Add Asset Management Agreement Electronically Signing with airSlate SignNow

Digital signature personally

so hi everybody thanks for being here this is the last talk of the day I know you must be tired I hope you still have some energy left and that we will enjoy this talk so this will be about both digital signature induction and how are we using it at at Duke sign I will begin by introducing myself my name is Sergio I'm walking a duck sign as engineering manager and for those of you don't know what is Dooku sign so it's a sass company that enables you to design document no more people needed and I studied my profession life in all the PGI digital signature SSL certificate world so it has been a long time and currently my team is working on two main subjects compliance with European regulation and I not see verification I wanted to just show explain you what is not about it this will not be a detailed presentation of the blockchain and how it works it's rather about how could we use the blockchain in a digital connection where I could make sense let's start with the agenda first of all I will define what is a digital signature as defined by the European regulation Yalies for those of you who knows what it is then I will do a quick reminder of what is a blockchain not going to a lot of detail but quick reminder to have the basis then we will talk about all value of using the blockchain in digital collection and finally I think an important points asking house-elf if the blockchain is always the best solution so I apologize it will be the legal part of the presentation so maybe a bit boring but this is really important because it drives the technical implementation of the digital signature so Aida's is a European regulation from 2014 that you can read online it's public so if you have time during the night you can check out the regulation but what is really important is that I guess is defining three levels of signature and let's go see them the first one is a simple signature so a simple signature is like unwritten signature applied on a digital document so we have a digital document I apply the unwritten signature and this is a simple one I guess most of you already done something like that and obviously it's really easy to fake it so that's why we have a more advanced signature the advanced signature needs to meet the following requirements first of all we need to be sure who signed the document for that we will use for example two-factor authentication HP SMS or something else then we need to make sure that it's the right person that is in front of the computer and the right person that you will sign the document for that we could for example has Kim to show his passport or something like that then the signer need to agree and understand that he is signing a document like be simple thing like using a checkbox but this also mean it can't be done automatically through API we can't automatically signed document through API you know some people ask ask us that at the booth but it's not possible due to the regulation and finally we should not be able to change anything in the document after the signature yes you can easily see why okay already at this point if you know a bit about the blockchain I think I think you can see the link especially with the last point and the blockchain the immutability of the of the blockchain and obviously we will come back on it and last one the qualified signature so this is a most advanced one I will not regicide just to show you that needs to meet a lot of requirement same thing there is online requirements something you can maybe noticed it's really related to all the PGI stuff infrastructure and also it's really heavy for designer in term of process if there is some Belgium guy in the side in the room and you have EAD yes the Belgium EAD is a qualified certificate so you can do qualified signature with it okay that's that's all for the legal part now that we have defined what is a signature let's talk about the blockchain quick reminder the blockchain basically it's a chain of different blocks and all blocks are chained together by the ashes so a block is there is a lot of metadata in the block and we have the hash of the block and the next block is referencing the previous block option some may be well-known auction here we have the Bitcoin and the etherium and you can see the online pretty here you can see some information about those blocks so we can see for example the number of the block this is a height so um D the ID you have the generation of each block so you can see here that all the theorem reduction is generating block faster than the Bitcoin the implementation is different then you have transactions that will be attached to each block so we'll see that later we have the name of the miner so the one creating the block when finally is of the size of the block if we go into more details about what is a block we are well we can reduce the same information the number of transaction the number the idea of the block which is number of block we we have and the link with the previous block and you also have additional meta meta data at this part so as you can see one thing that is very interesting is that we have number of transaction it means inside the block you could have a lot of transaction that will be tied to this block and this is this will help us later so we will have an example we will have come back on that just to give you an example of which is a transaction it could be for example a is giving some Bitcoin to be this is a basic transaction at the Romberg chain same thing we have the same information it's a blockchain so it works pretty much the same way now that we've so what is block let's see how the block works kind of works together in a inner network so you may have already heard the term distributed ledger which means that every node of the network have a copy of the ledger and basically anybody part of the network can create the next block in the blockchain so faster to create the next block kind of win the the competition and can share the the block information to the whole network now you may wonder what happen if there is two computers that is creating a the next block at the same time in that case you could end up with something like that meaning to blog reference the same parents and in that case the blockchain will choose the longer path as a source of trust so it means where is it important it means that if you're pushing transaction inside the blockchain you need to wait several blocks to be sure that your transaction is well recorded in the blockchain so this will be also important that yeah you need to wait and especially with a Bitcoin how do you have a new block every 10 minutes so you could wait for example day to be sure that your transaction is well written introduction last thing I wanted to talk about for the blockchain it's is that we have two main types of blockchain on one side we have the public ones so public one is pretty easy it's like a theorem of Bitcoin there is lots of other abductions anybody on internet can have access to those blockchain as you can see here we can see what is inside the blockchain we can contribute to the blockchain we can be a miner as well we need more than just a laptop but anybody can be a miner in this blockchain and anybody can read all the transactions that happen so production it will be a is giving some money to be and we are talking about addresses so we don't know who who that is but we can read who giving money money to whom on the other hand we have the ripple blockchain for example there is also as well that are private or permission blockchain and those blockchain are mainly internal blockchain in in to entire system so for example for the Cybermen date when you want to transfer money to someone else in Europe all the banking system are using private blockchain to exchange information between the mugs and obviously this is not privileged and you can't read what is inside it so everything is encrypted but the protocol and the technology behind is like a blockchain ok so we've talked about digital signature we've talked about blockchain now the main interesting thing let's see how they can work together I saw something on internet some people wondering well can we get rid of certification Authority especially for HTTPS certificates because you need to pay company to issue certificates and it's kind of oh you don't want to pay someone and digital signature already flows to HTTPS certificates so I think it's reinvesting to see kind of the difference and what we can do with that okay so how a document is sign maybe some of you or recon comment at our booth so you may have already seen a live demo of our design works so someone look saying someone will send a document for sign to someone else and from a signer point of view this would be the workflow so I will receive a document for signature and the first step will be to identify myself so like I said before mmm compliance with Yalies I need to identify the signer so I will have to approve a passport or copy of my ID you could also use system like it's me this kind of thing then once you identify on the on DocuSign on the puzzle what you will fill the the document and the other interesting part is what we are calling the trust service provider so why are you clicking on signing behind-the-scene a lot of things happening we will take your identification information we will take the ash the document so we'll calculate the hash of the document and we will send that to a first service provider the transfer is provider is kind of the same thing as a certification Authority so this first service provider will be in charge of generating digital identity for the signer sign the hash and return the ash sign to us and then well using the PDF standard we will digitally sign a PDF okay so this is all to be compliant now what could the blockchains of no more centralized source of truth so today how the signature is verified once a signature is done on the document so if you opening a digital signature on the PDF document and you're asking for example Adobe Reader or any other software to validate your signature you will end up with something like that so this is all inside the metadata of the PDF we have the name of the the signer of the document inside is me most the time the document has been signed and the certification path so the certification path is the reference for the creation of the this digital identity so in that case the digital identity that has been created for me we have all the chain of certification authority that created this I don't see this is exactly the same as HTTPS certificates if you're familiar with that it's working exactly the same way and you have the first point so a digital identity as be created for someone but the question is how do you trust this digital identity the answer is you need to trust something in that case you are trusting a certification Authority so this one is trusted by Adobe and European regulation so this is your trust point okay today at DocuSign so DocuSign is a certification Authority so we are kind of holding the truth of your identity we are holding the truth of your identity we are keeping all the proof inside our system and here is why here is how so you have the European task list so it's publicly available same thing Europe is trusting countries and cost countries or trusting private company could be also government to which to issue digital identity so you can go online see check for countries and see the certification authority that was hosted and we are in the French French trust first list so the certification Authority will issue a digital identity that will allows you to sign a document and for so it could be either one time subhead or it could be a digital ID like snapchat like you have in in Belgium for example so the problem is that with that is that the CA as everything and if so CA is compromised or if something happens to the CA well you're kind of losing all the truth around the origin trust around the digital signature so this is where we could say maybe we could have a distributed ledger that we will keep the proof around everybody instead of just around the one CA so let's see what would happen if we replace the certification authority by let's say one block say I took it but could be another one so in that case the workflow at the beginning with weekend will be the same we will notify using whatever passport ID and then we will send the identification information in the ash to the blockchain instead of to certification Authority it means we will publish everything to everybody and everybody can read and Trust the network so that seems like a good idea had at the first thought but there is some issue with that obviously the first one is today at DocuSign just to give you a example 71 71 percent of our document or sign in less than an hour and as we remember to create new blocks in the blockchain it takes time and it would mean that we would have to wait two or three hours maybe to make sure that your transaction is written in the book chain and to be able to go further with your document especially if you have like five signature 5 signers that need to sign your document while you're losing a lot of time just waiting to make sure that the reduction is working properly and there is also something else you may have already other habit GDP are so GDP our European regulation around data privacy PII a personal information if we send all the information to the blockchain we have to send the identification information because this is part of the trust this is this is how you identify the signer and if you push all that the blockchain blockchain is immutable you cannot delete a block of change block after it has been done so it means it's inside the blockchain forever so if there is personal information it's sign inside the blockchain and you cannot get rid of it today if you have a certification Authority you could ask them to purge everything they have on their blog because for example the contract has been signed no ten years ago and either he has no value anymore so you could ask the certification authority to get rid of everything and you will end up with something like that so all the email name everything is DVD from all the system and this is something you can't do with the blockchain so this is okay this is not really a good use case for the blockchain this is why we thought about another use case going beyond just the signature so today digital signature simplify the signing process by making digital so it's really faster once the document meaning instead of printings signing on paper and scanning the documents back it's just as we've seen a couple of minutes aware maybe and it's done but the problem is usually after the signing while we are coming back to watch a manual process usually there is things that needs to be done after the signing and it's well it's pretty often it's it's manual for example we can take a an example so at devoxx the response off and let's say those devoxx needs to sign a contract with the sponsor so devoxx will stand the contact through DocuSign the sponsor will reach the document sign so it should be easy especially the sponsor leaves I know far away really really faster than sending it by the post and once the contract is signed it goes back to deluxe but the problem is after that I guess devoxx has still a lot of things to do to contract this sign sure but maybe they have to wait for the payment they have to take a reserve a booth for the company they have to send some information to third parties for the printing the logos on some white paper the there is a lot of stuff and today I I don't know that I guess the a lot of those things all done manually so we can wonder well does the blockchain can help from these parts and the answer is many at least you can try so if you know bit about the ethereum blockchain one thing that is very interesting with this production is that you can add code inside the blockchain so what does it mean it means that when you will send the transaction inside the blockchain it will be what is called a contact or smart contact which is basically code that will be written inside the blockchain so the code this is a code sample that could be sent and it's pretty clear available anybody can read this code and that's why you need to be careful because if you have a security issue in your code or anybody can see it and exploit it and you cannot change it after it has been published also so for example with this code well we have three properties the owner of the contract boolean to say is the document is a sign incomplete or not the hashes of the document just to have a list of all the ashes and then well it's a solid G language but it's why it looks like white so language anyway so just have to learn it doesn't understand tax so we have three function and constructor so in our use case when you send a document to the signature with DocuSign DocuSign will create this contract and set it to the blockchain so DocuSign will be a sign of zero the other contact because he's with the constructor and dog assign is sending it and then every time a document is signed we could for example had the ash of the document inside the deduction we could also imagine that third parties could add ashes inside this blockchain so for example if at some point dr. Stein is calling a third party because we are relying on the we have a payment that is done inside we could use the payment system could also push information inside the disk contract and everything will be tied together inside the blockchain once the everything is completed for example we could say call the function complete envelope in that case we ensure that only DocuSign can call this function nobody else and last we have a function which is called ease of the completed that will return the boolean and ashes of the document one thing you may have noticed is that the last one as a keyword which is constant so what does it mean the blockchain obviously it takes resources to build the blockchain and to contribute to it so when a minor nine block gets a reward for this many maybe you you know that that's especially with all the Bitcoin stuff that happened lately that's so the main you get really what it means to in order for the blockchain to work it means that when you are doing things with the blockchain you have to pay for it so you're paying in the so in Bitcoin or in ether for the a theorem blockchain and all function costs some money except the kind of read on the function so that's why we have the constant keyword that means if you call this function it's free but if you call any other function it's you have to pay in ether so as we said the the blockchain is public anybody can have a look at what is the blockchain so previously we've seen a view of the blocks different blocks but we can also have a view that is tied to a contract so in that case we see that one first element is the creation of the contract which is a last line so we have the transaction ID we know in which block this contract has been written when and who crew asks for the creation of the contract in that case well it's all the same addresses but could be all there as well after the creation of the contract with result we can see that we we've called the a dash function so we would have to go into the detail and look at it but we have the hash function and finally the of the complete function so anybody could have a look at that and anybody else who could call the is completely develop and act on it also in the contract we could imagine that so right now this is a fixed contract that we we've done but we couldn't when you some develop we could imagine that the sender will be able or an admin of the account maybe could write some Christian code here in this part of the of the code which means that when the other is complete maybe you could have custom action that will be that would be in started with either maybe some of you have seen on internet but we did a POC with the V we're so it was not this contract but where-when a contract for insurance but sign and when the payment was done on the on another side when everything was published to the to the blockchain we could start the all the basically the stuff the contact in the issuance will the insurance will start as a date of when the contract is signed and the payment is received and this could be done here so this is today it's mostly proof of concept of that it's so we are not publishing everything to every envelope information to the blockchain we only do it for proof of concept but yeah this is a dual use case and so we are wondering today as I said blockchain is many proof of concept there is lot of things that could be done but there is really question one that is the other blockchain really helps meaning sure it can apps but tell the cost and the question is does the cost really worth the investment as you can see we can execute card we can do a lot of things but we could also do that through ApS especially with the with the identification path the first point of the plantation we think that it's may not be really interesting to use the blockchain for everything maybe in some cases it could make sense but we need to be very careful two things we are really looking at is using the blockchain for identity there is a things that are happening especially with the IP ledger technology that is I think it yeah IBM is behind it so the idea of the this is to have your digital identity on the blockchain instead of having a snap child or something like that and we could imagine using that to authenticate to DocuSign so this could be one use case but always we need to make sure that it's really worth the investment for the second one the second use case bear with the smart contacts so the time thing will keep following the evolution but today we it's a three in production because there is no real use case yet where it's written but we are still looking at it and see if there is some stuff that can be done so my last part of the presentation and coming back to the agenda is the blockchain always the best answer and the answer is I think no it could solve some issues but it's not the answer to everything pushing information to the blockchain cost also creating new blocks cost a lot especially in terms of energy we have some global questions today around that so if the blockchain always the good answer well maybe not the blockchain could solve some issue but we really need to use the blockchain really wisely I would say and yeah that would be my last well for this presentation be careful with the the blockchain so if you have any question you can send me an email or ask you ask your question