Please note, that the Knowledge Base isn't translated to english completely at the moment. You will still find some german texts - we are translating permanently the outstanding parts! Thank you for understanding!

Digital Signature - in brief

		INFO & KNOWLEGDE

A digital signature is a kind of signet, which is concatenated to the electronic document and fulfill the same function like a handwritten signature. This signet is a cryptographic code which is computed from the document and a digital certificate.

A-Sign Premium

Kinds of signatures

"Ordinary digital signature"
An ordinary electronic signature is according to austrian signature law electronic data, which are concatenated or logical associated to other electronic data, and are used for authentication of the signatory. Basically ordinary electronic and secure electronic signatures are the same, the main difference are the more stringent requirements by law for secure electronic signatures.

"Advanced digital signature"
The "advanced digital signature" is not specified in the austrian Signature Law. IT is specified in the austrian regulation for electronic invoices, and is not based on a qualified certificate.
1. uniquely linked to the signatory,
2. capable of identifying the signatory,
3. created using means that the signatory can maintain under his sole control;

For differentiation of such a signature from secure or ordinary ones it is often called as "advanced digital signature".

"Secure digital signature"
A secure elektronic signature is according to signature law an electronic signature, which is
1. uniquely linked to the signatory,
2. capable of identifying the signatory,
3. created using means that the signatory can maintain under his sole control; and
4. based on a qualified certificate and which are created by a secure-signature-creation device.

A qualified certificate has special requirements in ensuring the identity of the person at enrollment. Austrian banks are using only the secure signature.

What are digital certificates

The certificate (digital ID) is the central element in a security infrastructure. A digital certificate is binding the public key of a person, company or device to its identity. By using the certificate you can authenticate yourself to your communication partners and communicate for this reason in a secure manner.

1. Simple Certificate
According to the signature law a certificate is a electronic attestation in which the signature verification data is assigned to a certain person which identity is confirmed. The enrollment of simple certificates succumb lower requirements than for qualified certificates.

2. Qualified Certificate
A qualified Certificate has to contain according to signature law § 5, name of the signators, name of the trust center, validity etc. and is issued by a trust center which fulfills the requirements according to § 7, like A-Trust,...

The trust center hast to check the identity by a photo ID and various other legal characterisitics of the person carefully. All components which are used for issuing qualified certificates and the security concept have to be evaluated and approved by authorities.

Benefit
By signing electronic documents with trustworthy certificates, the adressee can be sure of the identity of the sender and the integrity of the content. Tranmittance of data through the internet can be intercepted resp. the message can be manipulated. Electronic contracts or just certain parts are no more repudiable, with such workflows there is also no more idle time.

Basically most bank transactions with handwritten signature are suited to be done by secure digital signature. Precondition is the qualified certificate on a signature card.

		PRACTICE

How will I get a digital signature in Austria

For filling an application and registering for a secure digital signature, you need a trust center, which issues qualified certificates - in Austria this is only A-Trust. Certificates for other signature types, you can get also from other certification service providers.

For using a signature card of the A-Trust, e.g. an a-sign premium card, or an austrian Maestro card. you have to activate this card, resp. enroll the qualified certificate, in a registration authority office of A-Trust.

You have to choose an A-Trust registration authority office. There you can fill in the application at once. You fix a date with the office, when your identity will be checked and your card will be activated.

On your computer, you nee the a-sign client - Download with valid A-Trust CIN - for the austrian citizen card function, you need the citizen card software - free download for austrians - and an A-Trust recommended card reader.

Getting a certificat on the austrian health card (e-card) can be done completely online (activation code with registered letter) or in one of the registration offices of the social insurance institutions in Austria.

Austrian Citizen Card

Digital Signature

Reader with pinpad

Signature Law