PAdES signatures in iText and the road aheadiText Group nv
iText Summit 2012, talk by Paulo Soares. Note that the plans that are discussed in these slides were already implemented. See also http://itextpdf.com/book/digitalsignatures
These are the slides that were be presented at a GlobalSign customer event in Leuven on September 16, 2014. In my talk, I explained why digital signatures are important. I introduced the audience to the basic concepts used when signing documents and showed how these concepts are used in the context of PDF. Furthermore, I discussed different architectures to implement a digital signature solution, as well as how digital signatures can be used in a workflow and how we can create digital signatures for the long term.
WSO2 Guest Webinar: FIDO Universal Second Factor (U2F) for WSO2 Identity ServerYenlo
Hackers and crackers are exposing the password as the Internet’s weakest security link. To combat these attacks, organizations need to ensure that access to online information is protected and restricted to authorized users, and diminish the reliance on passwords.
Join us as we detail a new security feature in WSO2 Identity Server (5.1.0) by enhancing account security with the FIDO Alliance’s U2F public key cryptography specification for strong authentication.
In this webinar, WSO2, Yubico co-creator of U2F, and WSO2’s premier integrator Yenlo explain the technology, discuss the use cases for strong authentication, and demonstrate the power and ease-of-use of the U2F security key. WSO2 will present the Authentication framework of WSO2 Identity server, Multi factor and Multi step authentication configuration and more.
See the recording of the WSO2 Identity Server webinar here: http://www.yenlo.com/en/web-wso2-identity-server-fido
PAdES signatures in iText and the road aheadiText Group nv
iText Summit 2012, talk by Paulo Soares. Note that the plans that are discussed in these slides were already implemented. See also http://itextpdf.com/book/digitalsignatures
These are the slides that were be presented at a GlobalSign customer event in Leuven on September 16, 2014. In my talk, I explained why digital signatures are important. I introduced the audience to the basic concepts used when signing documents and showed how these concepts are used in the context of PDF. Furthermore, I discussed different architectures to implement a digital signature solution, as well as how digital signatures can be used in a workflow and how we can create digital signatures for the long term.
WSO2 Guest Webinar: FIDO Universal Second Factor (U2F) for WSO2 Identity ServerYenlo
Hackers and crackers are exposing the password as the Internet’s weakest security link. To combat these attacks, organizations need to ensure that access to online information is protected and restricted to authorized users, and diminish the reliance on passwords.
Join us as we detail a new security feature in WSO2 Identity Server (5.1.0) by enhancing account security with the FIDO Alliance’s U2F public key cryptography specification for strong authentication.
In this webinar, WSO2, Yubico co-creator of U2F, and WSO2’s premier integrator Yenlo explain the technology, discuss the use cases for strong authentication, and demonstrate the power and ease-of-use of the U2F security key. WSO2 will present the Authentication framework of WSO2 Identity server, Multi factor and Multi step authentication configuration and more.
See the recording of the WSO2 Identity Server webinar here: http://www.yenlo.com/en/web-wso2-identity-server-fido
Answering all of your questions about FIDO Certification, including: what is FIDO certification?, types of certification, meta data service, security certification and the value of deploying certified solutions.
A Code Signing Certificate is a digital signature technology allows authorized software publishers to sign their software code, script and content to authenticate their identification over internet.
DigiCert EV Code Signing Certificate Feature and BenefitsCodeSigningStore
Slide by Slide explanation of features and benefits of DigiCert EV Code Signing Certificate. Know why DigiCert is the perfect option to sign the software/application codes and scripts.
Digital Signatures in the Cloud: A B2C Case StudyiText Group nv
If you are a solution architect, or a business strategist new to digital signatures, this webinar will give you an overview of the components needed to build an end-to-end digital signature solution in-house, including PDF document workflows and document signing certificates.
Connective Digital Signature solution offers a fully integrated, eIDAS compliant way to place digital signatures on any document.
With a vast array of signing methods, supported browsers and supported operating systems, Connective has the most ergonomic and best customer experience in the field of eSignatures.
Docuten Webinar: Get ready for your vacations with the digital signature inte...Innova Advanced Consulting
Docuten is an easy to use SaaS platform that promotes the digital transformation of the entire business cycle in any SME. Its main objective is to offer digital solutions that increase the productivity and generate a rapid and efficient workflow. With its solution of digital signature, your clients will be able to send to sign and sign all type of documents in a legal and secure way, complying with the European digital regulations such as elDAS. Since it is a very easy-to-use tool and the user can utilize it remotely, it’s the perfect solution to teleworking.
Docuten is a tool involving different subject areas allowing the user to employ the solution in a website or in Microsoft Dynamics 365 Business Central, Microsoft Dynamics Finance & operations, Navision and AX.
In this webinar, we will thoroughly see Docuten, as well as all its connection possibilities and we will clear all the doubts or questions you may have.
AGENDA:
✅ Docuten’s introduction
✅ Usage
✅ Demo
✅ Questions and doubts
This webinar will be conducted by Juan Contreras from Innova Advanced Consulting.
Las organizaciones necesitan evolucionar más allá del nombre de usuario y contraseña básico y asegurar las transacciones en línea con un abanico de opciones de autenticación segura.
OpenID for Verifiable Credentials is a family of protocols supporting implementation of applications with Verifiable Credentials, i.e. verifiable credential issuance, credential presentation, and pseudonyms authentication.
Answering all of your questions about FIDO Certification, including: what is FIDO certification?, types of certification, meta data service, security certification and the value of deploying certified solutions.
A Code Signing Certificate is a digital signature technology allows authorized software publishers to sign their software code, script and content to authenticate their identification over internet.
DigiCert EV Code Signing Certificate Feature and BenefitsCodeSigningStore
Slide by Slide explanation of features and benefits of DigiCert EV Code Signing Certificate. Know why DigiCert is the perfect option to sign the software/application codes and scripts.
Digital Signatures in the Cloud: A B2C Case StudyiText Group nv
If you are a solution architect, or a business strategist new to digital signatures, this webinar will give you an overview of the components needed to build an end-to-end digital signature solution in-house, including PDF document workflows and document signing certificates.
Connective Digital Signature solution offers a fully integrated, eIDAS compliant way to place digital signatures on any document.
With a vast array of signing methods, supported browsers and supported operating systems, Connective has the most ergonomic and best customer experience in the field of eSignatures.
Docuten Webinar: Get ready for your vacations with the digital signature inte...Innova Advanced Consulting
Docuten is an easy to use SaaS platform that promotes the digital transformation of the entire business cycle in any SME. Its main objective is to offer digital solutions that increase the productivity and generate a rapid and efficient workflow. With its solution of digital signature, your clients will be able to send to sign and sign all type of documents in a legal and secure way, complying with the European digital regulations such as elDAS. Since it is a very easy-to-use tool and the user can utilize it remotely, it’s the perfect solution to teleworking.
Docuten is a tool involving different subject areas allowing the user to employ the solution in a website or in Microsoft Dynamics 365 Business Central, Microsoft Dynamics Finance & operations, Navision and AX.
In this webinar, we will thoroughly see Docuten, as well as all its connection possibilities and we will clear all the doubts or questions you may have.
AGENDA:
✅ Docuten’s introduction
✅ Usage
✅ Demo
✅ Questions and doubts
This webinar will be conducted by Juan Contreras from Innova Advanced Consulting.
Las organizaciones necesitan evolucionar más allá del nombre de usuario y contraseña básico y asegurar las transacciones en línea con un abanico de opciones de autenticación segura.
OpenID for Verifiable Credentials is a family of protocols supporting implementation of applications with Verifiable Credentials, i.e. verifiable credential issuance, credential presentation, and pseudonyms authentication.
An important part of eIDAS is to regulate electronic signature and ensure safe transactions online. By providing qualified electronic signature, Trust Service Providers allow both signatory and recipient a higher level of convenience and security. Use this guide to understand and navigate the regulation goals and benefits.
Who are you? Authentication by certificatesteam-WIBU
Digital certificates have proved their worth as a strong means of authentication for decades. With IIoT taking center stage in industrial automation, machines need to be identified securely as well to stop illicit users or systems from sneaking in and potentially wreaking havoc in networks. X.509 certificates, coupled with communication protocols like OPC UA and hardware-based safe storage solutions like CmDongles, are ideal choices to meet the challenges of today.
Watch the webinar: https://youtu.be/E66Nvrjcwkw
IANAL: what developers should know about IP and LegaliText Group nv
These are the slides of the Java One talk by Bruno Lowagie on Wednesday October 28 at 10 AM in Imperial Ballroom A at the Hilton in San Francisco.
Bruno will discuss topics such as open source licenses, intellectual property, trademarks and software patents. Bruno isn't a lawyer, but he'll share his experience with legal issues as a developer.
In this presentation, you get an overview of what ZUGFeRD, a standard for e-invoices developed by the Forum elektronische Rechnung Deutschland is about. We look at XML standards for business, at PDF standards for archiving and we learn how ZUGFeRD combines both. We also look beyond ZUGFeRD at standards for digital signing.
iText Summit 2014: Talk: iText throughout the document life cycleiText Group nv
iText throughout the document life cycle
By Klaas Bals, Inventive Group
iText can be used in virtually any step in the document life cycle. During this talk we will show you how we use a WYSIWYG editor to design, create, transform, sign and store PDF-files with iText and how it brings value to customers like the Belgian Federal Department of Finance, The city of Antwerp, Johnson&Johnson, and the National Pensions Office.
iText Summit 2014: Talk: eGriffie and JustX, introducing digital documents at...iText Group nv
Templates for PDF
iText strategies for the mass production of documents based on templates: two user stories presented by iText customers.
There are different ways to create high volumes of PDF:
- You can create the PDFs from scratch (the program is the template)
- You can fill out PDF forms based on AcroForm technology (the template is static)
- You can use an XML-based format as a template (XSL:FO, XHTML and CSS, custom XML)
- You can use a dynamic XFA form (the XML Forms Architecture)
In this session, we will give the floor to two of our customers, one that uses the core iText to create documents, one that uses XFA Worker, a tool built on top of iText.
Project for Governement: creating PDF using the XML Forms Architecture
By Pieter Robberechts, CSC
CSC has developed applications to automate Belgian Governmental tasks, more specifically Juridical tasks that are time consuming and error sensitive because of human input.
The fully automated 'E-griffie’ application renders juridical and legal forms, injecting XML into dynamic XFA templates that are then flattened into PDF/A documents using iText. Another application, JustX is an authentic Source Judgement Database to streamline information.
Damn, the new generation kids are getting iPads in Highschool!iText Group nv
A Google App Engine platform connected to a native iPad solution distributing books and content, presented at the iText Summit 2012 by Kars Veling, Owner Q42 Internet BV.
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
JMeter webinar - integration with InfluxDB and GrafanaRTTS
Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application.
In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics.
Length: 30 minutes
Session Overview
-------------------------------------------
During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana:
- What out-of-the-box solutions are available for real-time monitoring JMeter tests?
- What are the benefits of integrating InfluxDB and Grafana into the load testing stack?
- Which features are provided by Grafana?
- Demonstration of InfluxDB and Grafana using a practice web application
To view the webinar recording, go to:
https://www.rttsweb.com/jmeter-integration-webinar
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...Jeffrey Haguewood
Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows.
We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases.
This video focuses on the notifications, alerts, and approval requests using Slack for Bonterra Impact Management. The solutions covered in this webinar can also be deployed for Microsoft Teams.
Interested in deploying notification automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.
Essentials of Automations: Optimizing FME Workflows with ParametersSafe Software
Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place.
Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects.
Here’s what you’ll gain:
- Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows.
- Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy.
- Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency.
- Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity.
We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic.
Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to:
Create a campaign using Mailchimp with merge tags/fields
Send an interactive Slack channel message (using buttons)
Have the message received by managers and peers along with a test email for review
But there’s more:
In a second workflow supporting the same use case, you’ll see:
Your campaign sent to target colleagues for approval
If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team
But—if the “Reject” button is pushed, colleagues will be alerted via Slack message
Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors.
And...
Speakers:
Akshay Agnihotri, Product Manager
Charlie Greenberg, Host
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Best practices in Certifying and Signing PDFs
1. over 10 years of securing
identities, web sites & transactions
Best
prac*ces
in
Cer*fying
and
Signing
PDFs
Paul
van
Brouwershaven
Business
Development
Director
EMEA,
GlobalSign
@vanbroup
on
TwiEer
3. GlobalSign
History
§ Founded in 1996 by BE Chambers of Commerce,
ING Bank & Vodafone.
§ Acquired by GMO Internet Inc (ticker symbol Tokyo
PROVEN TRA
CK RECORD
Issued over 1.4
m digital
certificates / digi
tal IDs to people
,
web sites & mac
hines
Issued over 20
Stock Exchange: 9449) & re-launched in 2006 as
0,000 SSL
Certificates
true worldwide operation.
§ GMO parent to over 50 Internet technology & hosting
companies, including largest hosting company in Asia.
§ Current shareholders include Yahoo!,
Morgan Stanley & Credit Suisse.
Over 20 mil
lion certificates
worldwide rely
on the public tr
ust
provided by the
GlobalSign root
§ GlobalSign is Digital Certificate
security division of global group.
§ Web services & offline services for
provisioning Digital Certificates for
enterprise, Government, developers, hosting & Cloud services.
www.globalsign.com
4. GlobalSign
Products
|
Visible
Trust
in
an
online
world
Server, Database &
Network Security
SSL Certificates
Managed SSL
Automated SSL for
Web Hosts
SSL Reseller Program
One-Click SSL
Developer Solutions
Code Signing
Embedded SSL
Secure Email
Digital IDs for Individuals
Digital IDs for Depts
Managed Digital IDs
eDocument /File
Security & Compliance
Adobe CDS for PDF
Microsoft Office
Encrypting File System
(EFS)
PKI & Root Signing
Trusted Root for CAs
www.globalsign.com
8. Adobe
Cer*fied
Document
Services
• GlobalSign is an
authorized Adobe CDS
provider
• Web-Trust Certified,
third party Certificate
Authority
• Governed by Adobe
Certificate Policy
• Only CDS issued
digital IDs are instantly
trusted in Adobe
Reader 7.0+ (SHA-256)
www.globalsign.com
9. “Meet
or
exceed
FIPS
140-‐1
Level
2”
“Subscriber key pairs must be generated in a manner that ensures that the private key is
not known by anybody other than the Subscriber or a Subscriber’s authorized
representative. Subscriber key pairs must be generated in a medium that prevents
exportation or duplication and that meets or exceed FIPS 140-1 Level 2 certification
standard.”
www.globalsign.com
10. EV
Code
Signing
-‐
Private-‐Key
Protec*on
EV Guidelines state:
Code signing keys are to be protected by a FIPS 140-2
level 2 (or equivalent) crypto module. Techniques that may
be used to satisfy this requirement include:
§ (A) Use of an HSM, verified by means of a manufacturer’s certificate;
§ (B) A hardware crypto module provided by the CA;
§ (C) Contractual terms in the subscriber agreement requiring the
Subscriber to protect the private key to a standard equivalent to FIPS
140-2 and with compliance being confirmed by means of an audit.
www.globalsign.com
11. Adobe
Cer*fied
Document
Services
• Allows recipients of PDF documents
to know:
• who signed the document
• the content is intact
• the time the document is
signed
• Recipients only need to have the
free Adobe Reader 7.0+ (installed
on >800M computers worldwide)
Strong Authentication
Data Integrity
Non Repudiation
Recipients of
Certified PDFs
need no special
software, plugins, or special
configuration!!!
www.globalsign.com
12. Simple
and
effec*ve
GUI
Modified Unknown Certified Signed
Changed Author
Trusted
www.globalsign.com
13. Without
*me
stamping
and
CRL
Services
Certification without time stamping and
CRL Services. The validity of the signature
expires with the validity of the digital
certificate used to sign the document.
2011
2012
2013
2014
www.globalsign.com
14. What
about
revoca*on?
With a “Revocation Event” the validity of
the signature expires with the revocation of
the digital certificate.
2011
2012
2013
2014
Basic Signatures are not suitable for Long Term Validation signing (Documents)
www.globalsign.com
15. ETSI
TS
102
778
With “Services” the validity of the signature
applied to the document never expires
even if there is a revocation event.
2011
2012
2013
2014
Part 1: "PAdES Overview - a framework document for PAdES";
Part 2: "PAdES Basic - Profile based on ISO 32000-1"; (Best Practice)
Part 3: "PAdES Enhanced - PAdES-BES and PAdES-EPES Profiles";
Part 4: "PAdES Long Term - PAdES-LTV Profile";
Part 5: "PAdES for XML Content - Profiles for XAdES signatures".
www.globalsign.com
17. Electronic
Invoicing
in
the
EU
§ A constantly changing landscape
§ No single EU wide solution for
compliance*
§ Recommendations by PWC for 2013
already changing the requirements on
a country by country basis.
§ No consistent approach to preserve
authenticity and integrity for ‘Archive
and Storage Purposes’ offering the
possibility of legal recourse. (AMEX)
§
*Adobe CDS offers the only Pan European (Global) authenticity and
Integrity validation system. All other systems require a separate
system/service that is not automatic, nor guaranteed.
§ QES (Qualified Electronic
Signature)
§
Automatic legal standing in EU.
§
Issued on a SSCD
§
Generally issued from a government
root CA.
§
Not usable for Time stamping services.
§ AES /AdES) (Advanced
Electronic Signature)
§
Unique to the signatory;
§
§
Identifying the signatory;
Created using sole control;
§
Linked to the data to which it relates.
Change of the data is detectable;
The Amex legal case and subsequent lessons learnt?
http://www.legalethics.com/include/content/amex012406.pdf
www.globalsign.com
18. Electronic
Invoicing
–
Is
it
legal?
2A. Acceptance of ‘advanced e-signatures’ to send e-invoices (■ = yes / ■ = no )
2B. If yes, can AES be used without obligation to use a qualified certificate (■ = yes or not applicable / ■ = no)
2C. If yes, are qualified certificates from other EU Member States accepted (■ = yes / ■ = subject to conditions)
2D. If yes, can AES be used without obligation to use a secure signature-creation device (■ = yes / ■ = no)
2E. If yes, can the recipient process the invoice without verifying the signature (■ = yes / ■ = no)
3A. Other means than AES or EDI accepted? (■ = yes / ■ = only “other" electronic signatures / ■ = no )
3B. If yes, can other means be used without prior approval? (■ = yes / ■ = in some cases / ■ = no )
3C. Unsigned pdf invoice accepted? (■ = as an e-invoice in case authenticity and integrity are guaranteed by other means / ■
= as a paper invoice ■ = no )
Assumes VAT supply country is consistent
www.globalsign.com
20. Possible
Architecture
(e-‐Invoice)
Document Generation Engine (Content,
Layout, Storage and other specific
compliancy rules)
Application of
Digital Signature
Archive
PDF
GlobalSign
TSA
Service
To Customer
Digital Certificates
HSM
AdES
AdES
(CDS)
(CDS)
Optional
TSA (>1M)
www.globalsign.com
21. over 10 years of securing
identities, web sites & transactions
Thank you
Paul van Brouwershaven
paul.vanbrouwershaven@globalsign.com