certification” means the act of verifying and certifying the correspondence of a public
key to a private key owned by a natural or juridical person.

7. “Certificate” means information in electronic form verifying and certifying the
correspondence of a public key to a private key owned by a natural or juridical person.

8. “Certification practice” means the practices employed in providing certification
services such as the issuance of certificates and maintenance of certification-related
records.

9. “Licensed certification authority” means an institution designated pursuant to Article 4
hereof who provides certification services.

10. “Certification practice system” means a system under which certification services, such
as the issuance of certificates and maintenance of certification-related records, are
performed.

11. “Subscriber” means a person whose public key is certified by the licensed certification
authority.

12. “Personal information” means information pertaining to a living person that contains
items such as name and resident registration number, which establishes the identity of
such person (or, when such information alone is insufficient for identifying a particular
person, capable of easily identifying such person when combined with other
information).

13. “Asymmetric cryptosystem” is an encryption method where the key used to encrypt
information is different from the key used to retrieve the encrypted information.
Article 3. Effect of a Digital Signature

(1) A digital signature created by a private key that corresponds to a public key listed in the
certificate issued by the licensed certification authority in accordance with Article 15 shall be
deemed to be a legally effective signature or signature-seal.

(2) With respect to a digital signature under Paragraph (1) hereof, it shall be presumed that
such digital signature is the signature or signature-seal of the person to whom a respective
electronic message correlates and that the respective electronic message has not been altered
after it was digitally signed.