adobe and cloud-based signatures - etsi
TRANSCRIPT
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Leonard Rosenthol | PDF Architect • Principal Scientist Adobe and Cloud-based Signatures
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Adobe EchoSign: Securely sign, send & archive contracts via the Web
§ Ease of use
§ Simple, quick, entirely web-based solution
§ Real-time visibility into the entire process
§ 10x be!er than the alternative – paper, fax, email
§ Works the way you want – 1000s of work"ows, options & features
§ Highly customizable to #t your business needs
§ Always gets the job done – any scenario, anytime, anywhere
§ Ubiquitous
§ Send, track & #le from wherever your documents are created or stored
§ Pre-built integrations into CRM, Contract Management & Document Management systems
2
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Acceleration
Game Changing Bene#ts of eSignatures & Web Contracting
Icons for each of the three pillars – Agility, Acceleration
and Trust
Agility Trust
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Acceleration
4
Handshake Close Deals Faster 43 minutes vs. 5 calendar days
Any Language • Any Device Any Place
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Agility
5
Something that shows “ease of access” with clouds?
• Easy to Deploy a Cloud-based Solution
• Seamlessly Mirror Your Existing Process
• Integrates With Your Existing Systems
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Trust
6
• Legally Enforceable
• Your Documents are in a Secure Cloud
• Vendor Stability
© 2013 Adobe Systems Incorporated. All Rights Reserved.
EchoSign “Work"ow” Diagram
Application Server
Cryptographic Hardware (HSM) Database/Storage Document Processors
Web Server/UIMobile Clients Acrobat/Reader
Documents Users/Groups “Trust”
8
© 2013 Adobe Systems Incorporated. All Rights Reserved.
EchoSign and Signatures
§ Started life doing strictly non-certi!cate-based signatures
§ Graphical representations
§ Email addresses as “identity”
§ $e system provides the “trust”
§ Recently adopted support for Certi!ed Documents
§ Signs the PDF with a PAdES-compliant certi#cate-based signature
§ $e certi#cate is issued by Adobe on behalf of EchoSign
§ User sees the “Blue Bar”
§ Next step – allow for certi!cate-based signing by users
9
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Biggest problem with signing in the cloud…
§ How to obtain the user’s certi!cate in a reliable & secure manner?
10
© 2013 Adobe Systems Incorporated. All Rights Reserved.
(Re-)Introducing Adobe Signature Service Protocol (ASSP)
§ Used between a User Agent/Client and one or more servers (Enrollment, Credential and/or Signing)
§ Supports: § Credential enrollment
§ Credential request and retrieval
§ For client-side signing or veri#cation using the credential
§ Signature request and retrieval
§ For server-side signing (using a speci#ed credential)
§ Decrypting a RecipientInfo encrypted data block
§ For opening a PDF that has been encrypted with Certi#cate encryption
11
© 2013 Adobe Systems Incorporated. All Rights Reserved.
Deployment of ASSP
§ Co-developed in 2005-2006
§ between Adobe and various partners
§ Adobe Acrobat & Reader 8 and later (clients)
§ Over a dozen companies offer compatible server implementations
13
© 2013 Adobe Systems Incorporated. All Rights Reserved.
ASSP Futures?
§ Adobe would like to propose turning over ASSP to ETSI/ESI for development as an open standard to address some of the issues raised today.
14