Definitions
[Related to the Administration's Encryption Policy Guidance Announced September 16, 1998]
rwb_line.gif (239 bytes)

Insurance  Company means:

a) A company organized and regulated under the laws of  the United States and its branches and affiliates whose primary and predominant business activity is the writing of insurance or the reinsuring of risks; or

b) A company organized and regulated under the laws of a foreign country and its branches and affiliates, regulated by an insurance commissioner or an equivalent foreign regulatory authority and whose primary and predominant business activity is the writing of insurance or the reinsuring of risks.

Health/Medical means:

Any entity, the primary purpose of which is the lawful provision of 'medical or other health services' not including biochemical and pharmaceutical manufacturers and military government entities.

On-line Merchants means:

A seller of goods using electronic means (e.g. the internet) to conduct commercial transactions and is defined to be (1) a person that deals in goods of the kind involved in the transaction, (2) a person that by occupation purports to have knowledge or skill particular to the practices or goods involved in the transaction, or 3) a person to which knowledge or skill may be attributed by the person's employment of an agent or broker or other intermediary that purports to have the knowledge or skill.   UCC 2-102(a)(23)(Proposed Official Revision July 25 - Aug 1, 1997).

Recoverable Products means:

a) A stored data product containing a recovery feature that, when activated, allows recovery of the plaintext of encrypted data without the assistance of the end-user; or

b) A product or system designed such that network administrator or other authorized persons who are removed from the end-user can provide law enforcement access to plaintext without the knowledge or assistance of the end-user. This includes for example, products or systems where the plaintext exists and is accessible at intermediate points in a network  or infrastructure system, enterprise-controlled key escrow and enterprise controlled key recovery systems, and products which permit the recoverability of plaintext at the server where a system administrator controls and/or can provide recovery of plaintext across an enterprise, and so on.

N.B. "Plaintext" in the above definitions indicates that data that is initially received by or presented to the recoverable product before the encryption takes place.


Encryption Policy [16 September 1998]