ComSignTrust e-signing Solutions
Agenda Comda group introduction Our e-signing solutions e-idas central signing compliance ComSignTrust's Icon government clients Other success stories 2
ComSignTrust company overview 3
Company Overview The Comda Group HQ and R&D in Tel Aviv Israel, Privately held; 135 employees, with 3 daughter companies: Comda A leading IT Security integrator & Software developer since 1985 ComSignTrust A technology company developing advanced digital signature products Focusing on highly secure qualified e-signature solutions for enterprises A market leader with large install base of enterprise customers in many sectors such as telecom, healthcare, insurance, banking, utilities, government, IT, etc. ComSign A public Certificate Authority (CA) licensed by the Israeli government International trusted root CA by Adobe, Microsoft, Google, Apple & Firefox with over 100,000 Business & Government 5 customers
ComSignTrust Worldwide Alliances 6
Customers Partial List Telco s Energy Insurance Transport Government Finance Business Enterprises Customs Healthcare 8
ComSignTrust e-signature solutions 9
ComSignTrust Product Portfolio e-sign anywhere, anytime, on any device ComSignTrust Mobile ComSignTrust Desktop / Portable ComSignTrust Signer-1 ComSignTrust Cloud Based SaaS ComSignTrust SDK 10
ComSignTrust Enterprise Central Signing Solution- SIGNER-1 Secure appliance for digital signing and key management Enterprise designated, scalable e-signature solution Supports any X509 based certificates Certificate Authority agnostic Simple deployment and low TCO Outstanding performance in large volume batch processing Multiple signer profiles and signature patterns Sole control over signature via built in OTP service (E-mail/ SMS) compliant to e-idas requirements One e-signature Solution to an entire enterprise 11 SIGNER-1
Compliance to e-idas remote signing regulations The new e-idas regulations (approved April 2014) is meant to promote massive adoption of trusted e- signature solutions using QES(Qualified E-signature Certificates) stored on central signing servers like Signer-1 on premises or in the cloud But. then the signature is not in your control So it requires that the service provider will make sure it is in your sole control. (52) The establishment of remote electronic signatures, electronic signatures Creation Where the environment is managed by a trust service provider On Behalf of the Signatory... should apply specific security management and administrative procedures, and use reliable systems and products, Including secure electronic communication channels, in order to guarantee that the electronic signing establishment environment is reliable and is used under the sole control of the signatory. 12
So how to comply? 3 ways are suggested by CEN WG17: Option 1: the solution is based on a certified server in which signing keys are activated by a client component using hardware, itself certified, with security requirements that tend to forbid any solution other than a "secure element Option 2 : the solution is based on a certified server in which signing keys are activated by a client component using software, itself certified Option 3: The solution is based on a certified server in which signing keys are activated by a 2-factor authentication (such as ISO level 3, for example a PIN + random code ) 13
ComSignTrust Selected e-gov Projects Online VAT reporting to the Israeli Tax Authority, signed by authorized signatories with QES on a Smartcard or e-token Suppliers online tender submission via suppliers portal of the Israeli Ministry of Defense, signed by authorized signatories with QES on a Smartcard or e-token Electronic prescriptions signed by physicians with their QES for healthcare institutions and pharmacists Online document submission signed by lawyers with QES for courts and high court management system Reports submission by public companies to the Israeli Securities Authority and the Tel-Aviv Stock Exchange signed by QES
Case Studies 15
Suppliers Portal - Ministry of Defense (MOD) The Challenge Replace the process of issuing and managing paper based RFP/RFI/ suppliers (20,000+) workflow with an online portal including Qualified Electronic Signature. The solution Online workflow portal with e-signature based access Each supplier is enrolled to the system in 2 steps: Online portal access enrolment Qualified Electronic Signature issued by Comsign CA The supplier can find all RFP/RFI information in the portal The supplier answers the RFP only via portal with his QES Signed RFP s are stored in an e-safe solution and the RFP committees results are stored there as well for the suppliers review Results Enable e-bidding Efficiency Saving cost & time Transparent process for the suppliers
e-prescriptions Innovative e-prescriptions solution for Patient Physician - Pharmacy workflow implemented with 4,000 physicians for 4 M patients Highly secured prescriptions generation and patient s privacy protection Compliant with healthcare industry standards Estimated daily time savings of 30 min per Physician 20,000$ annual savings per Physician ComSignTrust enables the patient to receive his e-prescription at his convenience, without having to go through his clinic to collect a paper one. Moreover, e-prescription dispensing saves doctors a considerable amount of time. Dr. Joseph BaHagun, Director of the Digital Medicine Division at Clalit Healthcare
Thank you! 18
e-scanning and Archiving Sign and archive large amount of scanned documents to maintain compliance at all times ComSignTrust s biggest advantage is the ease and comfort in which citizens can now access required engineering documents. The legal status of the electronic files also enables the municipality to monitor its assets and prevent real estate forgery." IT Director, Petah Tikva Municipality
Mobile Signature Easy access and digital secure signing corporate documents from mobile devices. Integrated into organizations business processes 20
Voice Recording Signature E-signing on voice recordings for call centers. Denial prevention and legislation compliance 21
ComSignTrust for Banking We provide financial institutes with secured solutions for evolving international e-transaction laws and regulations
Leumi on Key Quick, easy and secure way to do e-transactions
Leumi on Key Quickly access your accounts Easily and securely pay bills and transfer funds Manage your account
ComSignTrust Product Portfolio- more details e-sign anywhere, anytime, on any device ComSignTrust Mobile ComSignTrust Desktop / Portable ComSignTrust Enterprise ComSignTrust Cloud Based SaaS ComSignTrust SDK 25
Thank you! 26