Basic information: sign-me sign-me Bundesdruckerei's solution for online signatures using the new German ID card What is sign-me? sign-me is a web application from Bundesdruckerei that enables online signatures for the first time ever using the new German ID card. In addition to the ID card, other conventional signature cards can also be used with sign-me. In the world of electronic communications, the online signature replaces the handwritten signature. It can be used for all transactions on the net which require a legally binding online signature. Anyone wishing to apply online for a loan, for instance, can send the signed loan application to the bank electronically via sign-me. This signature proves to public agencies and other service providers that the signed document is in fact from the person stated. Once signed with the German ID card, any changes to the document cannot go unnoticed. How does sign-me work? Special signature cards are no longer needed for online transactions with sign-me. The new German ID card, which everyone in Germany will have in just a few years from now, is all that's needed. sign-me ensures that the entire process of online signing is both fast and convenient. All card holders have to do is load a signature certificate onto their ID cards. This certificate is a kind of electronic pen which is used to sign in a manner recognised by law. The required certificate is issued by D- TRUST, Bundesdruckerei's trust center. 1
Launch of pilot phase in November 2012 During the pilot phase, sign-me will be integrated into the online shop of Reiner SCT. Since 20 November 2012, interested Internet users have been able to use sign-me and load certificates onto their ID cards. This is carried out in three steps as follows. 1. Buy a certificate During the pilot phase, Internet users can purchase a signature certificate at an introductory price of 10 euro in the online shop of Reiner SCT, a specialist in smart card readers and a Bundesdruckerei partner. The certificate is then valid for a period of one year. 2. Register with sign-me Once the certificate has been purchased, an activation link is sent to the user. This is used to start the sign-me app integrated into the online shop of Reiner SCT. Users only need to register once and the registration procedure itself takes less than five minutes. All they need to register is their ID card with the online ID function activated and an advanced card reader which can also be used in future for signing online. Once the ID card PIN is entered, the ID card data, such as name, date and place of birth as well as address, is sent to Bundesdruckerei's trust center. The authorisation code can now be sent by post 1 to the ID card holder within two to three days. With this authorisation code, the user loads the required signature certificate via sign-me onto the ID card. 3. Load certificate sign-me is used to the load the certificate. The user enters his/her authorisation code and sets a signature PIN using the card reader. The latter serves as a PIN for the signature certificate and must be entered each time the user wishes to sign online. This ensures that only authorised certificate holders can sign online. 1 German law requires that the authorisation codes be sent by post. This is based on the "Confirmation Report on the New German ID Card as a Secure Signature Generation Unit pursuant to the Act on Digital Signature". 2
During the loading process, the certificate is then personalised, so that it now has unique features and can be clearly assigned to a single person. Feedback on the pilot phase During the pilot phase, users can give feedback on sign-me's user-friendliness. Bundesdruckerei has developed an online questionnaire for this purpose which is e- mailed to the user. The company will then include ideas and suggestions from the pilot phase in the further development of sign-me. At CeBit 2013 in Hanover, Bundesdruckerei will present a first sign-me app. By then, the technical preconditions will be in place for signing online with the new German ID card. What Internet users need to participate in the pilot phase: - The new German ID card: The online ID function must be active. This is generally active when the ID card is issued, unless the holder has deliberately requested that it be deactivated at the time of collection. - ID card PIN: The card holder must authorise each data transmission using this six-digit PIN. - Advanced card reader from Reiner SCT: This hardware enables a document to be signed online. An integrated, secure PIN pad prevents PIN phishing during transactions. - AusweisApp: This driver software enables the ID card and the computer to communicate with each other. It can be downloaded at: www.ausweisapp.bund.de. - Microsoft Internet Explorer 9 or Mozilla Firefox 10 ESR: AusweisApp currently only runs with these two browsers. - Via Bundesdruckerei's website, go to the Reiner SCT shop page and buy a certificate and test sign-me. You can pay for the certificate by invoice or direct debit. 3
Product launch in 2013 Beginning next year, sign-me will cover all the steps required for signing online from loading the signature certificate to signing a document online. Public agencies and other online service providers will then be able to integrate sign-me into their Internet portals and hence receive legally recognised online signatures from their customers. The signature certificates can be made available to customers directly via the online portal. Bundesdruckerei offers certificates with different periods of validity from five minutes for a once-off online signature, to up to four years for regular online signing. What sign-me has to offer for service providers Optimise processes Public agencies and private companies can use sign-me in order to handle a large part of legally binding communications with customers online. This reduces the amount of work involved. The technology needed can be easily integrated into online portals and no additional signature software is necessary. Secure competitive advantages Once public agencies or private companies integrate sign-me into their Internet portal, they can offer a unique 24/7 service. Using sign-me, customers can sign online directly on the service provider's website. Create security and trust The signature certificates are issued by D-TRUST, Bundesdruckerei's trust center. Service providers can rely on a trusted infrastructure and the secure handling of online transactions. Rely on the standard of tomorrow sign-me enables online signing using the new German ID card a card that all Germans will possess in the future. The user-friendly app bundles all the steps needed to sign online, making it very attractive for Internet users. 4
What sign-me has to offer for customers Save time and effort sign-me allows ID card holders to use the functions of their card: legally binding communications can be handled online. This puts an end to sitting around and waiting at public agencies or trips to the post office. It also means that the timeconsuming identification procedures are no longer necessary. Cut costs Signing online using sign-me doesn't cost the customer anything. The signature certificates are made available by the service provider via the online portal. About Bundesdruckerei Bundesdruckerei GmbH in Berlin is one of the world's leading companies engaged in developing and supplying systems solutions for secure identification in the analogue and digital world. In addition to full-scale passport and ID card systems, the company supplies national and international customers in both the public and private sector with ID documents, high-security cards, document verification hardware and security software along with trust center and eid services. Bundesdruckerei also produces banknotes, postage and revenue stamps as well as electronic publications. With its subsidiaries BIS Bundesdruckerei International Services GmbH, D-TRUST GmbH, Maurer Electronics GmbH and inco Sp. z o.o., the Bundesdruckerei Group employs a staff of around 2,000 worldwide. In the 2011 financial year, the Group generated revenue of EUR 406.3 million. Bundesdruckerei is one of the founding members of the Fraunhofer "Secure Identity Berlin-Brandenburg" innovation cluster and also endows the "Secure Identity" chair at Freie Universität Berlin. For more information, go to: www.bundesdruckerei.de. Contact Alexandra Haberstroh Manager Media Relations Bundesdruckerei GmbH Tel.: +49 (0) 30-2598 2810 Fax +49 (0) 30-2598 2808 E-mail: alexandra.haberstroh@bdr.de 5