eIDAS Initial Made Easy

Strike out signature diploma

[Music] electronic signatures are transforming the way organizations get documents signed and approved by their customers employees and partners in today's connected world compliant electronic signatures are accepted across international borders removing the need for paper this makes the entire process faster more efficient and less costly and offers much better security the type and level of an electronic signature are categorized differently around the world however where high trust security and legal acceptability is required PKI based electronic signatures are the only effective solution advanced or qualified electronic signatures require each user to have their own unique signing key and certificate with their name indelibly embedded traditionally these signing Keys have been held on hardware devices such as smart cards and USB tokens creating an electronic signature with such a device is referred to as local signing local signing is widely accepted as a very secure approach however the process is too arduous for the general public as it requires the use of specialized card readers and also software to be downloaded and installed connecting a card reader to a mobile device is even harder making signing from any device anywhere anytime a challenge with local signing the more modern cloud-based approach is remote signing where instead of the signing Keys being held locally by users they are held securely in server based systems or secure cloud services making them usable from any connected device in Europe the European AI does regulation specifically recognizes remote signing and supports its use for the creation of remote qualified signatures the highest trust level for signatures in Europe EW - and the underlying Etsy sin standards place strict requirements for remote qualified signature creation devices to achieve formally I'd ask compliance as Saoirse has taken the following approach firstly by developing an ad SS server appliance a tamper protected device hosting the signature activation module or Sam the job of the Sam is to authenticate the signers and get their formal authorization to use their signing key this is being independently certified under the common criteria ei L 4 + assurance level against the e I - remote signing protection profile namely en 4 1 9 2 4 1 part 2 secondly the ad SS server Sam appliance includes an embedded HSM which is also common criteria EA L 4 + certified under the remote signing protection profile for HSMs namely en 4 1 9 2 2 1 par 5 access to the user signing keys inside of the HSM is protected by the Sam here's an example of a remote signing workflow the user initiates a signing operation with a business application this could be any web application a government portal assertion signing hub solution or other applications like SharePoint users signing request is passed by the business application to the assertion a DSS server Sam appliance the Sam then requests a formal authorization by sending a notification to the user via their registered mobile device the user views the authorization...