1 of 30

2 of 30

Approach to Inclusive eSignatures

eSignature BB

Inclusive, Privacy Friendly eSignatures at Country Scale

3 of 30

eSignature Building Block

Vishwanath Vaidyanathan

Open, Interoperable, Privacy Friendly, Inclusive eSignatures

Software Architect - Last 5 years working with multiple DPIs

4 of 30

Topic to be covered

What is eSignature ?

Cryptography Principles
Trust Principles

How is eSignature useful?
Our approach to eSignature

One Time Key Based Model
SCD Based Model
eSignature BB - Trust Principles

Use cases
Important Terminologies
Key Digital Functionalities
Operational Requirements
Internal Workflows
Service APIs
Out of Scope
Future Scope

5 of 30

What is eSignature ?

Brings ease of handwritten signatures to the digital world
Three types of electronic signatures

Simple Electronic Signatures
Advanced Electronic Signatures

Identify the signatory
Signatory to retain control
Detect data change

Qualified Electronic Signatures

Ensure key security using compliant hardware devices

Normally QES has the equivalent legal effects of a handwritten signatures

1.Start with one liner on where and for what we the use of handwritten signature today

Most of the these documents are in digital form in various structured and unstructured formats

So we need some digital equivalent to make the entire process efficient

2. AES - Enables the concept verification of eSignature by bringing in the below benefits

Signatory to retain control - Cannot change the data without the signatory agreement

QES - Physical token (ID card, Smart card, USB token)

Remote token/EIDAS remote QSCD/Split key ( Cloud + App, Cloud + App + Secure element, Cloud + SIM card, Cloud + App + eSIM)

3. All these eSignatures can be used for various context, but —, again this is decided by the countries law

In the context of eSignature BB we are supporting only the QES

—-----------

Reduce digital divide Increase trust and reduces frauds by automatic varification

2 - Handwritten Signatures have served as a way to agree/witness a given document

most of the documents are in digital form. The digital form varies between structured (XML, JSON ) and unstructured documents(PDF, Word, Image, CSV, Spreadsheet).

6 of 30

eSignature - Cryptography Principles

7 of 30

Digital Certificate - Trust Principles

8 of 30

How is eSignature useful?

Trust a signed document remotely
Verification at any point in time
Tamper Evident
Timestamping
Absolute authenticity of this individual
Cost savings by going paperless & faceless
Enables Traceability

9 of 30

Our Approach to eSignature

Support only Qualified Electronic Signatures (QES)
Be Inclusive - Supports multiple social economic backgrounds
Privacy preserving - Consume only the information digest
User centric - Mandate user involvement
Transparent and auditable - Faster resolution to conflicts
Interoperable - Avoid vendor lock in & enable choice
Open standards - Enable innovation potential of engineers
Support multiple standard signature formats

10 of 30

One Time Key Based Signature Model

11 of 30

SCD Based Signature Model

12 of 30

eSignature BB - Trust Principles

13 of 30

Use cases

eSignature based Land record transfer

Establish transparent land ownership
Prevent land disputes

eSignature Based Proof Management

Scanned copy of an existing physical document

Public Health and Insurance (Claim Management)

Track claims, monitor leakages and reduce fraud

Income tax

Faceless tax assessment regime
More trust and transparency

14 of 30

Important Terminologies

Signatory / User
eSignature creation device (SCD)
Signing application / Signature requestor / Third-Party
Document (to be signed)
Onboarding

HSM
Timestamp
CSR
X509 Certificate
Revocation

15 of 30

Key Digital Functionalities

HSM based Key security
Timestamping
Support for One Time Signing
Support for SCD on-boarding
Support for SCD based Signing
Client side library for hash generation
Certificate Management
Notification

16 of 30

Operational Requirements

Identity BB Integration support
Information Mediator BB Integration support
Messaging Interface BB Integration support
Audit
Logging
Metrics

17 of 30

Internal Workflows

One Time Key Based Signature Workflow

SCD Based Signature Workflow

18 of 30

Service APIs

Open API Specification Document

19 of 30

Out of Scope

Document storage - no documents will be accepted or stored in the service
Communication with the SCD is left out of scope it's up to the eSignature service provider
Handwritten signatures - no support for handwritten signatures that are scanned or on paper.
No Administrative APIs
No support for Signing queues, i.e waiting for multiple parties to sign
No notification or remainders about pending signatures

20 of 30

Future Scope

Support for Bulk signature
Support for B2B
Standardizing the revocation model

21 of 30

Authors: Sasikumar Ganesan, Jurgen Niinre, Ramkumar.P.S., Kassy Kadio, Vishwanath Vaidyanathan�

URL link to specifications/requirements: https://app.gitbook.com/o/pxmRWOPoaU8fUAbbcrus/c/EiApewuu4GrhgGCBTps0�

�

22 of 30

THANK YOU

23 of 30

Additional slide template that you may find useful.

24 of 30

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem.

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis quis

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem

01

02

03

04

Topis

Covered

25 of 30

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis quis rem atque quia.

Lorem ipsum

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis quis rem atque quia.

Slide

headline

here

26 of 30

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis quis

Slide headline here

27 of 30

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem.

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis

Slide

headline

here

28 of 30

Digital government services are vital for fostering economic growth, developing the digital economy and promoting trust in government institutions.

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis

Slide headline here

29 of 30

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem est perspiciatis

01

02

03

04

05

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur dolorem et dolores exercitationem.

Slide

headline

here

30 of 30

Mr. Sherif El Behery

Dr. Abeer Shakweer

Dr. Nezar Sami

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur

Eng. Tarek Shash

Dr. Hesham Shafick

Mr. Sherif El Behery

Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur Lorem ipsum dolor sit amet. Sit placeat vitae in tenetur

Strategic Innovation

Create and lead responsive and adaptable organizations

Session 01