Think twice before you
sign again!
Are Digital or Electronic Signatures in your future?
Agenda for today
 Develop a deeper understanding of the two technologies and how they differ?
 Is On Prem or SaaS the best model for my organization?
 There is a clear return on investment by adopting digital and/or electronic
signatures. Attend the webinar and we'll send you white papers and ROI tools.
 Where in my organization can I use this type of solution and improve business
processes?
 See live demos of both technologies and ask questions.
Digital Signatures Demystified:
defined, defensible, & deployable
Document Integrity
Confirmed
Document Tamper
Detected
Realty is…
An Electronic signature could be nothing more
 than your name on an email
 An image of your traditional signature
 A biometric signature
 Application based digital signature
 PKI based digital signature
What is a Digital Signatures?
Digital Signatures are the most secure, most advanced form of an
electronic signature.
What is an Electronic Signature?
Electronic signature can be something as simple as
“check this box” to accept/approve like we see on the
internet, it can also be an image/copy of someone’s
signature applied to a document.
Evidence: Authenticates a writing by identifying the signer with the
signed document. When the signer makes a mark in a distinctive
manner, the writing becomes attributable to the signer.
Ceremony: The act of signing calls to the signer's attention the legal
significance of the signer's act, and thereby helps prevent
"inconsiderate engagements”.
Approval: In certain contexts defined by law or custom, a signature
expresses the signer's approval or authorization of the writing, or the
signer's intention that it have legal effect.
Efficiency and logistics: A signature on a written document often
imparts a sense of clarity and finality to the transaction and may lessen
the subsequent need to inquire beyond the face of a document.
Deterrence: To discourage transactions of doubtful utility.
What A Signature Accomplishes
Security – The signer is the only one who could have signed
Integrity – What was signed has not been altered between
point A and B
Non Repudiation – Connects a signer in a way that prevents
denying the agreement
Authenticity – the signature can be authorized by a secure
process
Enforceability – the signatures must be verifiable by relying
parties
What Must Be Achieved
Is it legal in Canada?
Uniform Electronic Commerce Act
• Electronic Signature: "information in electronic form that a person,
directly or through an agent, associates with an electronic document
for the purpose of establishing a connection between the electronic
document and the person.“
• Effect of Electronic Signature
"A requirement under [enacting jurisdiction] law for the signature of a
person is satisfied by an electronic signature if:
(a) the electronic signature is reliable for the purpose of identifying the
person, in the light of all the circumstances, including any relevant
agreement and the time the electronic signature was made; and
(b) the association of the electronic signature to the relevant electronic
document is reliable for the purpose for which the electronic document
was made, in the light of all the circumstances, including any relevant
agreement and the time the electronic signature was made."
Canada Evidence Act
2000 Amendment on Authentication of Electronic Documents
• 31.1 Any person seeking to admit an electronic document as evidence has
the burden of proving its authenticity by evidence capable of supporting a
finding that the electronic document is that which it is purported to be.
• 31.3 The integrity of an electronic documents system is proven:
a) by evidence that the computer system was operating properly;
b) if the electronic document was recorded or stored by a party who is
adverse in interest to the party seeking to introduce it; or
c) if the electronic document was recorded or stored in the usual and
ordinary course of business by a person who is not a party and who
did not record or store it under the control of the party seeking to
introduce it.
Electronic Records as Documentary Evidence
Canadian General Standards Board - CAN/CGSB-72.34-2005
• Owner of e-record needs to prove the reliability of the system used to
create/maintain the record
• Reliability is shown by demonstrating use of system in normal course of
Business
• Compliance with the standard is not mandatory.
• Compliance with the standard is a safe harbour, not a guarantee of any
legal result.
• The standard is a statement of best practices.
Best Practices
E-Signature
• Is adopted by Clear process for capture of intent and can be attributed to signer
• Is linked to signed record
E-Record
• Single, reliable business record with evidence of signature
• Accurate presentation and review of documents
• WYSWYS – link between review and signatures
• Electronic records can be accurately reproduced at later dates
• Available and accessible to all parties
E-Transaction
• Controlled process ensures compliance with laws, regulations
• Creates secure audit trails of entire process
• Electronic evidence can be easily reproduced or played back
Digital Signatures Demystified:
defined, defensible, & deployable
The vendor landscape
Forrester Wave™: E-Signature, Q3 ’12
Here’s why you want signatures
We do know paper is too expensive!
Before
Source: AIIM 2013 Survey
After
What documents attract a signature
But is cost our only concern?
 Security
 Compliance
 Speed
 Productivity
 ROI
Did you ever ROI pens, paper, file cabinets?
What other concerns are there?
Source: AIIM 2013 Survey
Pricing
 On Premise
 Hardware
 Software
 Deployment
 Integration (ECM and Back office)
 training
 Cloud/saas
 No hardware
 Software web based
 Deployment
 Integration
 training
Pricing Model
TIME
COST
Cloud
On
Premise
Pricing assumption model
On prem - 100 users
 $33,000.00 1st year
 Yr. 2 costs - $5000.00
Cloud – 100 users
 $24,000.00 1st year and
subsequent years
 Yr. 2 costs $24,000.00
Despite the business benefits reported by existing users, digital signature projects are
not given a high priority within IT departments.
Elsewhere in the business, non-familiarity with the technology and a reluctance to
change time-honored ways of working are given as barriers to adoption.
Convenience and simplicity of both use and administration are obvious factors here.
We have seen that those intending to purchase a digital signature system are also
looking for it to be easily integrated into their ECM system.
Source: AIIM 2013 Survey
Solutions we’ll demo today
What’s in the CoSign System?
 Signature pad
 2 blue MiniKeys (backup), 1 red MiniKey
(license)
 Serial Cable (RS-232A) and a USB-to-Serial
adapter
 Installation CD
 Documentation, MSIs
 CoSign Central Enterprise appliance
Any signature is based on trust in the signor's
identity and the process by which it is invoked
The process must have a policy behind it
Trust is not inherent in any technology
Technology must be used in a trustworthy manner
in order to establish trusted systems
Even a system that is being used in a trustworthy
manner is ineffective if we cannot prove its
reliability
Future transactions that cannot be fully reduced to
paper
In the End- Keep In Mind!
About Process Fusion Inc.
Thank you for attending
 For more information:
 bmartin@processfusion.ca
 or 905-813-5547

Think twice before you sign again!

  • 1.
    Think twice beforeyou sign again! Are Digital or Electronic Signatures in your future?
  • 2.
    Agenda for today Develop a deeper understanding of the two technologies and how they differ?  Is On Prem or SaaS the best model for my organization?  There is a clear return on investment by adopting digital and/or electronic signatures. Attend the webinar and we'll send you white papers and ROI tools.  Where in my organization can I use this type of solution and improve business processes?  See live demos of both technologies and ask questions.
  • 3.
    Digital Signatures Demystified: defined,defensible, & deployable Document Integrity Confirmed Document Tamper Detected
  • 4.
    Realty is… An Electronicsignature could be nothing more  than your name on an email  An image of your traditional signature  A biometric signature  Application based digital signature  PKI based digital signature
  • 5.
    What is aDigital Signatures? Digital Signatures are the most secure, most advanced form of an electronic signature. What is an Electronic Signature? Electronic signature can be something as simple as “check this box” to accept/approve like we see on the internet, it can also be an image/copy of someone’s signature applied to a document.
  • 6.
    Evidence: Authenticates awriting by identifying the signer with the signed document. When the signer makes a mark in a distinctive manner, the writing becomes attributable to the signer. Ceremony: The act of signing calls to the signer's attention the legal significance of the signer's act, and thereby helps prevent "inconsiderate engagements”. Approval: In certain contexts defined by law or custom, a signature expresses the signer's approval or authorization of the writing, or the signer's intention that it have legal effect. Efficiency and logistics: A signature on a written document often imparts a sense of clarity and finality to the transaction and may lessen the subsequent need to inquire beyond the face of a document. Deterrence: To discourage transactions of doubtful utility. What A Signature Accomplishes
  • 7.
    Security – Thesigner is the only one who could have signed Integrity – What was signed has not been altered between point A and B Non Repudiation – Connects a signer in a way that prevents denying the agreement Authenticity – the signature can be authorized by a secure process Enforceability – the signatures must be verifiable by relying parties What Must Be Achieved
  • 9.
    Is it legalin Canada?
  • 11.
    Uniform Electronic CommerceAct • Electronic Signature: "information in electronic form that a person, directly or through an agent, associates with an electronic document for the purpose of establishing a connection between the electronic document and the person.“ • Effect of Electronic Signature "A requirement under [enacting jurisdiction] law for the signature of a person is satisfied by an electronic signature if: (a) the electronic signature is reliable for the purpose of identifying the person, in the light of all the circumstances, including any relevant agreement and the time the electronic signature was made; and (b) the association of the electronic signature to the relevant electronic document is reliable for the purpose for which the electronic document was made, in the light of all the circumstances, including any relevant agreement and the time the electronic signature was made."
  • 12.
    Canada Evidence Act 2000Amendment on Authentication of Electronic Documents • 31.1 Any person seeking to admit an electronic document as evidence has the burden of proving its authenticity by evidence capable of supporting a finding that the electronic document is that which it is purported to be. • 31.3 The integrity of an electronic documents system is proven: a) by evidence that the computer system was operating properly; b) if the electronic document was recorded or stored by a party who is adverse in interest to the party seeking to introduce it; or c) if the electronic document was recorded or stored in the usual and ordinary course of business by a person who is not a party and who did not record or store it under the control of the party seeking to introduce it.
  • 13.
    Electronic Records asDocumentary Evidence Canadian General Standards Board - CAN/CGSB-72.34-2005 • Owner of e-record needs to prove the reliability of the system used to create/maintain the record • Reliability is shown by demonstrating use of system in normal course of Business • Compliance with the standard is not mandatory. • Compliance with the standard is a safe harbour, not a guarantee of any legal result. • The standard is a statement of best practices.
  • 14.
    Best Practices E-Signature • Isadopted by Clear process for capture of intent and can be attributed to signer • Is linked to signed record E-Record • Single, reliable business record with evidence of signature • Accurate presentation and review of documents • WYSWYS – link between review and signatures • Electronic records can be accurately reproduced at later dates • Available and accessible to all parties E-Transaction • Controlled process ensures compliance with laws, regulations • Creates secure audit trails of entire process • Electronic evidence can be easily reproduced or played back
  • 15.
  • 16.
    The vendor landscape ForresterWave™: E-Signature, Q3 ’12
  • 17.
    Here’s why youwant signatures
  • 20.
    We do knowpaper is too expensive!
  • 21.
  • 22.
    Source: AIIM 2013Survey After
  • 23.
  • 24.
    But is costour only concern?  Security  Compliance  Speed  Productivity  ROI Did you ever ROI pens, paper, file cabinets?
  • 25.
    What other concernsare there? Source: AIIM 2013 Survey
  • 26.
    Pricing  On Premise Hardware  Software  Deployment  Integration (ECM and Back office)  training  Cloud/saas  No hardware  Software web based  Deployment  Integration  training
  • 27.
  • 28.
    Pricing assumption model Onprem - 100 users  $33,000.00 1st year  Yr. 2 costs - $5000.00 Cloud – 100 users  $24,000.00 1st year and subsequent years  Yr. 2 costs $24,000.00
  • 29.
    Despite the businessbenefits reported by existing users, digital signature projects are not given a high priority within IT departments. Elsewhere in the business, non-familiarity with the technology and a reluctance to change time-honored ways of working are given as barriers to adoption. Convenience and simplicity of both use and administration are obvious factors here. We have seen that those intending to purchase a digital signature system are also looking for it to be easily integrated into their ECM system. Source: AIIM 2013 Survey
  • 30.
  • 33.
    What’s in theCoSign System?  Signature pad  2 blue MiniKeys (backup), 1 red MiniKey (license)  Serial Cable (RS-232A) and a USB-to-Serial adapter  Installation CD  Documentation, MSIs  CoSign Central Enterprise appliance
  • 34.
    Any signature isbased on trust in the signor's identity and the process by which it is invoked The process must have a policy behind it Trust is not inherent in any technology Technology must be used in a trustworthy manner in order to establish trusted systems Even a system that is being used in a trustworthy manner is ineffective if we cannot prove its reliability Future transactions that cannot be fully reduced to paper In the End- Keep In Mind!
  • 35.
  • 36.
    Thank you forattending  For more information:  bmartin@processfusion.ca  or 905-813-5547