Effectiveness of electronic signatures
In accordance with international standards, the term "long term of the signature" must be established, provided that the requirements that allow it to maintain its validity and the capacity to verify it over time are met.
The verification process aims to determine:
• The integrity of the signed data ensuring that they have not undergone any modification.
• The authenticity of the certificates that have been used to sign, and
• Check that the status of the certificate with which it was signed was current at the time of signature.
Once the certificate expires or is revoked, if the signature does not include an Electronic Time Stamp, the verification of the signature will be negative, since it is not possible to determine if the certificate, when used, was valid.
To solve this problem it is necessary to include in the electronic signature information of the date of its creation (Time Stamping) and of the validity of the certificate at that moment (OCSP response). In this way, the validity of the signature is achieved beyond the validity of the certificate.
All signatures created with ANF AC approved devices are AdES (Advanced Electron Signature) XL signatures (Long Term Signature = long term signatures).
The ANF AC Re-stamping Service, in terms of electronic signatures, follows the AdES A format.
In addition to ensuring the possibility of verifying the status of the certificate over time, it is necessary to complement the process with proper storage and custody.
Electronic signature documents can not be attacked by humidity, rats, fires ... etc, but it is also necessary to make a proper storage.
We must be aware that the process of verification of a signature must be repeated years after its generation and over time, magnetic or optical media degrade, and technology inexorably advances: the keys, the algorithms that are now safe , In the future can be considered obsolete or even, the format of files has changed and we will not be able to access the information, but we have saved the necessary applications.
Manager-Website Strategy & Operations-:firstname.lastname@example.org