Integrating Secure Digital Signature with Google Docs

CoSign Digital Signature- Google Docs and SaaS Options
Daniel O’Leary
VP, Sales and Marketing, QGS
Daniel.oleary@quadralink.com
www.Twitter.com/QGS

Agenda
Intro
Technology
Google Docs
Why CoSign?
Demo
Next Steps

Who is QGS?
Mission: Bring the best ICT in the world to our partners and customers
Offices in Hanoi, Calgary, Vancouver, Los Angeles
Complete solution capabilities
Comprehensive distributor and systems integrator

ARX www.arx.com
Founded 1987
Global Presence
2,500 Customers/ 1.5M+ Signers
Integration Partners:
Microsoft
Adobe
Laserfiche

COLUMBUS
Who uses CoSign?
Manufacturing / Eng.
Life Sciences
Energy, Oil & Gas
Healthcare
Government
Financial
Other

REM Sleep Labs
Active Diagnostics
CoSign – Healthcare Client Examples

OFFICE OF THE
CHIEF MEDICAL EXAMINER

When is Digital Signature Needed?
Approvals And Authorizations
Verification Inside and/or Outside The Organization
Audit, Regulatory, And Procedural Requirements
When Your Evolution To A Paperless Environment Is Hitting The Signature Stoplight!!
Identity
Intent
Integrity

Technology
Digital Signatures guarantee…
Identity: ID is imbedded in the signed document
Intent: Combination of 2nd sign-on and Reason Code
Integrity: Data can’t change without invalidating the signature
Components:
ID Certificates
Private Key
Public Key
+
+
Document Hash
Signer ID Certificate
Signer Private Key
Document to Sign
Digital Signature
Signed Document

Why CoSign?
Turn-key Network Appliance
User Directory Integration
Portable Signature Format (CoSign PSF™)
Trusted By:

Employees
Citizens
Auditors
Partners
Suppliers

What Can You Sign?
MS (Word, Excel, Outlook, InfoPath, SharePoint)
Adobe PDF, PDF-A
Any Printable Output
Web Forms
Almost anything!

Google Docs
Alternative to traditional MS Office
Low price for developing markets
No user defined code, macros, or functions
Allows storage of PDFs
Digital Signature Solution= Omnisign by CoSign

DemonstrationLaunch YouTube HD Video

DEMO
Microsoft:
Word
Excel
Adobe:
PDF
Roaming ID
Printable output
Laserfiche Integration

International Regulations
Uniform Electronic Transactions Act (“UETA”) – 1999
A record or signature may not be denied legal effect or enforceability solely because it is in electronic form
If a law requires a signature, an electronic signature satisfies the law
Electronic Signatures in Global and National Commerce Act (“E-Sign”) – 2000:
Electronic signatures and documents are legal
Parties must agree to use eSig
EU Directive for Electronic Signatures- 2000
Requires standard digital signatures, without explicitly saying so
All EU Member States have complied as of 2003.
These Acts give legal force and effect to digital signatures

Industry Regulations
SOX
Use of eSignature recommended by:
ISO 17799
FISMA (Federal Information Security & Management Act)
FDA Title 21 CFR Part 11
Required:
User ID/ Password, Date, Reason
Password Aging
Technical Link
Information displayed when record viewed or printed
Optional:
Evidence of Tampering
Graphical Representation
Independent Verifiability

Best Practices
An Electronic/Digital Signature Should:
Identify the Signer
Be Uniquely Linked to the Signer
Be Attached to, (or Logically Associated With), Signed Information
Be Created Using Means the Signer Maintains Under His/Her Control
Be Verifiable by Anyone at Anytime
Easily Detect Any Changes to Signed Content
All Delivered With CoSign

The CoSign Appliance Architecture
Login auth.
User Directory
End-User
Signature sent back to application
Keys’ lifecycle in sync with user management
Document Hash sent securely
Snap-In for Microsoft Management Console (MMC)
Administrator
GraphicalSignatures
Private Keys Repository
Built-in CA

CoSign Signature API - SAPI
Digital Signature Support for Applications & Systems
Functionality includes:
Sign/Validate Signatures Within Supported Applications
Sign/Validate a Single File or Data Buffer
Batch Sign Multiple Files
Enumerate/Manage Certificates
Add Graphical Signatures
Manage Users
Delivered as:
Static Library
COM DLL Object
Web Services Module

Next Step- Personalized Demonstrationvisit www.quadralink.com
Daniel O’Leary
VP, Sales and Marketing
Daniel.oleary@quadralink.com
www.Twitter.com/QGS