Let’s start with a primer video, where we will use letter wax seals to demonstrate what a digital signature is.

Now that you know what encryption is, let’s fill in the remaining information you will need to know to work with it. Don’t worry if the rest of the article seems technical, you just need to know enough to select the most suitable components for your use case.

Use Cases and Algorithms

There are two types of encryption algorithms, symmetric and asymmetric. For ease of understanding, symmetric algorithms use the same key for encryption and decryption, whereas asymmetric algorithms use a key pair instead. A key pair (consisting of a “private key” and “public key”) can be imagined as a digital conjoined twin, tightly bound to each other at birth, with one half used for encryption and the other half for decryption.

They are suitable for different purposes. When considering encryption, it is recommended to start with a symmetric algorithm as the base. They are fast and can handle any amount of data.

This approach is typically enough for most use cases where the intention is to encrypt data to transfer to the archive, or to another internal application. It is expected that the internal application will have the means to use the same key or a securely shared copy of it to decrypt the data.

For transfer to external parties, the same approach could technically work so long as the key can be securely and secretly shared with the external party. It would not do, for example, to send the key via email. Alternatively, asymmetric algorithms would serve well in this scenario.

This approach covers the remaining use cases in which encrypted data needs to be sent out. You will need to get hold of the recipient’s public key or digital certificate if they have it. Yes, it is the same digital certificate used for digital signatures.

Now, which actual algorithm do we go with? Typical industry standard is to use the best open standard algorithm at the time, which is AES for symmetric and RSA/ECC for asymmetric at the point of writing. These algorithms have been thoroughly analysed by the community. Do avoid the trap of thinking of using an obscure or custom algorithm, they add risk without necessarily adding strength to the equation.

Also, ensure that some crypto mode is used together with the symmetric algorithm. The strongest available today unencumbered by patents, is GCM. If some of the legacy components in the ecosystem are unable to handle that, CBC is a good fallback. Do avoid ECB as that is effectively running without a mode.

The reason is best explained by this image from Wikipedia ^[1]. Modes add some jitter into the process so that each time the encryption process is run, different results are produced with the same source data. Yet it is still able to decrypt back to the original source data.

Key Generation and Storage

We have talked about the keys used in symmetric algorithms above. Needless to say, it should be securely generated using a secure random byte generator and access to it should be restricted except for the application doing the cryptographic processes.

The keys need to be rolled over periodically as well. This means old keys are archived (not deleted!) and new keys generated to use on future data encryption. As the encrypted data needs to be accessible in the future, the old keys need to be stored for as long as the data remains in the picture. In some use cases we have seen, this could be 7 years, or as long as 99 years.

For the best security it is recommended to generate and retain the key within a Hardware Security Module (HSM) as it provides both the generation and storage facilities in one hardware package. There are also means to securely backup and restore the keys in the event of disaster recovery or migration to other environments. If your application is on Cloud, there are HSM equivalents or Key Management Services (KMS) which serve a similar role on the major Cloud providers.

For asymmetric algorithms this is not an issue, as public keys or digital certificates are designed to be shared to the party that wishes to encrypt data for you.

Implementation and Applications

Theory is all fine and dandy, but the devil is in the (implementation) details. Cryptography is one of those things where one critical misstep could render the process meaningless. For example, if the encryption key is sent out via an insecure process, it compromises all past and future data encrypted using that particular key.

There are off the shelf applications that can handle the encryption process, but these typically only cover a specific use case or ecosystem. One example is email encryption (S/MIME) through Microsoft Outlook.

For other cases, especially if encryption is required for your application’s data, a custom solution should be expected. This may use an existing cryptographic API product or library, or may be made to measure entirely.

Conclusion

There is a lot more to know under the hood, but contrary to common belief, you do not need to know everything to work with data encryption. What we have laid out above should be sufficient to get you started, though it is strongly recommended to seek a consultation to determine the best solution for your requirements. We are also including answers to some frequently asked questions below that we have encountered before.

Netrust has been a trusted cybersecurity partner and solutions provider since 1997. We have decades of experience in end-to-end cryptographic processes, including encryption and decryption. Every bit of experience we have builds up to the megabytes of confidence you can place in us. Contact us today for a consultation on your encryption needs.

FAQs

• Can I encrypt just a section of the data?

Certainly. Off the shelf applications would not support this, though so the custom implementation would have to be able to cut, encrypt and piece the data blocks back together as required.

• I have already encrypted a file, but then I lost my key/token! What should I do?

The first step is to determine how the key/token was lost. If there are reasonable grounds to believe it has been compromised, you will need to assume that all data encrypted with the lost key is compromised and respond in accordance with your country’s data privacy guidelines, such as the PDPA.

If the key is not compromised, you can look into restoring the key from backup. This should already be defined in the disaster recovery procedures before the system goes live. If the keys are not backed up or cannot be restored, then access to the data is effectively lost.

There is no convenient backdoor to restore access, this is exactly how cryptographic systems are intended to work.

• Can someone else see the data?

No, encrypted data is effectively scrambled. The only way anyone can see the original data is if they know the correct algorithm, modes, and processes that the file is encrypted through, and have the correct key to run said decryption process.

• I am sending the data to an external party; how can they confirm that this data came from me?

Encryption does not carry the sender’s identity. To achieve this, the data can be digitally signed first before it is encrypted and sent. The digital signature (Read up more on our article on Explaining Digital Signatures through real world examples) will carry the sender’s identity.

• Can digital signatures and encryption be used together?

Certainly, they are not mutually exclusive.

• Can someone else tamper with the data?

It is not possible to edit the data without corrupting the original. What that means is once edited, decryption can still be attempted, but the original data cannot be reconstructed. What is likely to emerge would be gibberish data.

Reference table on the differences between Digital Signatures and Encryption.

[1] Image source: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#ECB

Follow us on LinkedIn for the latest happenings/updates.

The post Explaining Encryption through real world examples appeared first on Netrust.

Let’s start with a primer video, where we will use letter wax seals to demonstrate what a digital signature is.

Now that you know what a digital signature is, let’s fill in the remaining information you will need to know to work with it.

Use Cases

In our experience, most use cases revolve around document agreements and thus PDF signing. In fact, digital signatures can be regarded as the next evolutionary step up from electronic signatures, which itself has evolved from handwritten signatures. Given the digital nature, it is more versatile and can protect not only documents, but also other use cases such as signing non-document data or protecting data for archival.

For document agreements, digital signatures signed using digital certificates from Netrust ^[1] enjoy Legal Presumption under the Electronic Transactions Act. Simply speaking, documents with valid Netrust signatures will be accepted as evidence in the court of law without unnecessary scrutiny.

Standards

The process of creating a digital signature follows standards, the prevalent standard now being PAdES for PDF signatures. For non-PDF files, the CAdES standard can be applied. When engaging with the vendors, it would be best to put compliance with standards as one of the requirements. This also helps prevent vendor lock-in.

Applications

As the technology and processes are already mature, digital signatures can be easily created with off the shelf applications. For small amounts or ad hoc signatures, Adobe Reader is readily available. You will however, have to get your own digital certificate that proves your identity. If you have a Singpass account, you can make use of our nSignSG service to utilise Sign with Singpass, which already comes with a digital certificate ^[2] with your identity as well.

For larger amounts of signatures or if you desire a systematic way of signing and verification, there are workflow solutions such as nSignHub or backend applications like nSignCore to fulfil the requirements. For these, it is best to seek a consultation to work out which solution is a better fit for your requirements.

Signature Verification

As a user, when you receive a digitally signed PDF file, it is important to verify the signature. To do so, utilise PDF applications such as Adobe Reader. When verified, said applications will display the results prominently. Do be wary of applications that display PDF content without verification. Typically, if no results are displayed, no verification is done. For more details, you may refer to this article, which includes detailed examples.

Data Archival

Finally, the digitally signed PDF file needs to be stored securely until it is called upon or the agreement lapses. Conceptually, this is identical to storing signed document papers, except that the ‘digital ink’ doesn’t fade. Consult your organisation’s data retention policies for guidelines.

Conclusion

There is a lot more to know under the hood, but contrary to common belief, you do not need to know everything to work with digital signatures. What we have outlined above covers the basics you will need as a user or when interacting with vendors. If an application is required, it is prudent to involve technical experts to ensure the system and processes are watertight.

To find out more about Digital Signatures or to try some hands-on activities, you can reach out to us to organize a session of Digital Signing 101 Workshop. No cost, no obligations! Just knowledge sharing.

We are also including the answers to some frequently asked questions below that we have encountered before. Check them out.

FAQs

• Can I sign just a section of the file?

This is not possible for PDF signing; digital signatures are applied to the whole document. You can simulate the intent by having certain signers sign at the end of sections instead of at the end of the document.

• I need to make changes after the first signature. How can I do it?

This requires some preplanning. This scenario is typically only required when the next signer needs to put the current date on the form, as compared to the concept of really ‘editing’ the document, which should be finalised before any party signs the document.

First, you must ensure that the fields are not locked after the first signature. This typically means certain settings need to be done depending on which application is used to create the digital signature. Then, changes can still be made on the fields as required.

During this stage, any changes made are reflected and past signed versions can be previewed through Adobe Reader. Here are some examples of how the process will look.

With first signature only: 

With changes applied:

With second signature applied: 

• How can I protect the changes that I have made?

Apply another digital signature on it. Typically, a digital signature should be the last action taken on the file, and it should also lock all fields to prevent further changes afterwards.

• My company’s processes require the signer to sign on every page as an acknowledgement. Can this be done?

Technically, yes. But it is not recommended as every digital signature covers the entire document and comes with its own size overhead. This will bloat up the file size unnecessarily.

It is typically recommended to advise the signer to review the document in its entirety before signing. Alternatively, an electronic signature can be placed on each page to represent the same acknowledgement.

• I have already signed a file, but then I lost my key/token! What should I do?

Well, the good news is the signing process typically embeds your digital certificate (Without the key) into the digital signature, thus ensuring that anyone can verify the signature. So, this does not affect any of the files you have already signed.

However, the bad news is, you will not be able to sign any more files since the key/token is lost. You should also immediately contact the certificate authority to report that this is lost so that they can revoke the certificate to prevent misuse and reissue you a new digital certificate.

• How do I verify a digital signature?

PDF applications like Adobe Reader can be used, it will automatically verify the signature(s) when opening the file. For applications, they can integrate with products which provide an API to verify digital signatures such as nSignCore.

• The digital signature is valid. But how do I know I can trust the person/organisation who signed the file?

First, you must be aware of where the document originates from. If the document came from an organisation, the identity in the signature should be from the organisation or a member of the organisation.

The certificate authority is required to verify the applicant’s identity, including whether they are an authorised staff member from the organisation, before issuing the digital certificate which is signed with a digital signature.

If in doubt, contact the person or organisation to clarify.

• Can someone else see the document content?

Yes, digital signatures does not hide the document content. You can explore encryption (Read up more on our article on Explaining Encryption through real world examples) or utilise password protection measures to fulfil that requirement. 

• Can digital signatures and encryption be used together?

Certainly, they are not mutually exclusive.

• Can someone else tamper with the document content?

It is not possible to edit the document data without breaking the digital signature.

• Can someone else reproduce my digital signature after tampering with the document content?

It is not possible to do that unless they can access the key that comes with your digital certificate. Hence, it is important keep your key/token securely.

• Can I know what has been changed, or revert the document back to the original state?

Digital signatures are designed to flag out tampering, but it is not possible to highlight or revert the changes. Therefore, it is still important to retain a copy of the digitally signed document so that a pristine copy is available when required.

Reference table on the differences between Digital Signatures and Encryption. 

[1] Other than Netrust, signatures signed using Sign with Singpass also enjoy legal presumption. Information is accurate at time of publish.

[2] Certificate is issued from Govtech Certificate Authority upon first attempt to sign using Sign with Singpass.

Follow us on LinkedIn for the latest happenings/updates.

The post Explaining Digital Signatures Through Real World Objects appeared first on Netrust.

Digital signatures are a fundamental part of modern transactions in today’s fast-paced world, where efficiency and security are everything. They streamline company processes, from signing contracts to approving financial documents, making them faster, more secure, and more transparent. So, what makes digital signatures so important, and how do they benefit the business? Let’s break it down.

What is a Digital Signature?
Think about the common situation of affixing your signature to a physical contract. Digital signatures are the same; they show your consent and everything is done online. A digital signature does not use an actual handwritten signature but uses a complex encryption technique that can verify the identity of the signer and the authenticity and integrity of the document.

– Enhanced Security
Documents that are signed by digital signatures are easily detected if there is any alteration or amendment after the signing. This allows businesses to verify that their document or agreements received from others are legitimate and haven’t been altered

– Legal Validity
Today many countries are starting to recognise digital signatures as they carry a greater weight than traditional signatures. Digital signatures provide a layer of security and prove the authenticity and integrity of a transaction allowing businesses to have confidence in what they are dealing with for the documents that with digital signatures in place.

– Faster processes
Using digital signatures to sign a document, a signer can just simply sign the document with a few clicks. This improves the speed of processes like vendor agreement, onboarding employees and contract signing which allow your business to close deals faster and with less hassle.

– Cost Savings
Since the digital signature allows you to sign a document digitally, this means there is no need to spend on paper, printing and postage. The company can save on office supplies and reduce the need for physical storage, which also cuts down on the expenses for retrieving and archiving documents.

– Simplifies Remote Work and Global Transactions
The digital signature allows documents to be signed from everywhere virtually. Whether your customer or client is across town or halfway around the world. You can also finalize the deals without needing to be in the same room or even the same time zone.

Some businesses increasingly using digital signatures to streamline workflows, improve security and improve customer experience as below:

– Sales Contacts
In the world of sales, time is money. Delaying in contact signing means there is a chance to miss the opportunities or slow revenue. Sales teams can send contacts and proposals to clients. Clients can review the document, sign and return the document in a few minutes which helps sales teams secure the commitment and move on to the next opportunity

– Healthcare Forms
Hospitals, clinics, and other healthcare facilities are bound by regulations that require patient consent and documentation for treatments, data privacy agreements, and procedures. Patients can digitally sign the consent forms securely before arriving at the clinic which reduces waiting times and also allows staff to focus more on patient care. Digital signatures play a crucial role in ensuring the authenticity and integrity of signed consent forms. By supporting compliance with industry regulations, digital signatures contribute to an efficient documentation process.

– Employee Onboarding
HR departments spend most of the time onboarding new hires, and managing paperwork like offer letters, NDAs and various policy agreements. Digital signatures allow new employee to sign all required documents electronically even before their first day on the job. This helps speed up the onboarding process and HR can focus more on introducing new employees to the team and helping them transition smoothly rather than getting bogged down with paper-based tasks.

Digital signatures are transforming how businesses operate by making processes faster, more secure and cost-effective. It allows companies to streamline processes, enhance document security and ensure legal validity. With digital signatures in place, businesses can now close deals quickly, work efficiently across borders and reduce their environmental footprint. As more industries adopt digital solutions, digital signatures are becoming an essential tool for success in today’s world.

To find out more, contact us at https://www.netrust.net/contact-us/ now.

Follow us on LinkedIn for the latest happenings/updates.

The post Understanding the Importance of Digital Signatures in Modern Business Transactions appeared first on Netrust.

nSignBasic Cloud Signing is a service where Netrust stores the signer’s private key and signs requested documents on the signer’s behalf when authorized. This approach takes the convenience factor up a notch while retaining the security benefits of a USB cryptographic token. With nSignBasic Cloud Signing, anyone can sign any document anywhere anytime.

In today’s digital signature landscape, it is normal for the signer to carry a USB cryptographic token containing the private keys before the signer can digitally sign on documents. In terms of security, this already takes the cake. That’s already quite nice, but what if we could make it even sweeter?

Are there other alternatives to tokens today? Sign with Singpass is one such avenue (You can experience Sign with Singpass anytime using our free nSignSG service). It is secure, convenient, and backed by the Singapore Government. However, this service is only available to Singpass Mobile users and allows signing in a personal capacity^[1]. That’s just the way the cookie crumbles.

To complete the circle, enter nSignBasic Cloud Signing.

nSignBasic Cloud Signing is a service where Netrust stores the signer’s private keys on behalf of the signer. The keys are stored securely in Hardware Security Modules (HSMs) and routine maintenance and technology refresh is handled by Netrust such that the signer has a seamless user experience while maintaining a high level of security and convenience.

To utilize the service, simply register for a certificate with Netrust and request for it to be provisioned into nSignBasic Cloud Signing. Next, set up strong authentication on the account. Finally use a compatible signing application such as nSignHub, a workflow solution, to call upon the private keys for signing. ^[2]

nSignBasic Cloud Signing is designed so that the signer’s keys will not be activated until the signer provides strong authentication, and even then, only the documents designated by the signer will be signed. This system can be utilized anywhere, anytime in the world without having to carry a cryptographic token to boot.

That’s not to say that the token is going the way of the dodo. It still serves some use cases well, for example when the signer does not have any network connectivity or is somehow restricted by the environment. The token is also useful when the signer wants to keep his/her private keys personally.

USB cryptographic tokens and HSMs provide top-notch security for the signer’s private keys. Throw in a pinch of convenience with nSignBasic Cloud Signing, and that’s just the icing on top of the cake.

nSignBasic Cloud Signing is a new product offering that will be launched soon. Stay tuned for updates.

Get your digital identity with us now! Check out nSignBasic for more information. You can also buy it online immediately. For other enquiries such as a large number of certificates or getting certificates issued programmatically, feel free to contact our sales team at https://www.netrust.net/contact-us/.

Do you just need to get a document signed with Singpass? You can use nSignSG, a free service from #NetrustGivesBack initiative to get it done fuss free.

Follow us on LinkedIn for the latest happenings/updates.

[1] Information is accurate at the time of publication.

[2] Further usage details will be provided after the product is launched.

The post nSignBasic Cloud Signing – Icing on the cake appeared first on Netrust.

In the heart of Southeast Asia’s technological hub, Singapore stands as a beacon of innovation, and as transactions move towards the digital realm, understanding the nuances between digital and electronic signatures becomes imperative. In the rapidly evolving landscape of digital transactions, the distinctions between electronic signatures, digital signatures, and the groundbreaking ‘Sign with Singpass’ have become pivotal in the Singaporean business realm.

Understanding Electronic Signatures:

Electronic signatures, a cornerstone of modern business, have simplified document authentication. In Singapore, their prevalence has surged, offering a streamlined alternative to traditional ink signatures. Electronic signatures can be as simple as typed text, a scribble, or an uploaded image. When comparing their assurance level to that of a digital signature or ‘Sign with Singpass,’ it is the lowest. Quick and legally binding, electronic signatures have become a go-to solution for a myriad of transactions.

Decoding Digital Signatures:

While electronic signatures have gained widespread acceptance, digital signatures elevate the security quotient. Unveiling a more advanced layer of authentication, digital signatures employ cryptographic algorithms, ensuring the integrity and authenticity of the signed document. As businesses in Singapore navigate the digital landscape, the adoption of digital signatures has emerged as a hallmark of commitment to data integrity.

Revolutionizing with ‘Sign with Singpass’:

Enter the game-changer – ‘Sign with Singpass.’ As Singapore pioneers the integration of national identity authentication into the signing process, this innovation not only enhances security but also aligns with the Smart Nation initiative. Leveraging the Singpass credentials, individuals can now sign documents with unprecedented ease, combining the convenience of electronic signatures with the security of digital authentication.

Navigating the Differences:

While all three types of signatures serve the purpose of ensuring document authenticity, the nuances lie in their methodologies. Electronic signatures focus on the act of intent, digital signatures add cryptographic security, and ‘Sign with Singpass’ merges both, utilizing national identity for a robust, user-friendly experience.

nSign Digital Signing Suite: nSignSG

nSignSG is one of the signing solutions from nSign Digital Signing Suite. It is a live signing platform which is available free for the members of the public to perform digital signing with Sign with Singpass.

4 simple steps to start signing using the Singpass Mobile App on nSignSG.

• Acknowledge
• Upload the Document
• Sign using Singpass Mobile App
• Complete & Download File

Head over to nSignSG to try out the Sign with Singpass service with your documents and your Singpass Mobile App.

For enquires or unique signing requirements e.g. Sign with Singpass integration and/or the nSign Digital Signing Suite, contact Netrust at https://www.netrust.net/contact-us/.

Follow us on LinkedIn for the latest happenings/updates.

The post Digital Signature & Electronic Signature: Singapore Edition appeared first on Netrust.

Did you know that Digital Signatures was first implemented in 1988? It implemented the RSA cryptographic algorithm, which is still being developed and used today. Even so, not too long ago, the corporate world was still using rubber stamps and wet ink signatures to legalise documents. They would even share the authorisation process by sharing the physical stamp with their employees, or authorise the use of the company logo or seal.

With the utilization of rubber stamps declining, companies began using electronic signatures. However this still only utilised an image of an authorised person’s signature. It is commonly presumed that the person who signed has personally verified with the use of the signature image.  So, how did they deal with authenticating signatures in the days of yore?

Let us revisit the history of the technology chronologically.

• 1976: Whitfield Diffie and Martin Hellman first proposed the idea of a digital signature scheme, but no prototype was developed yet
• 1977: Ronald Rivest, Adi Shamir and Len Adleman devised the RSA algorithm for digital certificates
• 1988: Lotus Notes 1.0 was launched and used the RSA algorithm
• 1998: The Electronic Signatures Act in Singapore  was established to provide a legal foundation for electronic transactions
• 1999: The ability to embed digital signatures into documents is added to PDF format
• 2000: The Electronic Signatures in Global and National Commerce Act (ESIGN) was enacted in the United States, establishing the legal framework for electronic signatures and records, enabling recognition and legitimacy in both domestic and international commerce.
• 2008: The PDF file format becomes an open standard to the International Organization for Standardization (ISO) as ISO 32000. Includes digital signatures as an integral part of the format
• 2010 onwards: Digital signatures continued to play a significant role in secure online communication, document authentication, and electronic transactions. The technology has evolved further to improve accessibility and ease of use. Some of the improvements are:
  • Digital signatures were widely adopted in various sectors, including government, finance, healthcare, and legal. They provided a means of ensuring the authenticity and integrity of digital documents and messages.
  • Digital signature algorithms evolved to include more secure and efficient cryptographic methods. RSA, DSA, and ECDSA (Elliptic Curve Digital Signature Algorithm) were commonly used algorithms
  • Mobile and Cloud Integration: With the proliferation of smartphones and cloud services, digital signatures have become more accessible. People could sign documents and contracts on mobile devices and store digital signatures in the cloud for easy retrieval.
  • User-Friendly Interfaces: User interfaces for digital signature solutions became more intuitive, allowing individuals and organizations to adopt them without requiring advanced technical knowledge.

Using a digital signature offers significant advantages and is widely adopted. Firstly, the identity of the signer undergoes verification, establishing a trust foundation in digital interactions. This process is strengthened by the sole possession of the private key linked to the digital certificate in use, restricting access exclusively to the authorized signer. Nonrepudiation, a crucial principle, ensures that neither party can deny involvement in sending or receiving a message, thanks to the protective measures of encryption and digital signatures. Additionally, the integrity of transmitted information is preserved, as any attempt at tampering renders the digital signature invalid, thereby safeguarding the authenticity of the data.

Today, it is evident that the COVID-19 pandemic has made a profound impact on the way we conduct business in the office, fundamentally transforming and even accelerating the process of digitization. As the pandemic forced employees to adapt to remote work out of necessity, one of the key aspects that quickly gained significance in this new landscape was the use of digital signatures in various work processes. This shift was not merely a matter of convenience but a vital adaptation to ensure the continuity of essential business operations. In this context, those who clung to the traditional practice of using images of wet ink signatures encountered numerous legality issues.

Digital signatures, unlike their paper counterparts, offer several advantages in a remote work setting. They are secure, tamper-evident, and easily verifiable. They also provide a digital trail that records who signed a document and when enhancing transparency and audibility. Moreover, digital signatures are typically legally recognized in many jurisdictions, enabling organizations to maintain compliance and meet legal requirements even in a remote work environment. Although many organizations recognize the necessity to accelerate the adoption of digital signatures for document signing, implementing this change may prove challenging due to the persistence of traditional signing methods. Some remain hesitant to rapidly overhaul established practices.

Over the last few years, Netrust has successfully addressed the increasing need for enhanced digital signing solutions in response to the surge in remote work demands. To assist users in this transition, we’ve provided easily accessible video tutorials available on our website, check out the tutorial here.  Additionally, we’ve organized comprehensive online seminars via Zoom, designed to educate entire organizations on the seamless integration of digital signing methods into their day-to-day business operations.

To find out more or to embark on digital signing for your organization, reach out to us today >>> https://www.netrust.net/contact-us/

Follow us on LinkedIn for the latest happenings/updates.

The post Authenticating Signatures in Days of Yore appeared first on Netrust.

In this blog, I will share three expert tips and tricks that will enhance your experience and efficiency while using nSignHub. From time-saving shortcuts to advanced features that maximize security, we’ve got you covered. Whether you’re a beginner just getting started with the platform or an experienced user looking to unlock its full potential, you can navigate nSignHub confidently and achieve optimal results.

Single Sign-On (SSO)

Did you know that you can also leverage popular single sign-on (SSO) options such as Google and Microsoft to quickly log in to nSignHub? This feature eliminates the need to remember and manage multiple login credentials, streamlining your access to the platform.

All you need is a Google or Microsoft account with the same email address registered on nSignHub.

To access nSignHub using your Google or Microsoft account, simply click on the “More Login Options” button and choose either “Google” or “Office 365.” A pop-up will appear, allowing you to select the desired account if you have multiple accounts associated. After selecting the account, you will be seamlessly redirected to the main page of nSignHub.

Enhance Document Security with Email OTP Authentication for Access and Signing

Did you know that the document owner can set the necessary security options for the signer during the preparation of the workflow? The document owner can choose to authenticate the signer using email OTP to grant access to the document. This provides an added level of security to ensure that the document will be accessible only upon providing the correct OTP.

The document owner can also choose to authenticate the signer using email OTP when the signer attempts to sign the document.

Note: If you are unable to find this option, you may contact our customer service team to enable this option.

Delegate Settings

Imagine enjoying a relaxing holiday when, unexpectedly, you find yourself in an urgent situation that requires you to digitally sign a document. The catch is that you don’t have any means of accessing the internet, leaving you without a way to fulfill this pressing task.

Did you know that within your enterprise, you have the option to delegate the signing of documents to a trusted individual for a specific duration? Additionally, you can assign a trusted person to review documents before they reach you, granting them the authority to reject any documents that should not be forwarded for your signature.

To add your delegate:

1. Click your profile drop down menu (available at the top right corner).
2. Click the “My Settings” option.
3. Click the “Delegated Signing” option from the left menu.

If you want to delegate the signing of documents to a trusted individual:

1. Tick the “Allow someone else to sign on your behalf” check box to enable it.
2. Click “+” from the grid header. The “Add Delegate” dialog will appear.
3. Specify the contact to whom you want to delegate your signing authority. The contact can be specified by using their Name or Email ID.
4. Specify the exclusive period by using the “From” and “To” fields during which this configuration is effective.
5. The Delegated Signing will be ineffective beyond the specified period.
6. Click the “OK” button.
7. The delegate will be added to delegated settings list.
8. Click on the “Save” button from the “Delegate Settings” screen.

.

If you want to delegate reviewing of documents to a trusted individual:

1. Tick the “Allow users to work as gatekeepers and review documents on your behalf” check box to enable it.
2. Specify the contact to whom you want to assign as your gatekeeper. The contact can be specified by using their Name or Email ID.
3. Click the “Save” button from the “Delegate Settings” screen.

Hopefully, these little tips and tricks will allow you to improve your digital signing experience in nSignHub!

nSignHub now supports Sign with Singpass, and it is currently available in every price plan at no extra charge! You can reach out to us at https://www.netrust.net/contact-us/ to find out more about Sign with Singpass activation.

Follow us on LinkedIn for the latest happenings/updates.

The post Tips and Tricks on using nSignHub appeared first on Netrust.

eForm filling with Digital Signatures has become a powerful solution to the workflows and enhances document security. The combination of eForm and digital signatures changes the way we handle the paperwork eliminating the need for the traditional paper-based process. In this blog, we will be exploring the benefits of the eForm filling with digital signatures and how it optimizes the operations of organizations and individuals as well as ensuring document integrity.

Understand of eForm Filling – By using eForm filling, users can easily input information with the select options from the fields that have been provided and submit their forms digitally.

Modern browsers allow storing of personal information within the browser, so that users can fill up eForms without entering the same information repeatedly.

In Singapore, the Myinfo feature of Singpass enables business applications to allow users to fill up eForm by using the Singpass app.

These modern approaches offer a range of advantages over the traditional method, including increased efficiency, reduce paper waste and improved accuracy.

Using traditional paper forms, information on the form has to be manually entered into a system before the form can be processed. This time consuming and also prone to errors. With eForms, all information that is submitted can be used by the system without additional processing.

Digital Signatures in eForm – A digital signature is a cryptographic representation of a person’s identity that ensures the integrity of the signed content. Digital Signature plays an important role in eForm filling by adding an extra layer of security and authenticity to the electronic document. The eForm with the digital signature (secure electronic signature) is given legal presumption (Electronic Transactions Act)  and recipients can verify the origin and integrity of the document.

Advantages of eForm Filling with Digital Signature

• Faster Processing: reduces the time and effort required to process forms, leading to enhanced productivity and faster turnaround times
• Improved Security: the secure nature of digital signatures mitigates the risks associated with document tampering or unauthorized alterations, ensuring the integrity and validity of the information provided
• Data Accuracy: eForm enables automated validation and error checking, which help to improve data accuracy as well as minimize human errors.
• Compliance and Legal Validity: helps organizations comply with regulatory requirements and provides legal validity to electronic documents.

Use Cases and Practical Application

• Healthcare: allow the patient to perform registration, consent forms and any medical history
• Human Resources: employee onboarding, evaluations and request forms
• Government: License renewals, online tax filing and permit application
• Legal: Agreement, legal forms, and digitised contracts for secure electronic signatures

eForm filling with digital signature enables organizations and individuals to streamline processes, security enhancement and digital transformation. By embracing this technology, organizations can optimize their operations, improve data accuracy, and provide a seamless user experience.

To find out more, reach out to us at https://www.netrust.net/contact-us/ now.

Check out the following blogs on Digital Signing: 

• How to Choose the Right Digital Signing Solution in Singapore
• Exploring Different Types of Digital Signatures and Their Uses
• Unveiling Document Signing Solutions: A Thorough Guide for Singapore Businesses
• A Beginner’s Guide to Understanding Digital Signatures in Singapore

Follow us on LinkedIn for the latest happenings/updates.

The post eForm Filling with Digital Signatures appeared first on Netrust.

Transitioning from physical signing to digital signing offers numerous benefits in terms of efficiency, convenience, and cost savings. Understanding your organisation’s needs is crucial when choosing a digital signing solution.

Gain a clear understanding of your organisation’s digital signing requirements, such as the number of documents that need signing, the desired level of security, and mobile accessibility.

Consider the roles of signatories involved, including the number of people who will be signing documents. If you have multiple signatories with different roles, you may need a solution that supports serial or parallel signing workflows and allows for the customization of signing rules.

Assess the security needs of the documents you sign. Determine if your business requires advanced encryption, secure storage of digital certificates, or compliance with specific security standards, particularly if you handle sensitive or confidential information.

Determine whether your business requires mobile accessibility for digital signing. If your signatories frequently work remotely or need to sign documents on the go, consider a solution that offers mobile applications or responsive web interfaces for convenient access.

By thoroughly evaluating these factors, you can select a solution that meets your specific requirements and enhances the efficiency of your signing processes.

Netrust being an IMDA-accredited public CA is a trusted 3^rd party provider of digital signing solutions. Here are the steps you can take to choose the right digital signing solution provided:

1. Research us: Conduct thorough research on our company by exploring our website. If you are reading this blog post, you have already taken the first step. Explore our range of digital signing solutions to find the one that best suits your specific requirements.
2. Evaluate Security and Compliance: Being an IMDA-accredited public CA, Netrust issues certificates that are highly trusted and hold legal presumption in Singapore’s court of law under the Electronic Transactions Act.
3. Authentication Methods: Validating digitally signed documents is made easy by using widely used document readers such as Adobe Acrobat Reader for PDF documents or Microsoft Word for Word documents. These readers maintain lists of trusted Certificate Authorities (CAs), including Netrust. CAs must meet specific criteria set by the document reader manufacturers to be added to the trusted CA list. Examples of CA trust programs are the Adobe Approved Trust List and the Microsoft Trusted Root Program. Digital certificates issued by Netrust align with global standards and are trusted worldwide.
4. Document Tracking & Audit Trail: When using e-signature workflow systems, important information such as the timestamp of the e-signature request, the IP address of the user, and the browser used during the signing process is recorded as audit trails. These audit trails serve as evidence to validate the e-signatures.
5. Customer Support: Our Netrust staff are specialised in the field of PKI services and can advise you on your needs as your digital signing partner. The customer and technical support teams of Netrust are located in Singapore, ensuring prompt assistance and support for your needs.

At Netrust, we offer multiple digital signing solutions to cater to your organisation’s needs. Refer below to learn each solution’s features and benefits.

nSignSG

Experience the convenience of a web-based platform that allows you to generate digital signatures on PDF documents utilizing Singpass, completely free of charge. With no registration or setup required, it’s easy to get started and begin signing documents seamlessly.

nSignHub

Our comprehensive electronic workflow solution provides a feature-rich platform for sending, signing, tracking, and managing signing processes. The data is securely geo-fenced within Singapore, ensuring data protection and compliance.

The solution supports both electronic signatures and digital signatures, including the convenient Sign with Singpass feature at no additional cost. As an added layer of security, electronic signatures are automatically wrapped with a digital witness certificate, providing enhanced protection without any extra charges.

This all-in-one cloud-based platform is ideal for users and companies seeking seamless document signing and management capabilities. It supports multiple identities and signers, as well as various signature types within a single document, making it highly versatile and adaptable to your specific needs.

nSignBasic

Document signing certificates, also known as digital certificates or digital IDs, enable you to add a digital signature to a document, providing proof of the sender’s identity. These certificates come with several benefits, including low-cost and unlimited signing capabilities.

They are automatically trusted by Adobe programs through the Adobe Approved Trust List (AATL) and Microsoft programs. The nSignBasic Individual certificates qualify as Secure Electronic Signatures (SES) in Singapore, ensuring their legal validity.

These certificates can be issued to individuals or organisations, with the option to include additional information such as a professional ID. They are particularly suitable for users and companies seeking to create legally recognized, publicly trusted digital signatures in Adobe PDF documents. The certificates are optimized for single identity and signer usage, ensuring ease of use and reliability.

nSignCore

Empower your business applications to conduct digital signing effortlessly through easy-to-integrate REST APIs. These APIs are highly configurable, allowing seamless integration with your existing applications or the option to use them as a standalone application. Our APIs support various file types and transaction data, ensuring flexibility and versatility. You can implement them on web, mobile, or desktop platforms based on your organisation’s preferences.

nSignQR

Safeguard the integrity of your physical documents offline using specially generated QR codes. These QR codes can be scanned using any standard QR code reader or a custom-built mobile application. The presentation of documents with nSignQR codes does not require any special handling, making it a convenient and user-friendly solution.

In conclusion, selecting the right digital signing solution for your business in Singapore is a crucial decision. It involves understanding your organisation’s specific requirements and evaluating the different solutions available.

Netrust offers the nSign Digital Signing Suite which includes various digital signing solutions to cater to different needs. By thoroughly assessing your business’s needs and considering the factors mentioned, you can make an informed decision and choose the digital signing solution that best fits your requirements.

If you are still uncertain about which digital signing solution to choose, we invite you to request a demo or trial. You can book a no-obligation 30-minute discussion with us where we can provide guidance and advice on the best digital signing solution that aligns with your specific needs. Reach out to us at https://www.netrust.net/contact-us/ now.

Making the transition from physical signing to digital signing can bring numerous benefits in terms of efficiency, convenience, and cost savings. By partnering with a trusted provider like Netrust and selecting the right digital signing solution, you can enhance your organisation’s signing processes and streamline your document management workflows.

Follow us on LinkedIn for the latest happenings/updates.

The post How to Choose the Right Digital Signing Solution in Singapore appeared first on Netrust.

This blog is co-authored by Aaron Fu and Kimchav Sov.

The term “digital signature” is often confused and has commonly been described as an e-signature that resembles a hand-drawing signature but applied in digital documents. Indeed, digital signatures provide a highly secure way to implement electronic signatures and play a crucial role in maintaining information security. They provide a way to validate the authenticity, validity and integrity of digital documents. Digital signatures are used in a wide range of applications, including email, contracts, official documents, codes and financial transactions. This blog post will look at many forms of digital signatures and their use cases.

What is a digital signature?

A digital signature is a mathematical code that is attached to an electronic document to verify its authenticity. It is created using a private key that is unique to the signer and can be used to verify that the document was signed by the person who claims to have signed it. Unlike ordinary electronic signatures, which are simply an electronic representation of a handwritten signature (e.g. scanned image of a handwritten signature), digital signatures are based on public-key cryptography, which makes them much more secure.

Digital signatures work by using a combination of public and private keys. The private key is used by the signer to encrypt the document, while the public key is used by the recipient to decrypt it. The public key is freely available to anyone who needs it, while the private key is kept secret by the signer.

What are the Different Types of Digital Signatures and Uses

Cryptographic digital signature

Cryptographic digital signature is a type of digital signature that uses cryptography to authenticate the validity and integrity of a digital document. They are based on asymmetric encryption algorithms, which use private and public keys. The document is signed using the private key and is verified with the public key. Cryptographic digital signatures offer high levels of security and are widely accepted. However, cryptographic digital signatures do not have an inherent mechanism for identity verification that the certificate-based digital signatures offer. They are often used in a variety of applications such as email encryption, code signing, legal document, etc.

Certificate-based digital signature

Certificate-based digital signature is a type of digital signature that uses a digital certificate to verify the identity of the signer. The digital certificate is issued by a trusted third party, known as a certificate authority (CA). These certificates contain information about the signer’s identity and are used to verify the authenticity of the digital signature. Certificate-based digital signatures offer an added level of trust and have a strict Know Your Customer (KYC) process enforced by a CA adhering to regulatory compliance before the issuing of a certificate. They are often used in industries where regulatory compliance and legal requirements are crucial, such as in signing legal documents and contracts.

QR code signature

QR code signature is a type of digital signature that uses a QR code to represent the signature. A unique QR code embedded with a digital signature is generated for each document, containing the necessary information to verify the document. Users scan the QR code using a QR scanner or compatible application to verify the authenticity and integrity of the signature. QR code signatures are used in a variety of applications such as documents, certificates, product authentication statements, and logistics.

Biometric digital signature

Biometric digital signature is a type of digital signature that uses unique physical or behavioural characteristics of an individual such as a fingerprint, facial scan or even handwritten signature to verify the identity of the signer. Biometric signatures offer a high level of security as they are difficult to forge. They are often used in applications where identity verification is critical, such as banking and government documents.

What makes a digital signature secure?

When a document is signed using a digital signature, the signature is embedded into the document itself. This means that if the document is altered in any way, the signature will no longer be valid. This provides a high level of security and ensures that the document cannot be tampered with or forged.

Digital signatures rely on a well-established system called Public Key Infrastructure (PKI) to establish trust and ensure the authenticity of the signatures. In PKI, a certificate authority (CA) is responsible for issuing digital certificates that contain a public key and identifying information about the signer. These digital certificates are used to establish trust between signers and recipients, ensuring that the digital signature is authentic and that the signer is who they claim to be.

What makes a digital signature legally enforceable?

In Singapore, digital signatures are governed by the Electronic Transactions Act (ETA) and the Electronic Transactions (Certification Authority) Regulations (ETCA). These laws provide a legal framework for the use of digital signatures and ensure that they are legally binding and enforceable.

Secure Electronic Signatures (SES) are a specific type of digital signature that is defined in the ETA and provides a legal presumption of authenticity and integrity. This means that if a SES is challenged in court, the court will presume that the signature is authentic and has not been altered unless there is evidence to the contrary. This legal presumption can make it easier for businesses to use electronic signatures, as they can rely on the presumption of authenticity and integrity provided by the ETA.

To qualify as a Secure Electronic Signature, the signature must be created using a method that is uniquely linked to the signatory, such as a digital certificate issued by a recognized CA. In Singapore, CAs are recognized and accredited by the Infocomm Media Development Authority (IMDA), controller of CAs in Singapore. The IMDA is the regulatory body responsible for ensuring that CAs comply with the ETCA, which sets out the requirements for the operation and management of CAs in Singapore.

Of the different types of digital signatures explored earlier, only certificate-based digital signatures qualify as Secure Electronic Signatures.

Who are the recognized CAs in Singapore?

Netrust is Asia’s 1st Public Certificate Authority (CA) and Singapore’s Only Commercial IMDA-accredited CA. Netrust offers a range of digital certificates that are compliant with the ETA and can be used to create Secure Electronic Signatures that are legally binding and admissible as evidence in court.

Netrust is also a member of the Adobe Approved Trust List (AATL) and Microsoft Trusted Root Certificate Program. As such, digital signatures generated by nSignBasic – Netrust Document Signing Certificates, are automatically trusted by Adobe and Microsoft programs. The AATL is a global program that includes a list of trusted digital certificate providers that are recognized by Adobe as meeting certain standards for security and reliability.

By choosing an accredited CA like Netrust, businesses in Singapore can ensure that their digital signatures are reliable and trustworthy and that they comply with the requirements of the ETA and ETCA. This can help to protect businesses from fraud and other types of financial crimes, while also improving their efficiency and productivity in their day-to-day operations.

How can digital signatures help me?

In addition to their security benefits, digital signatures can also help businesses to improve their efficiency and productivity. They eliminate the need for paper-based signatures, which can be time-consuming and expensive. They also provide a fast and efficient way to sign and authenticate documents, which can help to streamline business processes and reduce delays.

For example, digital signatures can be used in the banking and finance industry to sign loan agreements and other financial documents. They can also be used in the legal industry to sign contracts and other legal documents. In the healthcare industry, digital signatures can be used to sign medical records and other important documents.

How can I start using digital signatures?

To use digital signatures in Singapore, businesses must first obtain a digital certificate (such as nSignBasic – Netrust Document Signing Certificates) from a CA like Netrust. Once a business has obtained a digital certificate, they can use it to sign documents using digital signatures. This can be done easily using freely available document readers such as Adobe Reader, or electronic signing workflow solutions such as nSignHub.

Here at Netrust, we offer a wide range of digital signature solutions to address the needs of business and also day-to-day operations:

• nSignSG: A web-based platform that lets you create digital signatures on PDF documents using Singpass
• nSignHub: A full-fledged electronic workflow solution used to send, sign, track and manage signing processes
• nSignBasic: Document signing certificates (sometimes known as digital certificates or digital IDs) issued by Netrust allow you to add a digital signature to a document to prove the identity of the sender.
• nSignCore: Enable your business applications to perform digital signing via simple-to-integrate REST APIs
• nSignQR: Protect the integrity of your physical documents offline with specially generated QR codes

In conclusion, digital signatures are an important tool for businesses in Singapore. They provide a high level of security and reliability, which can help to protect businesses from fraud. They also provide a fast and efficient way to sign and authenticate documents, which can improve efficiency and productivity. To learn more about how Netrust can help you harness the full potential of electronic signing, visit our website today and request a personalized consultation.

Follow us on LinkedIn for the latest happenings/updates.

The post Exploring Different Types of Digital Signatures and Their Uses appeared first on Netrust.