In an era dominated by digitalisation, the electronic signature has emerged as a crucial element. The COVID-19 pandemic accelerated its significance, putting it in the spotlight as an essential tool when physical meetings were restricted.
The post-pandemic era has solidified the significance of electronic signatures, and their benefits such as, time-savings, cost efficiency and positive environmental impacts, are widely recognized. Today, these signatures are a crucial asset for both individuals and businesses.
Nevertheless, electronic signatures are still a challenging topic for many people, leaving them with several questions unanswered: What do we mean by electronic signatures? Who are they intended for? What advantages do they offer? How do they work?
What do electronic signatures mean?
Electronic signatures are a digital form of signature that use encryption systems to ensure the reliability, security, and legality of a document, providing a similar value to that of a handwritten signature.
They can be used for various applications such as contracts, business agreements, or attestations. Thanks to the integral information security features they incorporate, electronic signatures ensure that documents exchanged in online operations have not been altered and that the identity of the signer has been verified. Thus, the most notable difference with the handwritten signature is that, unlike the latter, no physical exchange is required.
Electronic signatures, yes... but for whom?
Electronic signatures serve as a practical and efficient tool, streamlining document signing processes. Their utility extends across a broad spectrum of users’ needs, from individuals to professionals needs.
Nowadays, with the rise of digital processes, electronic signatures align with the overall trend of digitalisation. This enables professionals and individuals to adapt to the swift transition to the digital era, allowing them to reap the benefits of electronic signatures over cumbersome physical counterparts.
What are the advantages?
Electronic signatures simplify and accelerate the document signing process significantly. They eliminate geographical barriers and the postal delivery time associated with traditional signatures. This method enables automated processing of signed documents, thus significantly reducing costs and time.
In addition to operational efficiency, electronic signatures contribute to improving the environmental footprint by reducing paper consumption and CO2 emissions linked to traditional handwritten signatures. Their adoption induces a significant step towards modern and environmentally responsible document management.
Besides providing the same benefits of postal signatures such as signature date verification, electronic signatures offer significantly enhanced security compared to traditional ones. This includes, but not limited to, validating the identity of the person and ensuring the integrity of the document content, especially in remote signing scenarios where physical identity verification is not feasible.
How do electronic signatures work?
They are not a trivial scan of your handwritten signature; they involve a technical process that authenticates signatories' identities, confirms the intent to sign (the signer must provide its content to create the signature) and ensures document integrity (no change can be made in the document without detection).
Electronic signatures can achieve this integrity by using secure and tamper-proof codes to link a digital code to an electronic document. When a person electronically signs a document, a unique digital fingerprint (also known as a 'hash') is generated for that document. This fingerprint is then linked to the electronic document using a unique mathematical link (a private key) of the person signing the document. The use of this private key is the proof of the user's intention to commit to the document's content.
While the underlying mathematical concepts are complex, their implementation remains hidden from the user, ensuring that the use of electronic signatures is easy and accessible to everyone while carrying advanced security features.
Our offering at Nowina Solutions
At Nowina Solutions, we provide user-friendly electronic signature software for online signing and validation. This solution requires nothing more than:
- A web browser;
- A digital device for signing and authenticating documents (such as a mobile phone, a smart card, or a token);
- The creation of an account on EVA, our signing platform.
EVA allows you to electronically sign various documents whilst adhering to the latest standards of the European Telecommunications Standards Institute (ETSI – the body in charge of the standardisation of electronic signatures in Europe).
Our team is ready to assist you in your digitisation journey. Feel free to contact us at +35226102053 or via email at info@nowina.lu
The recent pandemic has led to a real need to go digital, as it has become essential to be able to ensure the continuity of activities remotely, including signing processes. However, many companies still rely too often on handwritten signatures. The paperwork generated by these paper contracts is a huge waste of time for the company and prevents it from really focusing on its core business.
Electronic signature is convenient, easy to use and allows you to sign a document without having to go anywhere. To this end, EVA, the electronic signature platform, enables the creation of a fully digitised document management workflow by providing a user-friendly and secure way to sign documents using an electronic identity card or an ad hoc signature product.
The types of signatures supported by EVA include:
- Qualified electronic signatures: allows the use of smart cards or tokens legally recognised in any EU country to produce an eIDAS compliant signature;
- Advanced electronic signatures: allows the use of SMS or strong authentication to sign.
The use of the electronic signature implies, for the company, taking care of the legal validity of the documents signed electronically. Indeed, presented to the court as electronic evidence, it is important to ensure that the signature is valid as per the law. However, the validity of an electronic signature is not assessed on the same criteria as a handwritten signature. It is therefore important to be prepared by implementing an appropriate validation policy for electronic signatures.
A validation module for a tailor-made electronic signature service
To be valid, an electronic signature, whatever representation it may take, must be associated with a physical person. The signature validation will then consist in verifying that the electronic signature has been carried out in accordance with the company's expectations in terms of identification of the signatory, the nature of the document and the type of signature. The validation request module will provide this information to the user and determine the conformity of the documents with respect to the risk acceptance criteria previously set by the company. These criteria then define the validation policy.
EVA has recently integrated a module that, recognises a rich diversity of advanced and qualified signatures. This module, based on DSS (Digital Signature Service), the reference implementation in the European Union, is able to support several validation policies simultaneously, that the company may define according to its own needs. In addition, each validation request introduced in the module can be performed in batch, saving time in the document validation process.
DSS report made accessible in relation to the company's expectations
One outcome of the validation is a PDF document¹ that provides highly detailed yet understandable information regarding the electronic signature(s) on the analysed document and concludes on its validity or invalidity, providing a clear reason with respect to the selected validation policy.
This signed report is then preserved to allow the company to keep track of the validity of the document in case it is needed as electronic evidence later on.
A validation policy that evolves along with the cases encountered
The context of a validation policy might evolve, or new cases of signatures considered to be valid or invalid might be discovered as a result of the company day to day activities.
A team of DSS experts supports the company in maintaining its validation policy (while of course preserving the confidentiality of the documents). When a document is not automatically recognised as valid, the company may decide to send a support request to the Nowina team, which will then analyse the particular use case, consult with the client, and propose an update of the corresponding validation policy.
This module is now available to any company wishing to adopt a policy of validating electronically signed documents, while benefiting from the expertise of a specialist from the field.
Interested in this new functionality? Would you like to know more about it?
Contact us at info@nowina.lu
¹The other outcomes are the XML reports standardised by ETSI in TS 119 102-2.
After several attempts to digitalise his company, Patrick Marth, director and manager of Brunata, decided to start a digitalisation project thanks to a tailor-made solution.
A few years later, it is now possible to evaluate the situation.
A common problem in companies
Brunata is a Luxembourg company specialised in the measure and billing of heating, cooling and water costs according to the consumption of residences. The rental and purchase of high quality smoke detectors is also an important part of their activities.
Within a few years and through digitalisation, Brunata has seen its processing capacity double while significantly reducing the staff assigned to these tasks. The company, like many others, had a heavy administrative workload and was looking for a plan to digitise its processes in order to increase productivity.
The idea was no longer to buy hardware or use standardised software but to develop a tailor-made solution adapted to the company's needs. Very quickly, all the company's documents were digitised and stored in a database. A web portal was then developed for the managers of the residences. They can then easily consult the accounts and invoices. Communication between the management and Brunata is also simplified. The technicians on the field have all the information they need on a tablet. This means that no more paper is needed for interventions and order forms are completely dematerialised.
The electronic signature
In 2016, the use of electronic signatures took this digitisation project a step further. A solution that has proved even more effective since the pandemic by allowing business continuity without obstacles. In fact, almost half of the company's contracts are now signed electronically.
"One database that centralizes everything rather than 10 databases between which links must be made".
For Patrick Marth, using standardised software was not an option. "The specific nature of our work is huge," he says, "and there is currently no program on the market that can cover all aspects of our activity.
A collaboration unlike any other
"To give you a concrete example, when it comes to the invoicing department, we find that the processes are done by themselves, with a simple click. It's a huge time saver. This represents between half an hour and an hour per project and we have 500 projects per year. And every department has been significantly optimised in this digitalisation process."
For such a specific company, it was more appropriate to implement a fully tailored solution. Nowina Solutions became a key player by combining its expertise in the field of electronic signatures with a robust research and analysis methodology in software development to adapt to Brunata's needs and deliver a tailor-made solution.
In terms of time, money and productivity savings, Patrick Marth has thus been able to achieve the objectives he had set himself, but he is not stopping there. The path to digitalization is still ongoing, with many projects underway, including the development of an application for tenants/owners to access their meter readings. Brunata is not yet finished with Nowina Solutions and wants to continue this successful collaboration in the future.
For more information: www.brunata.lu
To contact us: info@nowina.lu
Many thanks to the Digital Innovation Hub of Luxinnovation for publishing the article we prepared on an industrial project we carried out in 2016: e-trash.
E-trash became the first connected bin in the Grand Duchy of Luxembourg in 2016. Usually installed in apartment buildings, this bin aims to encourage recycling and to raise awareness of waste consumption.
For more information, read our article on: Digital Innovation Hub - E-trash : la première poubelle connectée du Luxembourg (dih.lu)
Many initiatives have been put in place in Luxembourg with the aim of reducing pollution and encouraging recycling, especially since the modification of Luxembourg's legislation¹ to prevent and encourage recycling. Since then, residences are required by law to have sorting centres.
This is where e-trash comes in, and in 2016 it became the first connected bin in the Grand Duchy of Luxembourg. Generally installed in apartment buildings, this bin aims to encourage recycling and to raise awareness of waste consumption.
What is e-trash and how does it work?
It is a bin with an adaptable box, designed to cover the different models of existing waste containers. Fully locked, access to the waste deposit can only be made through a tilting drawer that opens after electronic recognition of a personal badge provided to the users beforehand, allowing them to be identified at each deposit.
The use of a connected bin then allows residence managers to easily measure the volume of waste per user, enabling an individual count to be made. Following the "polluter pays" principle, the tax is then adjusted to the volume of waste of each user, encouraging them to reduce their consumption and recycle as much as possible.
A major industrial project at the crossroads of IT, mechanics and electricity
In terms of IT, Nowina Solutions played a crucial role in setting up all the necessary connectivity for the success of e-trash. From configuring badges to setting up a web portal for monitoring and collecting information, Nowina was able to adapt to the needs of the project by making the most of its IT expertise, and to bring together users and residence managers around the same project.
The first challenge was to enable optimal access management. As the objective was to open the bin only on presentation of a personal badge, it was necessary to:
- Develop a centralized access list containing the configuration of personal badges for users;
- Configure a Datafox box to enable the link between the connected bin and the access list.
Secondly, a web portal had to be set up for the co-ownership administrators so that they could access the information they needed to carry out the counts. Depending on the efficiency of the configuration of the box, the portal takes care of recording the badge information as well as the volume of waste for each use. The badges are then collected in real or near-real time and centralised for billing purposes.
For this innovative project, there was no out of the box software to address these needs. By calling in Nowina, e-trash was able to quickly implement its vision of the system, without relying on other suppliers, and maintain its lead.
To contact us: info@nowina
Electronic signatures are not valid ad vitam aeternam
In the context of the health crisis, many companies were forced to resort to teleworking. The need for electronic signatures then became necessary when employees were unable to come to the office to sign documents by hand.
The market has since observed a growing demand for the digitalisation of the signing process. Nevertheless, the majority of those who benefit from this digitisation tend to think that the signing process stops once the document is signed and transmitted. The process does not stop there, though. If a document is to remain valid for more than several years, the technical validity of its signature(s) must be preserved.
But preserved from what?
Three major events can invalidate a so-called "basic" electronic signature:
- Certificate expiration: Let's take an ID card as an example; this identity card has an expiry date. The same applies to a signature certificate. Once this certificate has expired, it can no longer be used to create signatures.
- Certificate revocation: Just like the identity card, the means of creating an electronic signature (also called "private key") can be stolen. The user therefore requests a revocation. He/she asks his/her provider that the signatures created from the date of the theft are not valid. The signature certificate is then revoked.
- Depreciation of cryptographic algorithms: As computer power increases, the chances that an attacker can produce two different documents technically covered by the same signature also increases. Some algorithms that are used to create the signature become outdated by computer power. These algorithms are then said to be deprecated.
My signature was created when my certificate was neither expired nor revoked and I used the recommended cryptographic algorithms. What can I be afraid of?
The problem with so-called "basic" electronic signatures is that their date of creation cannot be trusted. A signature created on a computer or server that indicates a date of 1 January 1990 will indicate that the document was signed on 1 January 1990. It is then entirely possible to include a date at the time of signing that is earlier than the actual date of signing.
How can I trust the electronic signature if I cannot rely on its creation date?
Most often, an electronic timestamp is added to the signature when it is created, by the signature creation software itself. These timestamps establish the proof that the signature existed at a given time.
Now that my signature is time-stamped, does my document need anything else?
In order to ensure the long-term validity of the document, it is also recommended to include all evidence that the signature and its timestamp were not revoked at the time of signing. This data is called revocation data and is available online at a given location, but it is very likely that it will one day no longer be available (e.g. after the supplier ceases operations). It is then recommended to include all this data in the signature while it is still available. Finally, a final timestamp is applied to ensure that the data existed at the time and to protect its integrity.
All these signature levels are called “baseline levels” and are defined by standardisation bodies such as ETSI (European Telecommunications Standards Institute) in Europe.
Need more information on the preservation of electronic signatures? Do not hesitate to contact us at the following address: info@nowina.lu
Author: Xavier SCHUL
On 27 November 2017, the European Commission will organise a live webinar on the DSS open-source library.
The webinar will run from 10:30 to 12.00 and is a unique chance to get started with DSS.
More information, and registration link, can be found on the CEF Digital portal
On the 22nd of May, Nowina celebrated its 5th anniversary.
And a lot has happened in five years. Five years rich in projects, experiences and encounters.
Five years ago, Nowina was just three founding partners and one project. Today, Nowina is 25 people and a leader in electronic signature and digitalisation.
Nowina has celebrated its fifth anniversary surrounded by its partners, customers and friends. Looking to the future, Nowina intends to continue to build on its momentum and continue to support companies and administrations wishing to digitise their value creation chain, including the signature for a complete, optimal and secure digitisation of processes. The adventure continues!
OneLife has developed an online process that allows partners and customers to benefit from a completely digitalized relationship, more efficient and faster by facilitating the completion of the required documents when entering into a new relationship. The digital signature service offered to all parties in the process is the final touch to a 100% digital relationship. This new service - currently offered on the Belgian market, where OneLife is also the market leader - will be gradually rolled out to the group's other key markets.
The security, privacy and robustness aspects of its digital processes were very important to OneLife in the choices that were made to design and implement them. Nowina Solutions' EVA platform, the electronic signature solution chosen by OneLife, is based on Nowina Solutions' EVA platform. This platform is already deployed in several European countries but also beyond the European borders. It therefore has the advantage of being international and contextual by relying on the most relevant means of signature given the risk and the country. Furthermore, it does not require the deployment of hardware or any other process involving the prior registration of signatories. This was an important requirement of OneLife's specifications as they distribute their products in many European markets, each with their own specificities. As an eIDAS auditor, Nowina also provides assurance of the compliance of the implemented solution due to its perfect operational knowledge of the European regulation. EVA is very easy to deploy, adapting to OneLife's specific needs and providing a reliable audit trail that allows the entire signature process to be traced and reconstructed. This integration project was perfectly in line with the other projects of OneLife's strategic digital transformation programme, which aim to progressively dematerialise the documents exchanged and the business processes. The good collaboration between the respective teams and the users, as well as their ability to evolve in an agile approach, have enabled these challenges to be successfully met. A flexible and robust solution for an innovative customer experience "The electronic signature solution we have deployed allows us to use electronic identity cards from all European countries to generate qualified signatures in compliance with the eIDAS standard or national regulations. It also offers the possibility of using more flexible authentication methods such as SMS or soft tokens via our OneApp mobile application. In this way, we are able to adapt to the multinational context of our partners for an innovative, flexible but also robust and secure customer experience," concludes Christophe Risse, IT Development Manager at OneLife.
ALLIANZ LIFE LUXEMBOURG IS INTRODUCING THE CREATION OF ONLINE FORMS AND ELECTRONIC SIGNATURES AS PART OF THE DIGITISATION OF ITS INSURANCE POLICY FILES.
Digitisation and online storage of files, online forms, electronic signature… Allianz Life Luxembourg has just taken a major step in its digital transformation. Two factors have triggered this change. The first was the observation by ACA Insurance Day 2015 that Luxembourg was lagging behind in terms of digitalisation, recalls Patrick Bouckaert, Director of IT & Organization Department, Allianz Life Luxembourg. The second was the launch by the more than 100-year-old group of the "Renewal Agenda", supported within Allianz Benelux by the Xcelerate programme, which includes, among other things, two work areas: "Customer centricity" and "Digital by default".
Customers expect the same quality and flexibility from our products and services as they receive from other large companies like Amazon or Google," says Patrick Bouckaert. It's up to us to learn from these experiences, to exceed expectations and to ensure that each of our customers becomes a loyal and confident supporter of our brand, our products and our people. This is what we call customer centricity. Secondly, Digital by default: the internet, smartphones, digitalisation and other technological developments are radically changing the expectations of our customers and are a challenge for 'classic' companies like ours. We need to become a fully digital company to be able to offer our customers what they want: easy-to-understand products and fast, efficient processes, regardless of the device or channel used…"
Based on these findings, Allianz Life Luxembourg launched its digital transformation, starting with the stabilisation of the foundations. The first step was dematerialisation, with the aim of eliminating paper in favour of electronic document management.
The time was right. Allianz Life Luxembourg could rely on the legislation (Luxembourg law of 25 July 2015) on archiving, which allows copies of paper and digital documents to be kept electronically with the same evidential value as the original document, provided that they are managed and kept by a service provider that has obtained the status of PSDC (Dematerialisation or Conservation Service Provider). Also on the adoption (on 1 July 2016) of the EU Regulation EU 910/2014 eIDAS on electronic identification and trust services allowing also to confer a European legal value to digital trust services, such as electronic signature and time stamping.
Part 1: Digitisation and electronic storage of life insurance policy files
The objective of this first key phase was to increase the productivity of managers by facilitating the search for information, while guaranteeing its long-term archiving on a secure and highly available platform. To achieve this, Allianz Life Luxembourg chose to collaborate with Labgroup, an expert in the field of information lifecycle management, to carry out this first stage of the project: the digitisation and centralisation of life insurance policy files in a single archiving tool - an SAE (Système d'Archivage Electronique).
After a needs analysis, Labgroup consultants and the Allianz Life Luxembourg project team created a specific filing plan based on Allianz Life Luxembourg's core activities; policy management, policyholder management, partner management and regulatory aspects.
The day-to-day digitisation of documents was carried out by the managers using specific indexing sheets. These digitised and indexed documents are automatically sent to the SAE platform, hosted and operated by Labgroup, within its own infrastructure in Luxembourg. Thanks to its various certifications, Labgroup guarantees the highest confidentiality and security of information to its clients.
To further optimise workflows, while minimising classification risks, a system with QR codes has been implemented. These codes are inserted as soon as documents are created and allow users to file their documents directly.
End-users can authenticate to the SAE platform securely and easily through their main account, accessing information specific to their function (granular access). Offering services adapted to the needs of Allianz Life Luxembourg users, Labgroup has developed alerts on missing or expired documents, thus making it possible to warn managers of actions to be taken.
Part 2: Creation of an online electronic form
After the implementation of this first stage of dematerialisation, Allianz Life Luxembourg entrusted Jway, publisher of the FormPublisher and FormSolution software packages, which transform all administrative or commercial processes of companies into intelligent web services for the project of creating online forms.
Jway's intervention was spread over two phases: putting the Guichet partenaire online and creating the forms, then integrating the electronic signature into the processing of the forms, in close collaboration with the company Nowina.
With Jway's FormSolution, Allianz Life Luxembourg was able to implement an online service platform including a SmartForms to record the management actions of partners directly online, while guaranteeing the highest level of security and confidentiality of data.
This project, which was completed in a few months, saves time and efficiency for the platform's users thanks to the Jway solution. This approach also has the advantage of being less costly than a specific development. As a first step, and in close collaboration with Allianz Life Luxembourg's teams, Jway developed "responsive" online forms, personalised and adapted to the partners' needs. This development phase was carried out within the framework of an AGILE methodology to perfectly meet the needs.
In order to seamlessly integrate the online services platform into Allianz's global partner management solution, Jway carried out a secure integration into the Allianz Life Luxembourg extranet. The objective of this integration was to facilitate the online implementation of any new approach according to the Lego principle recommended by Jway.
Part 3: Integration of the electronic signature into electronic forms
Finally, Allianz Life Luxembourg called on the company Nowina Solutions to implement electronic signatures. The aim is to transform business processes to achieve greater efficiency.
As part of Allianz Life Luxembourg's digitalisation process, Nowina helped define the most suitable e-signature solution, i.e. one that offers an efficient user experience while remaining scalable in terms of eIDAS-compliant signature means and technologies enabling the use of a legally binding electronic signature.
Allianz Life Luxembourg has chosen Nowina's EVA signature platform. This platform offers a "responsive" signature portal, in "white label", which allows the sharing of documents between the various signatories. Strengths: the solution can be deployed in Allianz Life Luxembourg's infrastructure and is easily integrated into existing processes by providing a web API covering all signature functionalities.
Taking into account the client's needs, the common thread of the approach
By accelerating its digital transformation, Allianz Life Luxembourg wanted to get closer to the services offered on the French market. The insurer has already met some of its objectives: to offer a platform to its partners and customers that can be accessed from different devices (PC, laptop, tablet, smartphone); to increase the quality of service, efficiency and productivity; to open up access to data in a secure manner; and to support business growth.
"Digital technology should enable us to optimise our activities even further and bring added value to our partners and clients. Taking the customer into account is the guiding principle of our projects," insists Olivier Robin, Deputy CEO, Allianz Life Luxembourg.
There is still a long way to go. Allianz Life Luxembourg has other developments in the pipeline. In particular, the aggregation platforms will be supplied with details of movements on a daily basis, it will be possible to monitor the progress of applications submitted per contract, and the extranet platform will be enhanced with all the documents associated with the management of contracts…
"Of course, we remain attentive to technological developments such as Robot Process Automation, Artificial intelligence, blockchain and chatbot, for which we can rely on the group and, in particular, on Allianz Benelux, with whom we share these subjects," concludes Patrick Bouckaert. In short, if a major step has been taken, others will follow.
THE 3 PROJECT PARTNERS
° Labgroup, information management and archiving solutions
Since 1977, Labgroup has been helping organisations maintain compliance with legal requirements while improving the efficiency of their information management.
Labgroup's range of services includes the digitisation of paper documents, storage and destruction of physical archives, capture and preservation of electronic archives, data backup and restoration and preservation of computer media.
The CSSF (Commission de Surveillance du Secteur Financier) and ILNAS (Institut Luxembourgeois de la Normalisation, de l'Accréditation, de la Sécurité et qualité des produits et services) supervise Labgroup as a Financial Sector Professional (FSP) and PSDC (Dematerialisation and Custody Service Provider). Labgroup is also ISO 9001:2015 and ISO 27001:2013 certified.
° Jway digitises all forms and administrative processes in the form of intelligent web services
Jway provides and implements a complete online services platform including an e-process generator. Jway's solution allows you to model forms and administrative or business processes to create any online service with agility from the request to its final validation and offers a virtual counter that manages files and interactions with users. With FormSolution, Jway makes it possible to easily operate and manage procedures and files on an online counter, regardless of the functional complexity of the form or process; with FormPublisher, Jway offers the possibility of easily and quickly creating any form or e-service without any IT technicalities as part of an agile approach.
° Nowina, complete solutions for dematerialisation of processes including electronic signature
Founded in May 2014, Nowina Solutions provides strong signature and authentication solutions, paperless business solutions and assists companies in thinking about how best to take advantage of eIDAS-related dematerialisation opportunities.
Nowina draws on its unique expertise in interoperable electronic signatures and digitised solutions, as well as strong business knowledge in the financial services, public and private sectors.
The offering enables a smooth transition to full digitalisation and brings additional opportunities beyond the simple digital experience by introducing interoperability as the next driver of growth and competitive advantage.