blog-a-new-era-for-e-signatures

A new era for e-signatures – how eIDAS is shaping the future of high-trust signing

eIDAS has helped herald a new era of e-signing for businesses operating across Europe. E-signatures provide a fast, secure, efficient and cost-effective alternative to paper signing and the eIDAS regulation ensures legal certainty across the EU with its requirements for Basic, Advanced and Qualified e-signatures.

Qualified Electronic Signatures provide the highest level of assurance and non-repudiation. To comply with the eIDAS requirements for Qualified Electronic Signatures an e-signature must:

  • Be uniquely linked to the signer
  • Be able to identify the signer
  • Be created under the signer’s sole control
  • Be able to detect any subsequent changes to the data
  • Have a digital certificate issued by a trusted, qualified certificate authority
  • Use a signing key managed within a trusted Qualified Signature Creation Device (QSCD)

These requirements deliver cross-border recognition and ensure the same legal framework for any documents signed using Qualified Electronic Signatures across the EU. 

Advancements in remote signing

As well as the implementation of eIDAS, e-signatures have been enhanced with the development of remote signing. Until recently many high-security industries used local signing solutions to sign electronic documents.

Local signing requires locally-held hardware such as a smartcard or token and specialized software to validate e-signatures. The major drawback of local signing is that it requires the signer to carry cumbersome hardware with them to sign – this is especially arduous if the signer is on the move and needs to e-sign urgently. 

In contrast, remote signing utilizes connected mobile devices to enable signing authorization from anywhere. Individual signing keys are held in server-based systems or secure cloud services on a Hardware Security Module (HSM).

The Ascertia ADSS SAM Appliance has an embedded HSM, Utimaco’s CryptoServer CP5 HSM, which is Common Criteria (CC) EAL4+ certified according to the eIDAS Protection Profile EN 419 221-5.

eIDAS recognizes remote signing and supports its use for the creation of remote qualified signatures – the highest trust level for signatures in Europe.

In order to be compliant with the eIDAS regulation for Qualified Remote Signatures it is important to be able to provide proof that the signing keys were always under the sole control of the user and they reside within the premises of a Qualified Trust Service Provider (QTSP). Ascertia’s ADSS SAM Appliance is a tamper protected device that authenticates signers and requests formal authorization to use their signing key.

Ascertia is currently undergoing Common Criteria EAL4+ certification for the eIDAS EN 419 241-2 standard to ensure compliance with the eIDAS regulation for creating remote qualified signatures with Level 2 Sole Control.

The below video demonstrates how Ascertia’s ADSS SAM works:

Remote Signing - How it works from Ascertia on Vimeo.

Blog post by Dr. Ulrich Scholten

About the author

Ulrich Scholten is an internationally active entrepreneur and scientist. He holds a PhD in information technology and owns several patents on cloud-based sensors. His research on cloud computing is regularly published in highly rated journals and conference papers. From 2008 - 2015, he was associated research scientist at the Karlsruhe Service Research Institute (KSRI), a partnership by KIT and IBM, where he researched network effects around web-platforms together with SAP Research.

To find more press releases related with below topics, click on one of the keywords:

How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      Your collection of download requests is empty. Visit our Downloads section and select from resources such as data sheets, white papers, webinar recordings and much more.

      Downloads
      0