13
fast forward 1
| Date post: | 20-Mar-2017 |
| Category: |
Software |
| Upload: | paolo-montrasio |
| View: | 48 times |
| Download: | 0 times |
fast forward
1
2
Cloud Signature Chatbot
Sign a document within a Telegram chat
Emanuele Cisbani
Technical Evangelist at Intesi [email protected]
9 March 2017
3
Cloud Signature: Step Into Digital Transformation
Agility, efficiency, cost saving, great customer experiences:
● Get documents signed in minutes, not days● Paper lifecycle cost saving● Mobile & easy user experience, as expected by people today● Legally valid and enforceable
4
eIDAS: Unified EU eSignature
● eIDAS is the base for the EU Digital Single Market
● eIDAS enforce pan-EU interoperability from 1st July 2016
● The Qualified eSignature has the equivalent legal effect as a handwritten signature
● Regulation mean mandatory adoption for all member states
● Legitimizes cloud-based signatures by removing smartcard requirements
5
Authenticity & Integrity In The Digital Era
In the digital world, it is easy to reproduce a
message. The digital identity "bits" cannot be
directly transmitted alongside the message
itself. Whoever gets hold of these aspects may
have the opportunity to act digitally on my
behalf.
6
e-Identity: Cryptographic vs. Biometric
Cryptographic identity is uniquely generated by cryptographic keys, which are securely stored inside a device.
● Provides a "native digital" identity without statistical errors
● Protects privacy● Is based on portable devices (not
necessarily connected to the network)
● Allows digital identity revocation
Biometric devices use physiological or behavioral characteristics, as in the case of fingerprints, iris scans, calligraphy, voice and face recognition.
The only advantage of biometric solutions is that you do not need to identify users in advance and they do not need to carry any particular personal device.
7
Cloud Signature Powered by Time4Mind
● Time4Mind is a platform of webAPI for Trust Services
● Time4Mind supports Advanced (AdES) and Qualified (QES) eSignatures in the EU’s eIDAS regulation.
● Time4Mind works with accredited certificate authorities (CAs) and qualified signature creation devices (QSCDs).
Adobe SignValid Sign
Driver di Stampa
Any legacyApplication
MailGateway
Cloud SignatureBOT
Time4Store
8
Cloud Signature Bot
TelegramApp
ValidApp
Trust Services
TELEGRAMChat Services
Cloud SignatureBOT
PkBox
Chat
Auth
Chat
Auth
Sign
Auth
Doc
Chat
User Cloud Application
10
Requirements
● Python3 >= 3.4.2● python libraries:
○ requests - RESTful client○ Zeep - SOAP client○ Flask - RESTful server○ python-telegram-bot - Telegram Bot API wrapper
● PkBox server to process document signatures locally (envelops)● Time4Mind ssl-client certificates to use webapi for strong authentication● signature certificates issued for your users on the Time4Mind platform
11
Possible Improved Usage Scenarios
● Signature meeting: same document signed by two or more users in a group chat
● Signature of a set of documents in one shot ● Selection of certificates to use in case you have more than one suitable● BP integration: start a signature process on other applications (i.e.: create a
folder on Valid Sign)
