Division 5.3

The following entities shall intervene in the TACHOnet trust architecture:

1. (a)

   Certification Authority, responsible for the generation of the digital certificates to be delivered by the Registration Authority to the national authorities of the contracting parties (via trusted couriers appointed by them), as well as for setting up the technical infrastructure regarding the issuance, revocation and renewal of digital certificates.

2. (b)

   Domain Owner, responsible for the operation of the central hub referred to in Sub-appendix 4.1 and for the validation and coordination of the TACHOnet trust architecture.

3. (c)

   Registration Authority, responsible for registering and approving the requests of issuance, revocation and renewal of digital certificates, and for verifying the identity of the trusted couriers.

4. (d)

   Trusted Courier, is the person appointed by the national authorities, responsible for handing the public key to the Registration Authority and for getting the corresponding certificate being generated by the Certification Authority.

5. (e)

   National authority from the contracting party, which shall:

   1. (i)

      generate the private keys and the corresponding public keys to be included in the certificates to be generated by the Certification Authority;

   2. (ii)

      request the digital certificates to the Certification Authority;

   3. (iii)

      appoint the Trusted Courier.