Top Banner
© 2017 Adobe Systems Incorporated. All Rights Reserved. Moving Digital Signatures into the Cloud A Webinar for Trust Service Providers
52

Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

Apr 02, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Moving Digital Signatures into the CloudA Webinar for Trust Service Providers

Page 2: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 2

Thank you partners!Together, we process billions of signature

transactions every year!

Page 3: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 3

Agenda

• The Experience vs Compliance Challenge

• Adobe Document Cloud and Cloud Signatures

• Cloud Signature Consortium

• Moving Digital IDs into the Cloud

• Q&A

Page 4: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Adobe Strategy

DRIVEDIGITAL TRANSFORMATION

OF INDUSTRIES

ADVANCESTATE OF THE ART

FOR CONTENT

POWEREXPERIENCE

WITH INTELLIGENCE

Page 5: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

EXPERIENCESMATTER MORE THAN EVER

Page 6: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

BUT

COMPLIANCEIS NON-NEGOTIABLE

Page 7: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 7

Together, we built the first digital signature standard for PDF.

1B Acrobat Reader desktops Meeting today’s most rigorous

compliance requirements

And now, it’s time for a new standard on mobile and web.

Page 8: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Adobe and the Cloud Signature Consortium are leading the way toward an open standard for cloud-based digital signatures that will:

• Bring secure signatures to 7 billion mobile devices, web apps• Improve the customer experience• Accelerate business• Expand worldwide adoption of digital signature

The CSC specification is a candidate for contribution to the ETSI remote signature standard development project.

Page 9: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 9

Adobe Document Cloud and Cloud Signatures

Page 10: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 10

WEB AND MOBILE APPS

INTEGRATIONS

ACROBAT DC

ADOBE SIGN

Adobe Document Cloud

Deliver stand-out digital experiences by making manual, paper-based processes fully digital

ACROBAT READER DC

Page 11: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 11

DEMO

Page 12: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 12

Adobe Sign makes it easy to send documents for

signature.

Page 13: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 13

Drag and drop to add form and signature fields

to the layout before sending a document.

Page 14: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Signers get an email and click on a link to sign in a browser on any device. Andrea Valle Has Sent

you direct-deposit to sign.

14

Page 15: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 15

Signers are guided to complete the form and click the signature field

to begin signing.

Page 16: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 16

Choose to sign on any device with a Cloud

Signature.

Or, download and sign with free Acrobat

Reader software and a USB token or smart

card.

Page 17: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 17

Adobe Sign works with leading digital ID

providers. Recipients pick their provider to

begin signing.

Page 18: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 18

Signers authenticate with their provider.

Optionally - this experience can be

replaced with a corporate identity login

or Single-Sign-On.

Page 19: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 19

It’s possible to have more than one digital ID.

Signers pick one to use.

Page 20: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 20

Adobe Sign lets you preview the signature and add a reason for

signing.

Page 21: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 21

Signers click to finalize the appearance of the

signature in the document.

.

Page 22: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 22

142296

To validate the signer’s identity with high

assurance, Adobe Sign requests a unique PIN,

plus One-Time Passcode.

This method may vary depending upon the

Trust Service Provider’s unique requirements.

1 4 2 2 9 6

• • • • • • • •

Page 23: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 23

It’s easy to download a copy of the signed

document.

Final documents are distributed to all parties

automatically.

Page 24: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 24

Final documents are certified with a tamper-

evident seal.

Signatures are checked and validated when displayed in Adobe

Acrobat Reader software.

Page 25: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 25

The Audit Report shows each step taken during

the signing process.

Page 26: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 26

Cloud Signature Consortium

Page 27: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Advancing the Digital Signature Landscape

Secure transactions, on the go

Cloud storage, no downloads

Simple certificate ownership

Easy deployment for end users

Page 28: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

CertificationAuthority

28

Cloud Signatures are created through multi-user HSM as a centralized signature device hosted by a Trust Service Provider. They offer a secure access to applications via multi-factor strong authentication.

Multi-factor Strong Authentication Server

C Authorization

Multi-key HSM

A Notification

B Authentication

D SignatureCreation

X PrivateKeygeneration

1 SignDocument

7 DocumentWithSignature

2 CalculateDigest

3 SignDigestWithKeyN

4 DigestSignWithKeyN

5 SignatureObject

6 SignatureProcess

AATL/EUTL

Architecture of a Cloud Signature Service

Page 29: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Specifications

29

Supports the most demanding digital signature standards like ETSI and CEN Web services API based on REST and JSON. Modern and easy.

Support the broadest range of requirements, in the EU and beyond.

Compliant services provide self discovery Designed to support modular services in line with the mission/capacity of the provider.

Services may implement only a particular subset of the API methods. Clients can discover the supported APIs.

Complete support for client and user authentication Covers any contexts: cloud and on premise services, desktop and mobile apps.

Supports password-based, OAuth, SAML, Open-ID Connect, SSO, federated authentication.

Flexible support for credential authorization mechanisms Static PIN, synchronous and asynchronous OTP, OAuth, SAML, Biometric, etc.

Multi-Factor-Authorization can be obtained by combining multiple mechanisms.

V1 Specification covers architectures, protocols and API for Remote Signature creation. Flexible hash-based signature API

Page 30: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 30

CSC Standardization Roadmap

Signature creation services

Signature validation services

Certification enrollment services

Gateway services for personal and mobile signature devices

Long Term Preservation and archiving services

Notarization services

Electronic Registered Delivery services

Next Steps

Page 31: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 31

Moving Digital Signatures into the Cloud

Page 32: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

1 2 3

Taking Action

Evaluate your options. • Build? • Buy?• Partner?

Work with industry-leading Adobe applications.

Adopt the Cloud Signature Consortium

specifications.

Page 33: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

1

Taking Action

Adopt the Cloud Signature Consortium

specifications.

Get the technical specificationshttp://www.cloudsignatureconsortium.org/specifications

Join the Cloud Signature [email protected]

Page 34: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

2Work with industry-

leading Adobe applications.

Taking Action

Join the Adobe Cloud Signature Partner programhttps://acrobat.adobe.com/us/en/why-adobe/cloud-signature-partners-program.html

Sign up for the Cloud Signature Previewhttps://adobe.allegiancetech.com/cgi-bin/qwebcorporate.dll?idx=K5AGJ4

Page 35: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Partnering with Adobe

Work with the global leader

Reach 1B devices through Acrobat Reader

Work with Adobe Sign. Clear market leader, per Forrester*

Get in-product visibility for your cloud signature offering

We’re not in the digital ID business. You are!

* Vendor Landscape: E-signatures , Q4 2016 – Forrester Research

Page 36: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

3Evaluate your options.

• Build? • Buy?• Partner?

Taking Action

Cloud Signature Consortium Technology Providers

Intesi Grouphttp://www.intesigroup.com/en

Intarsyshttp://www.intarsys.de/

Page 37: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 37

Intesi Group: a Technology provider

Tech Different!Unconventional thought, innovative proposals and innovative solutions that will transform the market of logical security, digital signature and encryption.

Cloud Platform• 2 million signatures

per month• 1 million active users

On Premise• > 10 million certificates• 0 downtime• Up to 500 signatures

per sec

Page 38: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 38

Intesi Group: a Technology provider

2009 First Remote Signature project in Italy 2011 IdenTrust certification 2015 Qualified Secure Signature Creation

Device 2016 Gartner Electronic Signature Market

Guide 2017 Intesi Group Cloud Signature

integrated in Adobe Document Cloud

Page 39: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 39

Intesi Group offering

On-Premise infrastructure

• Qualified SSCD

• CSC compliant

• CA independent

• Scalable performance

• Business continuity

• Simple Integration

• Multi OTP provider

• Electronic Signature/Strong

Authentication/Encryption

Cloud services

• Based on PkSuite products

• Transparent migration to on premise

infrastructure

• Multi CA connectors

• High availability (Multi site installation)

• Web portals

• Mobile Apps

• OEM offer

• No initial investment

• Fast adoption

Page 40: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 40

DIGITAL ID ENROLLMENT

Page 41: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 41

Page 42: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 42

- - -- - -

Page 43: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 43

Page 44: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 44

_ _ _ + VAT

Page 45: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 45

Page 46: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 46

Page 47: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 47

Qualified Cloud SignatureIntesi Group

ENROLL CERTIFICATE

Valid

Page 48: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 48

Page 49: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

1 2 3

Taking Action

Evaluate your options. • Build? • Buy?• Partner?

Work with industry-leading Adobe applications.

Adopt the Cloud Signature Consortium

specifications.

Page 50: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved.

Partnering with Adobe

Work with the global leader

Reach 1B devices through Acrobat Reader

Work with Adobe Sign. Clear market leader, per Forrester*

Get in-product visibility for your cloud signature offering

We’re not in the digital ID business. You are!

* Vendor Landscape: E-signatures , Q4 2016 – Forrester Research

Page 51: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2017 Adobe Systems Incorporated. All Rights Reserved. 51

Thank you!

Page 52: Moving Digital Signatures into the Cloud - Adobe Acrobat · 2020-03-11 · Cloud Signatures are created through multi -user HSM as a centralized signature device hosted by a Trust

© 2016 Adobe Systems Incorporated. All Rights Reserved. Adobe Confidential.52