Electronic signature is convenient, easy to use and allows you to sign a document without having to go anywhere. To this end, EVA, the electronic signature platform, enables the creation of a fully digitised document management workflow by providing a user-friendly and secure way to sign documents using an electronic identity card or an ad hoc signature product.   

The types of signatures supported by EVA include:  

• Qualified electronic signatures: allows the use of smart cards or tokens legally recognised in any EU country to produce an eIDAS compliant signature;   
   

• Advanced electronic signatures: allows the use of SMS or strong authentication to sign.   

The use of the electronic signature implies, for the company, taking care of the legal validity of the documents signed electronically. Indeed, presented to the court as electronic evidence, it is important to ensure that the signature is valid as per the law. However, the validity of an electronic signature is not assessed on the same criteria as a handwritten signature. It is therefore important to be prepared by implementing an appropriate validation policy for electronic signatures.   

A validation module for a tailor-made electronic signature service

To be valid, an electronic signature, whatever representation it may take, must be associated with a physical person. The signature validation will then consist in verifying that the electronic signature has been carried out in accordance with the company’s expectations in terms of identification of the signatory, the nature of the document and the type of signature. The validation request module will provide this information to the user and determine the conformity of the documents with respect to the risk acceptance criteria previously set by the company. These criteria then define the validation policy.  

EVA has recently integrated a module that, recognises a rich diversity of advanced and qualified signatures. This module, based on DSS (Digital Signature Service), the reference implementation in the European Union, is able to support several validation policies simultaneously, that the company may define according to its own needs. In addition, each validation request introduced in the module can be performed in batch, saving time in the document validation process.  

DSS report made accessible in relation to the company’s expectations 

One outcome  of the validation is a PDF document¹ that provides highly detailed yet understandable information regarding the electronic signature(s) on the analysed document and concludes on its validity or invalidity, providing a clear reason with respect to the selected validation policy.    

This signed report is then preserved to allow the company to keep track of the validity of the document in case it is needed as electronic evidence later on.

A validation policy that evolves along with the cases encountered  

The context of a validation policy might evolve, or new cases of signatures considered to be valid or invalid might be discovered as a result of the company day to day activities. 

A team of DSS experts supports the company in maintaining its validation policy (while of course preserving the confidentiality of the documents). When a document is not automatically recognised as valid, the company may decide to send a support request to the Nowina team, which will then analyse the particular use case, consult with the client, and propose an update of the corresponding validation policy. 

This module is now available to any company wishing to adopt a policy of validating electronically signed documents, while benefiting from the expertise of a specialist from the field.   

Interested in this new functionality? Would you like to know more about it?   

Contact us at info@nowina.lu  

¹The other outcomes are the XML reports standardised by ETSI in TS 119 102-2. 

The post A successful digital transition with EVA, the electronic signature platform  appeared first on Nowina.

A few years later, it is now possible to evaluate the situation.  

A common problem in companies

Brunata is a Luxembourg company specialised in the measure and billing of heating, cooling and water costs according to the consumption of residences. The rental and purchase of high quality smoke detectors is also an important part of their activities. 

Within a few years and through digitalisation, Brunata has seen its processing capacity double while significantly reducing the staff assigned to these tasks. The company, like many others, had a heavy administrative workload and was looking for a plan to digitise its processes in order to increase productivity. 

The idea was no longer to buy hardware or use standardised software but to develop a tailor-made solution adapted to the company’s needs. Very quickly, all the company’s documents were digitised and stored in a database. A web portal was then developed for the managers of the residences. They can then easily consult the accounts and invoices.  Communication between the management and Brunata is also simplified. The technicians on the field have all the information they need on a tablet. This means that no more paper is needed for interventions and order forms are completely dematerialised.

The electronic signature

In 2016, the use of electronic signatures took this digitisation project a step further.  A solution that has proved even more effective since the pandemic by allowing business continuity without obstacles. In fact, almost half of the company’s contracts are now signed electronically.

“One database that centralizes everything rather than 10 databases between which links must be made”.   

For Patrick Marth, using standardised software was not an option. “The specific nature of our work is huge,” he says, “and there is currently no program on the market that can cover all aspects of our activity. 

A collaboration unlike any other

“To give you a concrete example, when it comes to the invoicing department, we find that the processes are done by themselves, with a simple click. It’s a huge time saver. This represents between half an hour and an hour per project and we have 500 projects per year. And every department has been significantly optimised in this digitalisation process.” 

For such a specific company, it was more appropriate to implement a fully tailored solution. Nowina Solutions became a key player by combining its expertise in the field of electronic signatures with a robust research and analysis methodology in software development to adapt to Brunata’s needs and deliver a tailor-made solution.

In terms of time, money and productivity savings, Patrick Marth has thus been able to achieve the objectives he had set himself, but he is not stopping there. The path to digitalization is still ongoing, with many projects underway, including the development of an application for tenants/owners to access their meter readings. Brunata is not yet finished with Nowina Solutions and wants to continue this successful collaboration in the future.   

For more information: www.brunata.lu

To contact us: info@nowina.lu   

The post Brunata’s digitalisation thanks to a tailor-made solution appeared first on Nowina.

This is where e-trash comes in, and in 2016 it became the first connected bin in the Grand Duchy of Luxembourg. Generally installed in apartment buildings, this bin aims to encourage recycling and to raise awareness of waste consumption.  

What is e-trash and how does it work?

It is a bin with an adaptable box, designed to cover the different models of existing waste containers. Fully locked, access to the waste deposit can only be made through a tilting drawer that opens after electronic recognition of a personal badge provided to the users beforehand, allowing them to be identified at each deposit.  

The use of a connected bin then allows residence managers to easily measure the volume of waste per user, enabling an individual count to be made. Following the “polluter pays” principle, the tax is then adjusted to the volume of waste of each user, encouraging them to reduce their consumption and recycle as much as possible. 

A major industrial project at the crossroads of IT, mechanics and electricity

In terms of IT, Nowina Solutions played a crucial role in setting up all the necessary connectivity for the success of e-trash. From configuring badges to setting up a web portal for monitoring and collecting information, Nowina was able to adapt to the needs of the project by making the most of its IT expertise, and to bring together users and residence managers around the same project.

The first challenge was to enable optimal access management. As the objective was to open the bin only on presentation of a personal badge, it was necessary to:

• Develop a centralized access list containing the configuration of personal badges for users;
• Configure a Datafox box to enable the link between the connected bin and the access list.

Secondly, a web portal had to be set up for the co-ownership administrators so that they could access the information they needed to carry out the counts. Depending on the efficiency of the configuration of the box, the portal takes care of recording the badge information as well as the volume of waste for each use. The badges are then collected in real or near-real time and centralised for billing purposes.

For this innovative project, there was no out of the box software to address these needs. By calling in Nowina, e-trash was able to quickly implement its vision of the system, without relying on other suppliers, and maintain its lead.

To contact us: info@nowina

The post E-trash : Luxembourg’s first connected bin appeared first on Nowina.

In the context of the health crisis, many companies were forced to resort to teleworking. The need for electronic signatures then became necessary when employees were unable to come to the office to sign documents by hand.

The market has since observed a growing demand for the digitalisation of the signing process. Nevertheless, the majority of those who benefit from this digitisation tend to think that the signing process stops once the document is signed and transmitted. The process does not stop there, though. If a document is to remain valid for more than several years, the technical validity of its signature(s) must be preserved.  

But preserved from what?  

Three major events can invalidate a so-called “basic” electronic signature: 

• Certificate expiration: Let’s take an ID card as an example; this identity card has an expiry date. The same applies to a signature certificate. Once this certificate has expired, it can no longer be used to create signatures. 
   
• Certificate revocation: Just like the identity card, the means of creating an electronic signature (also called “private key”) can be stolen. The user therefore requests a revocation. He/she asks his/her provider that the signatures created from the date of the theft are not valid. The signature certificate is then revoked. 
   
• Depreciation of cryptographic algorithms: As computer power increases, the chances that an attacker can produce two different documents technically covered by the same signature also increases. Some algorithms that are used to create the signature become outdated by computer power. These algorithms are then said to be deprecated. 

My signature was created when my certificate was neither expired nor revoked and I used the recommended cryptographic algorithms. What can I be afraid of?

The problem with so-called “basic” electronic signatures is that their date of creation cannot be trusted. A signature created on a computer or server that indicates a date of 1 January 1990 will indicate that the document was signed on 1 January 1990. It is then entirely possible to include a date at the time of signing that is earlier than the actual date of signing. 

How can I trust the electronic signature if I cannot rely on its creation date?   

Most often, an electronic timestamp is added to the signature when it is created, by the signature creation software itself. These timestamps establish the proof that the signature existed at a given time. 

Now that my signature is time-stamped, does my document need anything else?  

In order to ensure the long-term validity of the document, it is also recommended to include all evidence that the signature and its timestamp were not revoked at the time of signing. This data is called revocation data and is available online at a given location, but it is very likely that it will one day no longer be available (e.g. after the supplier ceases operations). It is then recommended to include all this data in the signature while it is still available. Finally, a final timestamp is applied to ensure that the data existed at the time and to protect its integrity. 

All these signature levels are called “baseline levels” and are defined by standardisation bodies such as ETSI (European Telecommunications Standards Institute) in Europe.

Need more information on the preservation of electronic signatures? Do not hesitate to contact us at the following address: info@nowina.lu  

Author: Xavier SCHUL

The post Validation of the electronic signature: Did you know? appeared first on Nowina.