E-Signatures. Chris Reed. Professor of Electronic Commerce Law
|
|
- Oliver Norris
- 8 years ago
- Views:
Transcription
1 E-Signatures Chris Reed Professor of Electronic Commerce Law Centre for Commercial Law Studies, Queen Mary University of London Of counsel, Lawrence Graham Agenda Rethinking the concept of signature e-signature technologies The problem of identity Legal validity of e-signatures Cross-border validity Regulation of signature service providers
2 A word of warning! Signatures have less legal significance than most (even lawyers) think Rarely needed to validate private dealings Often required for quasi public documents (wills, real estate transfers) Main role is for communication with government Apparent disputes about signature validity are often really about proof of agreement/acceptance of document Rethinking the concept of signature What is a signature? Method of evidencing: Identity of signatory Authenticity of [document] Intention to be bound by document Technologies include pens, typewriting, rubber stamps Potential legal approaches Law validates only manuscript signatures All technologies which achieve specified evidential effects can be valid Only specified technologies can create valid signatures
3 e-signature technologies These work in one of two ways: Adding information to an electronic document Typed name Scanned image of manuscript signature Logically associating information with an electronic document Encryption-based Associated information can be: Asymmetric encryption key Biometric data Adding information Signature is a mere add-on to document E.g. scanned image of manuscript signature, signature line of Like signing a Post-It note Fails to provide evidence that: Signatory added the signature data Document is unchanged since signature Extrinsic evidence could be used to prove these matters, e.g. headers + records of servers + Evidence of workings of sender s corporate system
4 Logical association Every electronic signature uses a method which can prove the link between: Identity information, e.g. Secret encryption key Biometric data and the document content Logical association means the necessary evidence is all in the document+signature Digital signatures are a subset of electronic signatures Use third party certification of secret keys PKI, or Public Key Infrastructure Applying a digital signature Alice sends a message to Bob She signs it with her secret key Bob checks the signature with Alice s public key If the check matches the message: Alice sent the message Alice agreed to its contents The message has not subsequently been altered
5 Digital signature technology Document { NumberStream } 1 [Hash function] [Hash function] MessageDigest NumberStream 2 (MessageDigest Ks )mod N = DigitalSignature (DigitalSignature Kp )mod N = MessageDigest Evidential basis of digital signatures Public key encryption can be broken But it is computationally infeasible to do so Key is N + Ks and Kp N is product of two prime numbers Ks and Kp derived from those numbers Assumption: the prime numbers can only be discovered by brute force (i.e. try all possibilities) Threatened by quantum computing Time taken to break a key where N= attempts per second = longer than expected lifetime of universe Currently used key lengths exceed 512 bits Each extra bit doubles the time to search for potential keys
6 Biometric data (e.g. signature metrics, fingerprint) Biometric signatures Encryption function Biometric signature Signature checked against known biometric data Evidential quality depends on (undisclosed) encryption function MessageDigest The problem of identity Is Alice really Alice? Secret key Certification Authority Public key
7 Certification process Signatory provides evidence of identity Ranges from merely giving valid address to attendance with identity documents To whom? Note role of RA in current commercial model Signatory provides copy of public key Signatory provides evidence that possesses secret/private key CA checks that public key validates digital signature CA issues certificate Legal validity of e-signatures Two models Valid if produces required evidential effects UNCITRAL Model Law US E-Sign EU Directive electronic signature Valid if Certified by trusted third party (Certification Authority); and Certification meets minimum standards Examples: EU Directive advanced electronic signature Singapore secure electronic signature
8 UNCITRAL UNCITRAL Model Law on Electronic Signatures 2001 Electronic signature means data in electronic form in, affixed to or logically associated with, a data message, which may be used to identify the signatory in relation to the data message and to indicate the signatory s approval of the information contained in the data message (art. 2(a)) 6(1) Where the law requires a signature of a person, that requirement is met in relation to a data message if an electronic signature is used that is as reliable as was appropriate for the purpose for which the data message was generated or communicated, in the light of all the circumstances, including any relevant agreement. 6(3) An electronic signature is considered to be reliable for the purpose of satisfying the requirement referred to in paragraph 1 if: (a) The signature creation data are, within the context in which they are used, linked to the signatory and to no other person; (b) The signature creation data were, at the time of signing, under the control of the signatory and of no other person; (c) Any alteration to the electronic signature, made after the time of signing, is detectable; and (d) Where a purpose of the legal requirement for a signature is to provide assurance as to the integrity of the information to which it relates, any alteration made to that information after the time of signing is detectable. US E-sign Electronic Signatures in Global and National Commerce Act (a) IN GENERAL- Notwithstanding any statute, regulation, or other rule of law (other than this title and title II), with respect to any transaction in or affecting interstate or foreign commerce-- (1) a signature, contract, or other record relating to such transaction may not be denied legal effect, validity, or enforceability solely because it is in electronic form; and (2) a contract relating to such transaction may not be denied legal effect, validity, or enforceability solely because an electronic signature or electronic record was used in its formation. 106(5) ELECTRONIC SIGNATURE- The term electronic signature means an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record.
9 EU E-Signatures Directive Art 2(1) electronic signature means data in electronic form which are attached to or logically associated with other electronic data and which serve as a method of authentication Not to be denied validity solely on grounds that in electronic form art. 5 Signature + certification EU Directive art. 2(2) advanced electronic signature means an electronic signature which meets the following requirements: (a) it is uniquely linked to the signatory; (b) it is capable of identifying the signatory; (c) it is created using means that the signatory can maintain under his sole control; and (d) it is linked to the data to which it relates in such a manner that any subsequent change of the data is detectable. Certificate must meet Annex I CA must meet Annex II Certificate creation must meet Annex III Singapore Electronic Transactions Act 1998 s. 20 has similar requirements But certificate must be issued by a licensed CA
10 Cross-border validity Validity is a question for applicable national law Mutual recognition of certificates from other countries Based on recognition of accreditation schemes, not individual CAs Singapore Act ss. 20(b)(ii), 43 EU Directive art. 7 Contents of certificate E-signatures Directive Annex I Qualified certificates must contain: (a) an indication that the certificate is issued as a qualified certificate; (b) the identification of the certification-service-provider and the State in which it is established; (c) the name of the signatory or a pseudonym, which shall be identified as such; (d) provision for a specific attribute of the signatory to be included if relevant, depending on the purpose for which the certificate is intended; (e) signature-verification data which correspond to signature-creation data under the control of the signatory; (f) an indication of the beginning and end of the period of validity of the certificate; (g) the identity code of the certificate; (h) the advanced electronic signature of the certification-serviceprovider issuing it; (i) limitations on the scope of use of the certificate, if applicable; and (j) limits on the value of transactions for which the certificate can be used, if applicable.
11 Regulation of signature service providers Authorisation/licensing Accreditation Quality of company and staff Quality of processes Identification of signatory Security of keys Security of certificate creation Recordkeeping CA Liability Liability schemes Statutory Usually negligence-based EU Directive art. 6(1) Utah Act s strict liability overtaken by E-Sign Contractual E-Sign, Singapore Role of CPS Other? Tort-based?
12 Conclusions Currently, e-signatures are little-used Few legal requirements for signatures in commercial and private dealings Main uses likely to be Closed groups (e.g. Origo) B2C dealings affecting rights, e.g. banking, DRM Main driver for adoption is dealings with government Estonian ID card Single, government-issued e-signature would be adopted widely for commercial and private dealings
UNCITRAL United Nations Commission on International Trade Law Introduction to the law of electronic signatures
Introduction to the law of electronic signatures Luca Castellani Head, Regional Centre for Asia and the Pacific UNCITRAL Secretariat Incheon, Republic of Korea Outline 1. Methods and technologies for electronic
More informationSSLPost Electronic Document Signing
SSLPost Electronic Document Signing Overview What is a Qualifying Advanced Electronic Signature (QAES)? A Qualifying Advanced Electronic Signature, is a specific type of digital electronic signature, that
More information2002 No. 318 ELECTRONIC COMMUNICATIONS. The Electronic Signatures Regulations 2002
STATUTORY INSTRUMENTS 2002 No. 318 ELECTRONIC COMMUNICATIONS The Electronic Signatures Regulations 2002 Made - - - - - 13th February 2002 Laid before Parliament 14th February 2002 Coming into force - -
More informationELECTRONIC SIGNATURES AND ASSOCIATED LEGISLATION
ELECTRONIC SIGNATURES AND ASSOCIATED LEGISLATION This can be a complex subject and the following text offers a brief introduction to Electronic Signatures, followed by more background on the Register of
More informationState of Arkansas Policy Statement on the Use of Electronic Signatures by State Agencies June 2008
State of Arkansas Policy Statement on the Use of Electronic Signatures by State Agencies June 2008 Background In the last ten years Arkansas has enacted several laws to facilitate electronic transactions
More informationAn introduction to Technology and law with focus on e-signature, encryption and third party service Yue Liu Mar.2010
An introduction to Technology and law with focus on e-signature, encryption and third party service Yue Liu Mar.2010 Understanding the information security Technology of Encryption and Electronic signature
More informationEricsson Group Certificate Value Statement - 2013
COMPANY INFO 1 (23) Ericsson Group Certificate Value Statement - 2013 COMPANY INFO 2 (23) Contents 1 Ericsson Certificate Value Statement... 3 2 Introduction... 3 2.1 Overview... 3 3 Contact information...
More informationLegal Status of Qualified Electronic Signatures in Europe
Legal Status of Qualified Electronic Signatures in Europe Jos Dumortier Professor of Law - K.U.Leuven Lawfort Of Counsel - Bar of Brussels jos.dumortier@lawfort.be Abstract It is a common misunderstanding
More informationWACOM esignature Solutions
WACOM esignature Solutions Compliance with European e-signature legislation WHITE PAPER www.dlapiper.com CONTENTS 1. INTRODUCTION...3 2. CONTRACTUAL VALIDITY AND ENFORCEABILITY...3 3. CONTESTING HANDWRITTEN
More informationMoving Towards an Electronic Real Estate Transaction
Moving Towards an Electronic Real Estate Transaction The Electronic Signature Legal Overview (U.S.) August 2010 1 Introduction Every real estate transaction involves the parties to the transaction putting
More informationImplementation of e-signature in the ESCWA Region: Status and Next Steps. By Matthew Perkins
Implementation of e-signature in the ESCWA Region: Status and Next Steps By Matthew Perkins Understanding e-signature How do we identify ourselves online? Electronic records of real-world authenticators
More informationLegal aspects of electronic signatures in Bulgaria
Article Legal aspects of electronic signatures in Bulgaria GEORGE G DIMITROV Legal Framework The contemporary Bulgarian law provides a thorough regulation of electronic signatures by a set of primary and
More informationELECTRONIC SIGNATURES
ELECTRONIC SIGNATURES Sarah McGee Assistant General Counsel Jim Nelson Security Risk Analyst Kathy Hanon System Office Budget Director The Minnesota State Colleges and Universities system is an Equal Opportunity
More information5 FAM 140 ACCEPTABILITY AND USE OF ELECTRONIC SIGNATURES
5 FAM 140 ACCEPTABILITY AND USE OF ELECTRONIC SIGNATURES 5 FAM 141 PURPOSE (CT-IM-112; 07-30-2010) (Office of Origin: IRM/OPS/ITI/SI/IIB) The purpose of this FAM chapter is to enable the Department to
More informationProposed Regulations for Trinidad and Tobago s E-transactions Bill
Proposed Regulations for Trinidad and Tobago s E-transactions Bill Port of Spain 04-06 April 2011 This Presentation is under the Auspices of the ITU/EU-funded HIPCAR Project in Collaboration with the Government
More informationAGENDA ITEM 15-16 : ELECTRONIC SIGNATURE
SCREENING CHAPTER 10 Country Session: 13- Content Legislation Main Points of Turkish Electronic Signature Legislation Electronic Certificate Service Providers and Market Standardization Aspect of Electronic
More informationMerchants and Trade - Act No 28/2001 on electronic signatures
This is an official translation. The original Icelandic text published in the Law Gazette is the authoritative text. Merchants and Trade - Act No 28/2001 on electronic signatures Chapter I Objectives and
More informationREPUBLIC OF LITHUANIA. LAW ON ELECTRONIC SIGNATURE
REPUBLIC OF LITHUANIA. LAW ON ELECTRONIC SIGNATURE CHAPTER I. GENERAL PROVISIONS... 1 ARTICLE 1. Purpose of the Law... 1 ARTICLE 2. Basic Definitions of this Law... 2 CHAPTER II. SIGNATURE CREATION, VERIFICATION,
More informationElectronic Signature Article
Electronic Signature Article ESIGN Electronic Commerce and Electronic Signature Law Clarified Copyright Topaz Systems Inc. All rights reserved. For Topaz Systems, Inc. trademarks and patents, visit www.topazsystems.com/legal.
More informationDr. Taher Habibzadeh. Abstract
Legal Issues of E-documents and E-signatures: An International Perspective Developing Iranian Legal System with Lessons from American, English and EU Laws Abstract Dr. Taher Habibzadeh 1 In the modern
More informationNational Certification Authority Framework in Sri Lanka
National Certification Authority Framework in Sri Lanka By Rohana Palliyaguru Manager Operations & Principal Information Security Engineer What is digital Signature? According to UNCITRAL Text 25. Digital
More informationPředstavení nařízení EU eidas a možný přístup ČR k implementaci. Ondřej Felix Hlavní architekt egovernmentu MV
Představení nařízení EU eidas a možný přístup ČR k implementaci Ondřej Felix Hlavní architekt egovernmentu MV O čem to je This Regulation seeks to enhance trust in electronic transactions in the internal
More informationELECTRONIC SIGNATURE REQUIREMENTS FOR LENDERS
ELECTRONIC SIGNATURE REQUIREMENTS FOR LENDERS June 2015 Purpose The Electronic Signatures in Global and National Commerce (ESIGN) Act (15 U.S.C. 7001-7006), enacted in 2000, permits, but does not require,
More informationBrocade Engineering. PKI Tutorial. Jim Kleinsteiber. February 6, 2002. Page 1
PKI Tutorial Jim Kleinsteiber February 6, 2002 Page 1 Outline Public Key Cryptography Refresher Course Public / Private Key Pair Public-Key Is it really yours? Digital Certificate Certificate Authority
More informationController of Certification Authorities of Mauritius
Contents Pg. Introduction 2 Public key Infrastructure Basics 2 What is Public Key Infrastructure (PKI)? 2 What are Digital Signatures? 3 Salient features of the Electronic Transactions Act 2000 (as amended)
More informationOB10 - Digital Signing and Verification
Global Headquarters 90 Fetter Lane London EC4A 1EN Tel: +44 (0) 870 165 7410 Fax: +44 (0) 207 240 2696 OB10 - Digital Signing and Verification www.ob10.com Version 2.4 March 2013 Summary In order to comply
More informationJanuary 30, 2014 Mortgagee Letter 2014-03
U.S. DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT WASHINGTON, DC 20410-8000 ASSISTANT SECRETARY FOR HOUSING- FEDERAL HOUSING COMMISSIONER January 30, 2014 Mortgagee Letter 2014-03 To: All FHA-Approved Mortgagees
More informationThe Statute of Frauds in the Digital Age - Maintaining the Integrity of Signatures
E LAW The Statute of Frauds in the Digital Age - Maintaining the Integrity of Signa... Page 1 of 18 E Law Search Subscribe Issue Subject Author Title Murdoch E LAW Murdoch University Electronic Journal
More information1 L.R.O. 2001 Electronic Transactions CAP. 308B ELECTRONIC TRANSACTIONS
1 L.R.O. 2001 Electronic Transactions CAP. 308B CHAPTER 308B ELECTRONIC TRANSACTIONS ARRANGEMENT OF SECTIONS SECTION PART I Preliminary 1. Short title. 2. Interpretation. 3. Non-application of Parts II
More informationGuidelines for the use of electronic signature
Republic of Albania National Authority for Electronic Certification Guidelines for the use of electronic signature Guide Nr. 001 September 2011 Version 1.3 Guidelines for the use of electronic signature
More informationAn Act to provide for the facilitation of the use of electronic transactions and signatures and for related matters.
Electronic Transactions and Electronic Signatures Act Act No. [ ] of [ ] An Act to provide for the facilitation of the use of electronic transactions and signatures and for related matters. ENACTED by
More informationElectronic and Digital Signatures
Summary The advent of e-government and e-services has changed the way state agencies and local government offices do business. As a result, electronic systems and processes have become as important as
More informationSIGNATURES ON THE WEBÕS DOTTED LINE: ELECTRONIC SIGNATURES ON CREDIT APPLICATIONS AND GUARANTEES SOON VALID IN ALL STATES.
THE ELECTRONIC CREDIT DEPARTMENT SIGNATURES ON THE WEBÕS DOTTED LINE: ELECTRONIC SIGNATURES ON CREDIT APPLICATIONS AND GUARANTEES SOON VALID IN ALL STATES Scott Blakeley 1 The Internet is revolutionizing
More informationINDEPENDENT AUDIT REPORT BASED ON THE REQUIREMENTS OF ETSI TS 101 456. Aristotle University of Thessaloniki PKI (www.pki.auth.gr) WHOM IT MAY CONCERN
Title INDEPENDENT AUDIT REPORT BASED ON THE REQUIREMENTS OF ETSI TS 101 456 Customer Aristotle University of Thessaloniki PKI (www.pki.auth.gr) To WHOM IT MAY CONCERN Date 18 March 2011 Independent Audit
More informationNational Information Management Conference and Exposition Thursday, April 23, 2009
National Information Management Conference and Exposition Thursday, April 23, 2009 Update on Policy Developments for Electronic Signature Recognition for Chart Audits Denise Blair - Chief Information Officer,
More informationThis Webcast Will Begin Shortly
This Webcast Will Begin Shortly If you have any technical problems with the Webcast or the streaming audio, please contact us via email at: webcast@acc.com Thank You! ACC Roundtable Discussion: Using Electronic
More informationELECTRONIC SIGNATURES FACTSHEET
ELECTRONIC SIGNATURES FACTSHEET Electronic signatures mean that you can exchange information with others electronically and securely safe in the knowledge that everyone is who they claim to be and that
More informationAdding e to life Conveniences and Complexities
Title: Adding e to life Conveniences and Complexities Author: Mustafa Syed Profile: M.Sc. Software Development, 30+ years IT related local & foreign experience, extensive experience of data centre operations,
More informationState of Arizona Policy Authority Office of the Secretary of State
SIGNATURE DYNAMICS ELECTRONIC SIGNING POLICY for electronic signature use version as of April 25, 2001 the current version may be found at http://www.sos.state.az.us/pa/default.htm State of Arizona Policy
More informationWhite Paper. The E-Sign Act. Use and enforceability of identifiers, passwords and personal identification numbers as signatures
White Paper The E-Sign Act Use and enforceability of identifiers, passwords and personal identification numbers as signatures 1 Table of Contents Introduction 2 The Audit Confirmation Process 2 The Confirm
More informationA unique biometrics based identifier, such as a fingerprint, voice print, or a retinal scan; or
SBA Procedural Notice TO: All SBA Employees CONTROL NO.: 5000-1323 SUBJECT: Acceptance of Electronic Signatures in the 7(a) and 504 Loan Program EFFECTIVE: 10/21/14 The purpose of this Notice is to inform
More informationA BILL ENTITLED. AN ACT To Facilitate electronic transactions and for connected matters. PART 1 Preliminary
1 A BILL ENTITLED AN ACT To Facilitate electronic transactions and for connected matters ENACTING CLAUSE PART 1 Preliminary Short title 1. This Act may be cited as the Electronic Transactions Act, 2008.
More informationBusiness Issues in the implementation of Digital signatures
Business Issues in the implementation of Digital signatures Much has been said about e-commerce, the growth of e-business and its advantages. The statistics are overwhelming and the advantages are so enormous
More informationUnderstanding Digital Signature And Public Key Infrastructure
Understanding Digital Signature And Public Key Infrastructure Overview The use of networked personnel computers (PC s) in enterprise environments and on the Internet is rapidly approaching the point where
More informationEgyptian Best Practices Securing E-Services
Egyptian Best Practices Securing E-Services Dr. Sherif Hazem Nour El-Din Information Security Systems Consultant Root CA Manager, ITIDA Agenda Security Measures for E-Services Examples of E- Services Threats
More informationProfession Practice Advice for the Profession
Profession Practice Advice for the Profession The Society has recently introduced Smartcards for the Scottish legal profession. If you have queries in relation to the administrative process for obtaining
More informationGuidelines Related To Electronic Communication And Use Of Secure E-mail Central Information Management Unit Office of the Prime Minister
Guidelines Related To Electronic Communication And Use Of Secure E-mail Central Information Management Unit Office of the Prime Minister Central Information Management Unit Office of the Prime Minister
More informationThe Virginia Electronic Notarization Assurance Standard
The Virginia Electronic Notarization Assurance Standard Published by Secretary of the Commonwealth Richmond, Virginia January 1, 01 Version 1.0 Table of Contents Scope and Intent... 1 Definitions... Article
More informationesign Online Digital Signature Service
esign Online Digital Signature Service Government of India Ministry of Communications and Information Technology Department of Electronics and Information Technology Controller of Certifying Authorities
More informationArticle. Robust Signature Capture Using SigPlus Software. Copyright Topaz Systems Inc. All rights reserved.
Article Robust Signature Capture Using SigPlus Software Copyright Topaz Systems Inc. All rights reserved. For Topaz Systems, Inc. trademarks and patents, visit www.topazsystems.com/legal. Table of Contents
More informationElectronic Signatures: A New Opportunity for Growth. May 10, 2005
Electronic Signatures: A New Opportunity for Growth May 10, 2005 1 Contents Is It Legal? 3 E-Signature Technology 12 Another Industry Example 15 National Association for Variable Annuities Applications
More information59.1-479. Title. This chapter may be cited as the "Uniform Electronic Transactions Act." TOC
59.1-479. Title. 59.1-480. Definitions. 59.1-481. Scope. 59.1-482. Prospective application. 59.1-483. Use of electronic records and electronic signatures; variation by agreement. 59.1-484. Construction
More informationRULES OF TENNESSEE DEPARTMENT OF ENVIRONEMENT AND CONSERVATION CHAPTER 0400-01-40 ELECTRONIC REPORTING TABLE OF CONTENTS
RULES OF TENNESSEE DEPARTMENT OF ENVIRONEMENT AND CONSERVATION CHAPTER 0400-01-40 ELECTRONIC REPORTING TABLE OF CONTENTS 0400-01-40-.01 Applicability 0400-01-40-.04 Electronic Reporting 0400-01-40-.02
More informationElectronic Signatures for South African Law Firms
Electronic Signatures for South African Law Firms Guidelines: October 2014 Drafted for the Law Society of South Africa by Mark Heyink Law Society of South Africa 2014 Graphic: Thinkstock Mark Heyink 2014
More informationTHE LAW OF THE REPUBLIC OF ARMENIA ON ELECTRONIC DOCUMENT AND ELECTRONIC SIGNATURE CHAPTER 1. GENERAL PROVISIONS. Article 1. The subject of the Law
THE LAW OF THE REPUBLIC OF ARMENIA ON ELECTRONIC DOCUMENT AND ELECTRONIC SIGNATURE CHAPTER 1. GENERAL PROVISIONS Article 1. The subject of the Law 1. This Law regulates relations linked to application
More informationChapter 7: Network security
Chapter 7: Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice: application layer: secure e-mail transport
More informationCryptography and Network Security
Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 9: Authentication protocols, digital signatures Ion Petre Department of IT, Åbo Akademi University 1 Overview of
More informationChaptert 30 Electronic Signatures
Chaptert 30 Electronic Signatures By Eric Aaserud Vice President, Fedmarket.com The last four chapters were devoted to the related subjects of women-owned, minority-owned, HUBZone and small business contracting.
More informationLaw Governing Framework Conditions for Electronic Signatures and Amending Other Regulations
Law Governing Framework Conditions for Electronic Signatures and Amending Other Regulations inofficial version for industry consultation for official German text please refer to the Official Journal (Bundesgesetzblatt
More informationDigital Signature Policy Guidelines. Version 1.1. March 2014. Contains corrected links to documents
Office of State Controller, and the North Carolina Department of the Secretary of State, and North Carolina Department of Cultural Resources, Division of Archives and Records Digital Signature Policy Guidelines
More information1 Definitions 86-611 001-001.10
NEBRASKA ADMINISTRATIVE CODE NUMERICAL TABLE OF CONTENTS Chapter # Chapter Title Statutory Code Section(s) Authority 1 Definitions 86-611 001-001.10 2 Digital Signatures Must be Created by Acceptable Tech.
More informationArkansas Department of Information Systems Arkansas Department of Finance and Administration
Arkansas Department of Information Systems Arkansas Department of Finance and Administration Title: Electronic Signature Standard Document Number: SS 70 011 Effective Date: Act 722 of 2007 requires state
More informationMobile OTPK Technology for Online Digital Signatures. Dec 15, 2015
Mobile OTPK Technology for Online Digital Signatures Dec 15, 2015 Presentation Agenda The presentation will cover Background Traditional PKI What are the issued faced? Alternative technology Introduction
More informationElectronic Commerce ELECTRONIC COMMERCE ACT 2001. Act. No. 2001-07 Commencement LN. 2001/013 22.3.2001 Assent 14.3.2001
ELECTRONIC COMMERCE ACT 2001 Principal Act Act. No. Commencement LN. 2001/013 22.3.2001 Assent 14.3.2001 Amending enactments Relevant current provisions Commencement date 2001/018 Corrigendum 22.3.2001
More informationElectronic Signature Assurance & the Digital Chain-of-Evidence
Electronic Signature Assurance & the Digital Chain-of-Evidence Executing Legally Admissible Digitally Signed Records by Jacques R. Francoeur, B.A.Sc., M.A.Sc., MBA Table of Contents 1. Executive Summary
More informationQualified Electronic Signatures Act (SFS 2000:832)
Qualified Electronic Signatures Act (SFS 2000:832) The following is hereby enacted 1 Introductory provision 1 The purpose of this Act is to facilitate the use of electronic signatures, through provisions
More informationEmail and contractual notices
Investing in Infrastructure International Best Legal Practice in Project and Construction Agreements January 2016 Damian McNair Partner, Legal M: +61 421 899 231 E: damian.mcnair@au.pwc.com Email and contractual
More informationElectronic Signature: Increasing the Speed and Efficiency of Commercial Transactions
Electronic Signature: Increasing the Speed and Efficiency of Commercial Transactions Signatures make the world go round. In other words, we need to commit and receive commitments from others in order make
More informationProtection Profiles for TSP cryptographic modules Part 1: Overview
Date: 2015-08 prts 419221-1:2015 Protection Profiles for TSP cryptographic modules Part 1: Overview Document type: Technical Specification Document language: E Contents Introduction...3 1 Scope...4 2 References...4
More informationView from a European Trust Service Provider Server Signing: Return of experience and certification strategy
View from a European Trust Service Provider Server Signing: Return of experience and certification strategy January 16, 2014 - Berlin Thibault de Valroger VP Strategy & Development OPENTRUST Thibault.devalroger@opentrust.com
More information1. Lifecycle of a certificate
1 1. Lifecycle of a certificate 1. Client generates Signing Request (CSR) in his secure computer or server where application will be used. Now client has two s a CSR (usually with CSR extension but it
More informationDigital Signatures. Meka N.L.Sneha. Indiana State University. nmeka@sycamores.indstate.edu. October 2015
Digital Signatures Meka N.L.Sneha Indiana State University nmeka@sycamores.indstate.edu October 2015 1 Introduction Digital Signatures are the most trusted way to get documents signed online. A digital
More informationContents. Identity Assurance (Scott Rea Dartmouth College) IdM Workshop, Brisbane Australia, August 19, 2008
Identity Assurance (Scott Rea Dartmouth College) IdM Workshop, Brisbane Australia, August 19, 2008 Contents Authentication and Identity Assurance The Identity Assurance continuum Plain Password Authentication
More informationELECTRONIC TRANSACTIONS ACT 2008 ARRANGEMENT OF SECTIONS PART I PRELIMINARY PART 2 APPLICATION OF LEGAL REQUIREMENTS TO ELECTRONIC RECORDS
1. Short title and commencement 2. Interpretation 3. Exclusions 4. Consent to use of electronic records 5. Act to bind the Government ELECTRONIC TRANSACTIONS ACT 2008 ARRANGEMENT OF SECTIONS PART I PRELIMINARY
More informationAdvanced Authentication
White Paper Advanced Authentication Introduction In this paper: Introduction 1 User Authentication 2 Device Authentication 3 Message Authentication 4 Advanced Authentication 5 Advanced Authentication is
More informationA Digital Signature Scheme in Web-based Negotiation Support System
A Digital Signature Scheme in Web-based Negotiation Support System Yuxuan Meng 1 and Bo Meng 2 1 Department of Computer Science, University of Saskatchewan, Saskatoon, Saskatchewan, S7N 5C9, Canada yxmeng68@yahoo.ca
More informationDigital Certificates (Public Key Infrastructure) Reshma Afshar Indiana State University
Digital Certificates (Public Key Infrastructure) Reshma Afshar Indiana State University October 2015 1 List of Figures Contents 1 Introduction 1 2 History 2 3 Public Key Infrastructure (PKI) 3 3.1 Certificate
More informationNotify your Account Specialist or Licensing Manger you wish to sign electronically Give the email address of the Signatory (if different)
& DocuSign is an e-signature platform that allows for the electronic forwarding and signing of contracts. DocuSign eliminates the need for the mailing of paper contracts and speeds up invoicing/activation.
More informationSecurity framework. Guidelines for trust services providers Part 1. Version 1.0 December 2013
Security framework Guidelines for trust services providers Part 1 Version 1.0 December 2013 European Union Agency for Network and Information Security www.enisa.europa.eu Security framework Guidelines
More informationU.S. DEPARTMENT OF EDUCATION
U.S. DEPARTMENT OF EDUCATION STANDARDS FOR ELECTRONIC SIGNATURES IN ELECTRONIC STUDENT LOAN TRANSACTIONS April 30, 2001 (Revised as of July 25, 2001) PURPOSE This document establishes standards regarding
More informationElectronic signature, authentication, identity management & UNCITRAL
United Nations Commission on International Trade Law Electronic signature, authentication, identity management & Jae Sung LEE Secretariat Legal Officer, International Trade Law Division Office of Legal
More informationIntroduction to Computer Security
Introduction to Computer Security Hash Functions and Digital Signatures Pavel Laskov Wilhelm Schickard Institute for Computer Science Integrity objective in a wide sense Reliability Transmission errors
More informationELECTRONIC TRANSACTIONS ACT 1999 BERMUDA 1999 : 26 ELECTRONIC TRANSACTIONS ACT 1999
BERMUDA 1999 : 26 ELECTRONIC TRANSACTIONS ACT 1999 [Date of Assent 5 August 1999] [Operative Date 4 October 1999] ARRANGEMENT OF SECTIONS 1 Citation PART I PRELIMINARY 2 Definitions 3 Crown to be bound
More informationPARLIAMENT OF THE DEMOCRATIC SOCIALIST REPUBLIC OF SRI LANKA
PARLIAMENT OF THE DEMOCRATIC SOCIALIST REPUBLIC OF SRI LANKA ELECTRONIC TRANSACTIONS ACT, No. 19 OF 2006 [Certified on 19th May, 2006] Printed on the Order of Government Published as a Supplement to Part
More informationRapidSSL Subscriber Agreement
RapidSSL(tm) Subscriber Agreement Please read the following agreement carefully. By submitting an enrollment form to obtain a RapidSSL Digital Certificate (the Certificate ) and accepting and using such
More informationA 6-POINT FRAMEWORK BUSINESS TECHNOLOGY GROUP
e Matters A 6-POINT FRAMEWORK BUSINESS TECHNOLOGY GROUP Companies considering adopting an electronic signature process may be overwhelmed by the legal, regulatory, litigation, technological and other practical
More informationBERMUDA ELECTRONIC TRANSACTIONS ACT 1999 1999 : 26
QUO FA T A F U E R N T BERMUDA ELECTRONIC TRANSACTIONS ACT 1999 1999 : 26 TABLE OF CONTENTS 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Citation Definitions Crown to be bound Objects Regulatory policy
More informationBuilding a Digital Signature to Meet State Statute Requirements Using a Certificate Authority. Adobe Acrobat Pro DC (Released July 2015)
DIGITAL SIGNATURES eplans REVIEW Building a Digital Signature to Meet State Statute Requirements Using a Certificate Authority Adobe Acrobat Pro DC (Released July 2015) 8 12 15 DIGITAL SEAL AND SIGNATURE
More information[Brought into force by appointed day notice on 16 th June 2003.]
[Brought into force by appointed day notice on 16 th June 2003.] AN ACT TO PROVIDE FOR THE LEGAL RECOGNITION OF ELECTRONIC WRITING, ELECTRONIC CONTRACTS, ELECTRONIC SIGNATURES AND ORIGINAL INFORMATION
More informationEntrust Managed Services PKI. Getting started with digital certificates and Entrust Managed Services PKI. Document issue: 1.0
Entrust Managed Services PKI Getting started with digital certificates and Entrust Managed Services PKI Document issue: 1.0 Date of issue: May 2009 Copyright 2009 Entrust. All rights reserved. Entrust
More informationUNCITRAL legislative standards on electronic communications and electronic signatures: an introduction
legislative standards on electronic communications and electronic signatures: an introduction Luca Castellani Legal Officer secretariat International harmonization of e-commerce law Model Law on Electronic
More informationREGISTRATION AUTHORITY (RA) POLICY. Registration Authority (RA) Fulfillment Characteristics SECURITY DATA SEGURIDAD EN DATOS Y FIRMA DIGITAL, S.A.
REGISTRATION AUTHORITY (RA) POLICY Registration Authority (RA) Fulfillment Characteristics SECURITY DATA SEGURIDAD EN DATOS Y FIRMA DIGITAL, S.A. INDEX Contenido 1. LEGAL FRAMEWORK... 4 1.1. Legal Base...
More informationHow To Choose An Electronic Signature
Electronic Signature Systems A Guide for IT Personnel Copyright Topaz Systems Inc. All rights reserved. For Topaz Systems, Inc. trademarks and patents, visit www.topazsystems.com/legal. Table of Contents
More informationDigital Signatures The Law and Best Practices for Compliance. January 2014
Digital Signatures The Law and Best Practices for Compliance January 2014 Electronic/Digital Signature Legislation Disclaimer: ARX is not is not a law firm and does not provide legal advice. We make no
More informationTHE ELECTRONIC SIGNATURE - TECHNICAL AND LEGAL IMPLICATIONS
Bulletin of the Transilvania University of Braşov Series VII: Social Sciences Law Vol. 7 (56) No. 2-2014 THE ELECTRONIC SIGNATURE - TECHNICAL AND LEGAL IMPLICATIONS Adrian Constantin MANEA 1 Abstract:
More informationHKUST CA. Certification Practice Statement
HKUST CA Certification Practice Statement IN SUPPORT OF HKUST CA CERTIFICATION SERVICES Version : 2.1 Date : 12 November 2003 Prepared by : Information Technology Services Center Hong Kong University of
More informationwhitepaper THE ESIGN ACT Harnessing New Hiring Efficiencies with Electronic Signatures
Harnessing New Hiring Efficiencies with Electronic Signatures PURPOSE This white paper will explain how the passage of The Electronic Signatures in Global and National Commerce (ESIGN) Act, along with
More informationFederal Law No. (1) of 2006 On Electronic Commerce and Transactions
Federal Law No. (1) of 2006 On Electronic Commerce and Transactions We, Khalifa bin Zayed Al Nahyan, President of the United Arab Emirates, In cognisance of the Constitution, and The Federal Law No. (1)
More informationElectronic And Digital Signatures
Electronic And Digital Signatures Summary The advent of e-government and e-services is changing the way we do business. Traditionally, we created records on paper and we authenticated a record by signing
More informationSECURITY IN NETWORKS
SECURITY IN NETWORKS GOALS Understand principles of network security: Cryptography and its many uses beyond confidentiality Authentication Message integrity Security in practice: Security in application,
More information