1. The Uniform User Management and Digital Signature System (‘UUM&DS system’) shall enable the communication between the Commission and the Member States’ identity and access management systems referred to in Article 20 of this Regulation for the purposes of providing secure authorised access to the electronic systems to the Commission’s staff, economic operators, and other persons.
2. The UUM&DS system shall consist of the following common components:
(a)
an access management system;
(b)
an administration management system.
3. A Member State shall create an identity and access management system as a national component of the UUM&DS system.
The UUM&DS system shall be used to ensure the authentication and access verification of:
(a)
economic operators and other persons for the purposes of having access to the EUCTP, the common components of the CDS, the EBTI system, the AEO system, the INF SP system, the REX system, the PoUS system, the ICS2, and the GUM system;
(b)
the Commission’s staff for the purposes of having access to the EUCTP, the common components of the CDS, the EBTI system, the EORI system, the AEO system, the ICS2, the AES, the NCTS, the CRMS, the CCI system, the REX system, the PoUS system, the INF SP system and the GUM system for the purposes of maintenance and management of the UUM&DS system.
The Commission shall set up an access management system to validate the access requests submitted by economic operators and other persons within the UUM&DS system by interoperating with the Member States’ identity and access management systems referred to in Article 20 of this Regulation.
The Commission shall set up an administration management system to manage the authentication and authorisation rules for validating the identification data of economic operators and other persons for granting access to the electronic systems.
Member States’ identity and access management systems
The Member States shall set up an identity and access management system to ensure:
(a)
the secure registration and storage of identification data of economic operators and other persons;
(b)
the secure exchange of signed and encrypted identification data of economic operators and other persons.
