secure2sign: Secure and Seamless Enterprise Signing for Word (including 2007).

Transcription

1 secure2sign: Secure and Seamless Enterprise Signing for Word (including 2007). Ensure integrity Checks for certificate revocation Support for two-factor digital signing Support for smart cards and etokens Electronic approval process, sign-off documents as approved, etc Time-stamping Checks for hidden data and embedded documents Support for unlimited number of signatures on the same document Includes objects that are embedded into content, such as a worksheet embedded into a Word document, in the signature. Helps with compliance such as ESIGN, etc secure2sign is an advanced digital signing tool which is integrated into Office in a manner that allows and encourages natural document signing. secure2sign makes signing documents as quick and easy as picking up a pen. Advanced security features ensure that documents are signed in a secure manner such that revoked certificates are not allowed to be used to sign documents. In addition, hidden data and embedded documents are supported. secure2sign supports the use of smart cards and two factor authentication such as the use of a PIN. 1 of 15

2 What Does secure2sign Offer? secure2sign enables you to digitally sign and timestamp documents so that it can be shown that the document: Has not been altered since it was signed this gives proof of content and assures integrity. Existed in this form at the time it was it was time-stamped, i.e. proof of existence. Unlike other digital signing tools, secure2sign: Does not use ActiveX controls, macros or Visual Basic code. The ability to sign without introducing active content: o o o o Eliminates the possibility of active content being maliciously exploited. Prevents the problem of firewalls filtering out documents with active content. Avoids conflicts with using documents with active content in secure environments. Ensures compatibility with Microsoft Office 2007 default native file formats (.docx) that specifically exclude any active elements (ActiveX, scripts or macros). Checks Microsoft Office documents for potentially malicious content before you sign, to ensure that you don't sign content that you are unaware of or that may display differently at a later date. Uses patent applied for techniques to prevent spoofing of the windows that display signature details. This prevents malicious programs from altering the display of signatures e.g. displaying an invalid signature as valid. Is resistant to the attacks that have been shown to affect other signing programs. Other features include: Full integration with Microsoft Word. Supports Microsoft Word 2000, 2002 (XP), 2003, Timestamping from an authorised time stamp time source to RFC Multiple signatures with co-signing and countersigning. Supports certificate validation using OCSP or CRL. (OSCP validation requires third party OCSP client.) Optional visible signature. Option to store detached signature independently for audit, etc., purposes. Display of signatures from Microsoft Office signing. Signs Office native file formats for Microsoft Office Word (.doc,.docm,.docx) as well as.rtf. mht..xml,.htm files created by Word. Signature includes objects that are embedded into content, such as a worksheet embedded into a Word document, etc. Stores log entry, from OCSP client validation of certificate at signing time, with signature. This enables the log entry to be viewed at any time after the signing for audit purposes, independent of the OCSP client software. (Requires third party OCSP client.) Full administrator control over functions, acceptable certificate revocation, etc. 2 of 15

3 An example of document signing using IdenTrust banking (x509) digital certificates on a smartcard with a pin number in Word Secure2sign is fully integrated into Office 2007 applications such as Word. Tool Bar menu items allow you to sign the document and view the signatures Secure2sign is found in the Add- Ins menu. Click here Click here 3 of 15

4 You can choose to sign only, sign with time stamp or timestamp only. secure2sign will allow signing with or without a visible graphic signature being added to the document. There is also the option to add a graphic image e.g. company logo, hand written signature etc You can choose to select a certificate from this drop down menu. 4 of 15

5 You also have a choice of text options that show why you have signed the document. You can type in your own reason for signing. In addition you can chose to sign all of the file or just the content. 5 of 15

6 6 of 15 secure2sign supports Smart cards and etokens Secure2sign supports two-factor authentication, e.g. if a PIN is required when using a certificate the PIN will be required when signing the document

7 Window showing an audit of signing, time stamping, reason for signing and status of certificate when signing is available via this button. This audit remains with the document and is added to every time a document is signed. 7 of 15

8 Click here to launch the audit window. The audit window includes the ability to view Microsoft Office 2007 signatures. When a user opens a document a window will be launched for a few seconds to advise them that the document is a signed and/or time stamped document 8 of 15

9 Revoked certificates: Revoked certificates cannot be used to sign documents. This is an important feature because legally they should be validated at the time of signing. If the signer's cert expires or otherwise becomes invalid later this is not relevant to a signature made earlier. 9 of 15

10 Hidden Metadata: secure2sign will warn you if hidden metadata could compromise you when you are about to sign a document. 10 of 15

11 With secure2sign a document can be Co-signed and/or Counter-signed: Co-signing process: secure2sign will allow users in an Enterprise to add multiple co-signing of a document. The original digital signature in the document. 11 of 15

12 Counter-signing: secure2sign will allow users in an Enterprise to add multiple counter-signing of a document. Prior to applying a counter signature secure2sign verifies the validity of the existing signatures at the time of signing. 12 of 15

13 Additional signature validation and audit with secure2sign: secure2sign supports both OCSP and CRL validation of certificates: OCSP call being made to a IdenTrust banking environment using CoreStreet s OCSP client. secure2sign timestamp and signature audit which is viewable by double clicking a visible graphic signature or via the verify certificate button on the tool bar. 13 of 15

14 Audit Logs: Certificate signing audit logs. Certificate validation history. secure2sign embedded log in the document from the OCSP validation call when the signature was applied to the document. 14 of 15

15 secure2sign works with any x509 certificates not just those stored on smartcards. It works both with and without the use of a pin. secure2sign works with joint US/UK certified T scheme digital certificates and the IdenTrust Banking digital certificate scheme. secure2sign will also support the US government HSPD-12 PIV cards. secure2sign supports two factor authentication such as the use of a PIN. With secure2sign, both signers and systems administrators can: Restrict choice of certificates to those from specified certificate authorities. Enforce certificate validation on signing. Enforce the use of OCSP validated certificates. Disable editing of the document, except for form fields, after signing. (Users with selected certificates can be allowed to edit the document.) These restrictions may be applied within an enterprise, so that documents signed within the enterprise can conform with the enterprise s signing policies. However, uniquely, secure2sign stores these rules within the signed document, so that signers outside of the enterprise can be forced to comply with them. Unlike other digital signing tools, secure2sign checks Microsoft Office documents for potentially malicious content before you sign, to ensure that you don't sign content that you are unaware of, or that may display differently at a later date. For example, a field could be set to change a number, such as $45,000 to $450,000 on a given date, you would have signed the document showing the lesser amount and unbeknown to you, that amount would be changed at a later date with no associated acknowledgement of that change. Below are two examples of "identity" smartcards containing digital certificates that are supported by secure2trust for digitally signing and accessing documents. [email protected] US Europe Avoco Secure All rights reserved. 15 of 15