secure2signHTM: Digital Signatures for Web Forms
Business processes, in particular consumer led processes, often rely on the filling in of forms and the adding of a signature to complete the form. Making these processes digital allows more efficient transactions resulting in happier customers and green working patterns. The stumbling blocks to digitising form completion is to ensure that the:
- completed form can be shown to have not changed since signing
- method of identifying the signer is easy to use and intuitive
- signing device has little or no install impact on the end user
secure2signHTM is a control for zero footprint, client-side digital signing of HTML / XHTML (web) forms that can use a number of different methods of identifying a user who is signing a completed form, thereby making the end user experience of digital signing more intuitive.
Secure2signHTM produces a standard PKCS#7 format signature, which is returned with the form data when the form is submitted. The signature can be subsequently verified using existing tools, or using the secure2signHTM verifier.
Because the appearance, or text, of the form web page could be changed dynamically, using style sheets or scripts, a screen capture of the web page at the time of signing is included in the signature. Also included is a time stamp from an authorised time source to RFC 3161, ensuring that the signing time is recorded from a cryptographically secure source.
Extended Support for Digital Identities to Create Usable and Secure Signing Portals
As well as allowing the end user to sign with an existing X509 digital certificate, secure2signHTM can generate a transient signing certificate, from user entries, such as a ATM card numbers, Windows CardSpace claims, SAML logon tokens, etc.; this allows a user to sign and still create a standard PKCS#7 signature without requiring them to already have a digital certificate. This unique feature allows organisations to create non-repudiable signature portals that enable business processes that require signatures, to complete transactions. Validation of the identity used to sign the form can be done using, for example, OSCP or CRL in the case of digital certificates or online credit card checks in the case of an ATM card. Methods using, for example, SAML log on tokens allow a company to create seamless signing portals allowing the user to click and sign based on their logon session. Example uses of secure2signHTM include, insurance forms, mortgage and loan applications, etc.
Test Out secure2signHTM as an End User
To test out the end user experience when using secure2signHTM for web form signing, you can go to our online demo site: www.secure2signonline.com
Learn More:
secure2signHTM Features and Benefits
