...
- Start with the use case. refer to the scope once to be clear.
Definitions:
eSign, also known as eSignature An E-Signature or an electronic signature , is a way of signing documents digitally, without needing to print them. It’s sort of like an electronic version of a pen and paper signature or stamp, specific to a person or organization and is both secure and legally binding.
In our context, eSign E-Signature will mean cryptographically validatable signatures.
...
Government signing the document G2P – Priority
End The end user signing signs the document. P2G - Priority
Business signing the document. B2B or B2C - last
...
The ability for anyone to sign
One time signature - OTP, Biometrics. authentication based E-signature
OTP
Biometrics
PIN
One Time Signature
WOTS+
XMSS
Long-term signature -
Smart cards
Smart Phone.
HD Signature
Smart phone
Use ID BB to authorize and sign a document.
Should be possible to sign with a standalone app, without ID BB.
Auditability
Validatable
Revoke certificate.
Highly secure.
Preservation of esignature E-Signature
Non-Repudiation
Long-term validatable.
Inclusive
Supports multiple social economic backgrounds.
Presentation
...
Sample Use cases: - Priority 1
Use case 1: Payroll signature
...
Can we have the payroll statement signed before its sent for the payment block.
Type:
G2B or B2B or B2G
Related use cases
Sign you invoice.
Sign an RFP
Sign a business agreement.
Use case 2:
Use case 3: Signing and verifying a document using desktop computer or mobile phone
...
An ID-card, which is a mandatory identity document for all Estonian citizens. The PINs required for electronic signing are issued to you in a security envelope with the card. In order to use your ID-card, you also need a card reader and ID-software.
A digital ID card: Estonian citizens can use their digital IDs in parallel with ID-cards while foreigners are issued e-resident’s digital IDs.
A mobile-ID is a SIM card-based solution for electronic authentication and digital signing with a mobile phone. Mobile-ID SIM cards are issued by mobile network operators.
A Smart-ID is a SIM-independent device-based solution for smartphones.
Standards
PAdES - PDF
https://www.etsi.org/deliver/etsi_en/319100_319199/31914201/01.01.01_60/en_31914201v010101p.pdf
https://www.etsi.org/deliver/etsi_en/319100_319199/31914202/01.01.01_60/en_31914202v010101p.pdf
XAdES - XML
http://www.etsi.org/deliver/etsi_ts\101900_101999\101903\01.04.02_60\ts_101903v010402p.pdf
CAdES
https://tools.ietf.org/html/rfc5126.html
Timestamping