Embed Size (px)
Citation preview
Digital Signature: Mightier than the Pen
Katie Burke
Government Program Strategist, Laserfiche
Mauricio Pinto
Market Manger for State and Local Government, ARX
Agenda
‣ Introduction & defining digital signatures‣ Digital signatures and business processes‣ Foundations of digital signatures‣ Demonstration‣ Use case: County of Hawaii Corporation
Counsel
Introduction: State of the market
DIGITAL SIGNATURE
#digitalsignature
Source: http://www.govtech.com/e-government/212218211.html
Introduction: State of the market
48% Growth in Digital Signature Adoption
Drivers:‣ Evolution of
consumer technology‣ The need to reduce
transaction costs‣ Mobile accessibility‣ Customer experience
expectations
What is a Digital Signature?
A way of representing ourselves digitally
What is a Digital Signature?
A way of representing ourselves digitally
How Digital Signatures Fit in Business Processes
‣ Performance Review Process
Cats
Create review document
Digital signature: boss and employee Digital Signature: HR
Shortcut in employee folder
Routed to record series, retention
applied
Workflow
Why Digital Signatures?
‣ You need to transform to paperless‣ You need to provide better service with fewer resources‣ You need transparency, auditability, compliance &
accountability‣ You need a technology that is:
• Non-proprietary• Enduring• Cross-departmental• Validate-able outside the organization
Electronic Signature Legislation
‣ Uniform Electronic Transactions Act (“UETA”) – 1999‣ Electronic Signatures In Global and National
Commerce Act (ESIGN) – 2000
These Acts give legal force and effect to electronic signatures
Electronic Signature Legislation
‣ Uniform Electronic Transactions Act (“UETA”) – 1999
‣ Electronic Signatures In Global and National Commerce Act
(ESIGN) – 2000
These Acts give legal force and effect to electronic signatures
Electronic Signature defined as “an electronic symbol, sound or process”
Electronic Signature Spectrum
Least Secure*
Most Secure*
Image PKI
*Secure = three “I’s”:• Identity: Guarantees identity of signer• Intent: Non-repudiation• Integrity: Changes invalidate the signature
Electronic Signature Spectrum
Least Secure*
Most Secure*
Image PKI
*Secure = three “I’s”:• Identity: Guarantees identity of signer• Intent: Non-repudiation• Integrity: Changes invalidate the signature
“I Agree”
ePad
Electronic Signature Spectrum
Least Secure*
Most Secure*
Image PKI
*Secure = three “I’s”:• Identity: Guarantees identity of signer• Intent: Non-repudiation• Integrity: Changes invalidate the signature
“I Agree”
ePad Application-Specific(ExM)
Electronic Signature Spectrum
Least Secure*
Most Secure*
Image PKI
*Secure = three “I’s”:• Identity: Guarantees identity of signer• Intent: Non-repudiation• Integrity: Changes invalidate the signature
“I Agree”
ePad Application-Specific(ExM)
eSig Services
Electronic Signature Spectrum
Most Secure
Portability
Image
ePad
eSig Services
Application-Specific(ExM)
PKI
“I Agree”
Digital Signature (PKI) Technology
The only technology that can guarantee Identity, Intent, & Integrity in a portable and easily verifiable format
ID Challenge
ReasonCode
Document to sign Digital
Signature
Signed Document
+ +
Content Hash
UniqueSigning
Key
Digital IDCertificate
=+
Result• Digitally signed and secure electronic record
• Fully trusted and easily verifiable
Certificate Options
‣ Self-Signed‣ 3rd Party Certificate Authority‣ Self-Issued Organizational CA
Certificate Options
‣ Self-Signed‣ 3rd Party Certificate Authority‣ Self-Issued Organizational CA
Why CoSign?‣ Turn-key, Plug ‘n Play, Network Appliance‣ Choice of User Directory Integration or Built-in Directory ‣ Independently Verifiable Signature ‣ Signing Flexibility
Trusted By: • Employees• Citizens• Auditors• Partners• Suppliers
What Can You Sign with CoSign?
‣ MS (Word, Excel, Outlook,
InfoPath)
‣ PDF, PDF-A
‣ Any printable output
‣ CAPI-compliant applications
‣ Web forms (with SAPI)
‣ Laserfiche Docs
PowerPoint
Tiff ImagesLotus Forms
PDF & PDF/AOutlookExcel
Word
AutoCADWordPerfect
InfoPath
Web Forms
Application-Compatible Signature
Mechanism
Virtual Signing
Demonstration
Laserfiche Integration
Laserfiche Integration
Laserfiche Integration
Laserfiche Integration
Laserfiche Integration
ARX Customer Use Cases
‣ Engineering: Drawings, Change Orders
‣ Courts: Filings, Judicial Orders, Complaints
‣ Legal & Contracts: Contracts, Agreements, Memos, Correspondence
‣ Archived Records: Integrity of ALL records
‣ Procurement: Requisitions, P.O.s, Invoices
‣ Human Resources: Onboarding, Benefits, Evaluations
‣ Administration: SOPs, Correspondence, Meeting Agendas, Memos
‣ Point of Service: Permits, licenses, patient forms, defendant paperwork
Use Case: County of Hawaii
Source: www.hawaiicounty.gov
Use Case: County of Hawaii
‣ Old leave of absence process
Fill out document
Print Wait for boss Boss’s sign off File
Use Case: County of Hawaii
‣ New leave of absence process
Fill out document
Digital signature: boss
Filed in employee folder, subfolder
for year
!Boss notified
Wrapping Things Up
Questions?
Katie Burke
Government Program Strategist
562-988-1688 x 223
www.laserfiche.com
Mauricio Pinto
Market Manager
360-588-1062
www.arx.com
CoSign Deployment Arcitecture
Why CoSign?‣ Compliance:
• Meets international standards & U.S. regulations• Guarantees transparency, auditability & accountability
‣ Control & Security:• Provides centralized security & management over certificates & keys• Provides centralized management over users• Uses your existing authentication infrastructure
‣ Choice:• Sign Anything• Leverages your existing investment in EDM, ECM, & Workflow• Adapts to YOUR procedures
‣ Cost-Effectiveness:• Scales from a few users to thousands• Reduces costs immediately• Delivers ROI in 3-6 months
ARX (www.arx.com)
‣ ARX Inc. - PKI-centric data for security minded organizations
‣ Developed the ‘standard digital signature’ for highly regulated industries worldwide
‣ 5 Million+ active signers and growing!!!
‣ Focus: Government, Life sciences, Healthcare, Engineering Utilities, Energy, Legal…
“ARX has the most advanced digital signature
capability in the field… it easily integrates with internal
security and credential management along with a
strong central administration”
The Forrester Wave™:
E-Signatures, Q2 2013
