Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: ABA digital signature guidelines


Related Topics

  
  Digital Signature Guidelines - Tutorial
Digital signatures use what is known as "public key cryptography," which employs an algorithm using two different but mathematically related "keys;" one for creating a digital signature or transforming data into a seemingly unintelligible form, and another key for verifying a digital signature or returning the message to its original form.
The complementary keys of an asymmetric cryptosystem for digital signatures are arbitrarily termed the private key, which is known only to the signer <20> and used to create the digital signature, and the public key, which is ordinarily more widely known and is used by a relying party to verify the digital signature.
Digital signature verification is the process of checking the digital signature by reference to the original message and a given public key, thereby determining whether the digital signa ture was created for that same message using the private key that corresponds to the referenced public key.
www.abanet.org /scitech/ec/isc/dsg-tutorial.html   (3098 words)

  
  Digital Signatures
Digital signatures are a method of authenticating digital information analogous to ordinary physical signatures on paper, but implemented using techniques from the field of cryptography.
A digital signature is itself simply a sequence of bits conforming to one of a number of standards.
Whereas the existence of a digital signature can be evidentially significant in establishing that an electronic communication is uncorrupted, and that it had a certain provenance, it cannot of itself provide any evidence as to whether a particular individual intended or authorized or associated himself or herself with any such communication.
ees.net.nz /it/digital_signatures.htm   (1627 words)

  
 Security   (Site not responding. Last check: 2007-10-16)
Most digital signature technologies include a date and time stamp function that can be critical for use in electronic commerce and legal actions.
Digital signatures are often hailed as the ultimate solution to electronic communication: secure, accurate transmission of data where the identity of the participants is verifiable.
According to the ABA Digital Signature Guidelines, "the likelihood of malfunction or a security problem in a digital signature crypto-system designed and implemented as prescribed in the industry standards is extremely remote, and is far less than the risk of undetected forgery or alteration on paper or of using other less secure electronic signature techniques".
www.unc.edu /~dvb/cyberlaw/digitalsignatures/security.htm   (1599 words)

  
 ABA digital signature guidelines - Wikipedia, the free encyclopedia
The ABA digital signature guidelines are a set of guidelines published on 1 August 1996 by the American Bar Association (ABA) Section of Science and Technology Law.
The document was the first overview of principles and a framework for the use of digital signatures and authentication in electronic commerce from a legal viewpoint, including technologies such as certificate authorities and public key infrastructure (PKI).
The guidelines were a product of a four-year collaboration by 70 lawyers and technical experts from a dozen countries, and have been adopted as the model for legislation by some states in the US, including Florida and Utah.
en.wikipedia.org /wiki/ABA_digital_signature_guidelines   (203 words)

  
 1998 NCSL Annual Meeting: DIGITAL SIGNATURES by Thomas J. Smedinghoff
With digital signatures, especially under some of the new and proposed legislation, a person may be liable for messages signed with his or her private key until he revokes his or her certificate.
Examples of electronic signatures include a name typed at the end of an e-mail message by the sender, a digitized image of a handwritten signature that is attached to an electronic document, a PIN number, a code or "handle" that the sender of a message uses to identify himself, and a digital signature.
Digital signatures may be used in connection with documents received by or filed with the State and its agencies, provided that the digital signature embodies the five attributes set forth in the Act.
www.ncsl.org /programs/lis/LRL/smed-article.htm   (12098 words)

  
 Wikipedia: Digital signature - Wikipedia, the free encyclopedia
Digital signatures are often used in the context of public key infrastructure (PKI) schemes in which the public key used in the signature scheme is tied to a user by a digital identity certificate issued by a certificate authority, usually run by a third party commercial firm.
The digital signature was generated using Bob's private key, and takes the form of a string of bits (normally represented as a string of characters (ie, digits and letters)).
Digital signatures use encryption techniques but the algorithms are not typically suited for direct encryption of bulk plaintexts; more efficient methods are available.
en.pediax.org /Digital_signature   (3007 words)

  
 Electronic Signature & Digital Signature Solutions - Digital Signatures in Healthcare
By contrast, digital signatures are commonly used to lock and seal the contents of a document.
The graphical signature is captured and pasted onto the document, then the signed document is counter signed by a physician, with the later's digital signature.
Digital signatures are well recognized as the preferred method of sealing and authenticating electronic documents.
www.arx.com /documents/Digital_Signatures_in_Healthcare.php   (1831 words)

  
 HIPAA tech: Digital Signature
A digital signature ensures that the document originated with the person signing it and that it was not tampered with after the signature was applied.
Digital signatures are not signatures, and they can't fulfill their promise.
The Electronic Signatures in Global and National Commerce Act (Esign) brings enterprises face-to-face with the complex process of developing the business rules and policies that must be established before implementing digital signature technologies.
www.hipaadvisory.com /tech/DigitalSignature.htm   (506 words)

  
 law.com
There are new ABA legal-education-related initiatives under way in Africa and Asia that provide opportunities for law schools to be involved in shaping the legal academy in new democracies.
She is the former general counsel for the State Bar of California and is the first Asian-American to head a section or division of the ABA.
These guidelines will then be presented to the Section Council and the ABA House of Delegates for their review and consideration.
www.law.com /special/professionals/aba/part_two.html   (3276 words)

  
 The emperor’s new clothes: the truth about digital signatures and Internet commerce
If the metaphor of signature were imposed on the function of SSL, the best that could be said is that the server has a digital signature certificate, but the public key contained in the certificate is used to encrypt something, not to sign something.
For a digi­tal signature to be affixed to a message, first the signer runs the message through the hash function to produce the message digest.
A person who uses the certificate to verify the digital signature is known as the “relying party.” A CA establishes policies that govern the circum­stances under which it issues certificates; these policies are then pub­lished in a “certification practice statement” disclosing those policies to any potential sub­scribers or relying parties.
www.swiss.ai.mit.edu /6.805/articles/signatures/quinn-signatures.html   (9655 words)

  
 Definition of ABA digital signature guidelines
The ABA digital signature guidelines are a set of guidelines published by the American Bar Association (ABA) on 1 August 1996.
The document was the first overview of principles and a framework for the use of digital signatures and authentication in electronic commerce from a legal viewpoint, including technologies such as certificate authorities and Public key infrastructure (PKI).
The guidelines were a product of a four-year collaboration by 70 lawyers and technical experts from a dozen countries, and have been adopted as the model for legislation by some states in the US, including Florida and Utah.
www.wordiq.com /definition/ABA_digital_signature_guidelines   (187 words)

  
 Internet Law & Policy Forum: Bringing law, policy, business and technology together
For example, the original German Digital Signature Law established stringent technical standards for what types of digital signatures are to be deemed "secure." Italy took this a step further by conveying legal effect only to signatures that have been authenticated by a licensed CA.
At the minimalist level, the EU Digital Signatures Directive prohibits EU Member States from denying legal effect to an electronic signature solely on the grounds that it is in electronic form, or on the grounds that it does not satisfy the standards set forth elsewhere in the directive for "advanced" electronic signatures.
Despite purporting to follow the EU Directive on Electronic Signatures, several provisions might need to be modified to fully incorporate the Directive, in particular, (a) becoming registered as a CSP in effect requires a government license, and (b) the fact that legal effect is limited to certificates from registered CSPs.
www.ilpf.org /groups/analysis_IEDSII.htm   (6652 words)

  
 Preliminary: Electronic Commerce Act -1998
A certificate usually helps the recipient of a digitally signed message attribute the digital signature to the sender by determining whether the public key and corresponding private key are identified with the signer.
A key pair includes a private key that is used to create a digital signature and a public key, which is used to verify digital signatures on messages sent by the holder of the corresponding private key.
Note that a person who digitally signs an electronic record, but who has not been issued a certificate, is not a subscriber, even though such person is using a digital signature.
www.indianembassy.org /policy/Commerce/ECommerce/preliminary.htm   (3529 words)

  
 Public key infrastructure - Biocrawler   (Site not responding. Last check: 2007-10-16)
A user may digitally sign messages using his private key, and another user can check that signature (using the public key contained in that user's certificate issued by a certificate authority within the PKI).
With the further development of high speed digital electronic communications (the Internet and its predecessors), a need became evident for ways in which users could securely communicate with each other, and as a further consequence of that, for ways in which users could be sure with whom they were actually interacting.
An American Bar Association technology project published an extensive analysis of some of the foreseeable legal aspects of PKI operations (see ABA digital signature guidelines), and shortly thereafter, several US states (Utah being the first in 1995) and other jurisdictions throughout the world, began to enact laws and adopt regulations.
www.biocrawler.com /encyclopedia/PKI   (1313 words)

  
 A Law Student's Guide to the Future of Transactions Over the Internet: A Review of the Digital Signature Guidelines
Consideration is also given to possible contractual variation of the provisions of Guidelines by parties and the fiduciary relationship of the certification authority to the parties.
As noted above, the viability of the digital signature certificate system depends on the effective functioning of certification authorities, independent parties who are able to bind the identity of the public key to its owner, to prevent the spoofing of public keys by impostors.
Among other things, this section enumerates the rights and duties of parties who issue and rely upon a digital signature, and apportions responsibility among the signer, the relying party and the certification authority in the event of damage to an innocent party.
scs.student.virginia.edu /~vjolt/graphics/vol1/vol1_art6.html   (1468 words)

  
 DIR - Standards Review and Recommendation Publication - SRRPUB13 - Digital Signatures & Public Key Infrastructure ...
In May 2003, the Department adopted the Guidelines for the Management of Electronic Transactions and Signed Records as a rule (T.A.C.§203) that must be followed by state agencies that send and accept electronic records and electronic signatures or otherwise create, generate, communicate, store, process, use and rely upon electronic records and electronic signatures.
Before agreeing to accept/refusing to accept digitally signed documents, state agencies should become familiar with the rules (T.A.C. §203) and the policy, procedural, security, and technology issues related to digital signatures and PKI service providers.
Other technologies for digital signatures are available and may meet agency reliability requirements when minimal security is required and the parties to the transactions are known (e.g., limited group of organizations/membership) and are using a specific technology (e.g., Signature Dynamics).
www.dir.state.tx.us /standards/srrpub13.htm   (1444 words)

  
 Digital Signature Guidelines - Tutorial Footnotes
A handwritten signature creates probative evidence in part because of the chemical properties of ink that make it adhere to paper, and because handwriting style is quite unique to the signer.
Throughout these Guidelines "message" means the digital representation of information (generally, computer-based information), "document" means information inscribed on a tangible medium (generally paper-based information), and "record" can be used to refer to a message or to a document, consistent with the definition of "record" in U.C.C. supra, this footnote.
Confidentiality can be provided as an optional feature of digital signature technologies, but the separate and distinct security service of confidentiality is not central to the security services of signer authentication and document authentication, and is thus outside the scope and focus of these guidelines.
www.abanet.org /scitech/ec/isc/footnotes.html   (2071 words)

  
 Baker & McKenzie - Global E-Commerce Law -- American Bar Association
Section of Science and Technology, the ABA Digital Signature Guidelines provide a summary of the legal principles applicable to a PKI legal infrastructure.
Foremost among the ABA’s recommendations is to establish a multinational commission to set the jurisdictional rules of e-commerce.
The study, which has not yet been formally adopted by the ABA, was the subject of commentary from bar members at the ABA’s annual meeting in London.
www.bakernet.com /ecommerce/aba-t.htm   (124 words)

  
 [No title]
A certificate is used by a "certificate user" or "relying party" that needs to use, and rely upon the accuracy of, the public key distributed via that certificate (a certificate user is typically an entity that is verifying a digital signature from the certificate's subject or an entity sending encrypted data to the subject).
It is assumed that the reader is familiar with the general concepts of digital signatures, certificates, and public-key infrastructure, as used in X.509 and the ABA Guidelines.
The archival system should provide integrity controls other than digital signatures since: the archival period may be greater than the cryptanalysis period for the key and the archive requires tamper protection, which is not provided by digital signatures.
www.ietf.org /rfc/rfc2527.txt   (8518 words)

  
 DIGITAL SIGNATURE GUIDELINES
The "Digital Signature Guidelines" begin with a tutorial that describes in simpleterms the technological elements of the public key encryption system.
The "Guidelines" also describe a system for ensuring the identity of the holder of aprivate key, for making digital signatures as usable in commerce and in legal proceedings as awritten signature on paper, and for ascribing appropriate responsibility to those engaged inelectronic commerce should one of the parties involved deny liability under the transaction.
All of this -- the transaction, the signatures, the authentication,the dating, and so on -- is electronic and requires no paper and no warehouses full of documents,and can be accomplished with the speed that is now essential to world-wide commerce.
www.abanet.org /scitech/ec/isc/dsg.html   (492 words)

  
 XML-Signature Syntax and Processing
XML signature application; conformance requirements for each are specified by way of schema definitions and prose respectively.
Detached signatures are over external network resources or local data objects that reside within the same XML document as sibling elements; in this case, the signature is neither enveloping (signature is parent) nor enveloped (signature is child).
PKCS1, section 9.2.1], the value input to the signature function MUST contain a pre-pended algorithm object identifier for the hash function, but the availability of an ASN.1 parser and recognition of OIDs is not required of a signature verifier.
www.w3.org /TR/2002/REC-xmldsig-core-20020212   (9227 words)

  
 American Bar Association
Those engaging in electronic commerce will want to know that the message and the electronic "signature" attached to the message can both be verified and can be used in court to bind the "signer" to the deal.
For your convenience, we have provided the "Guidelines" in a number of formats.
Hard Copies of the "Digital Signature Guidelines" are available for $34.95, plus shipping and handling.
www.abanet.org /scitech/ec/isc/dsgfree.html   (191 words)

  
 Mann & Winn E-commerce
EU Bemoans Slow Rise of Digital Signatures: For an update on the use of digital signatures in the EU, see this March 2006 Report from the European Commission, which discusses the slow uptake of digital signatures and the reason they have been slow to catch on.
Jane Winn, The Emperor's New Clothes: The Shocking Truth about Digital Signatures and Internet Commerce, 37 Idaho L. Rev. 353 (2001) a thorough explication, mirroring the analysis of the assignment, of the failure of digital signatures.
The ABA's PKI Assessment Guidelines also are available from the ABA Web site, specifically at www.abanet.org/scitech/ec/isc/pag/pag.html: a complex, ponderous document that tries to answer every question that has ever been asked about public-key infrastructure
www.utexas.edu /law/faculty/ecommerce/2nd/assignments/18   (140 words)

  
 DigiStamp - related subject links
A digital signature is a legal signature based on the technology of encryption.
U.S. Dept. of Labor survey of Digital Signature Laws by state.
German Digital Signature Ordinance (SigV) Draft of July 7, 1997 Translation and Commentary by Christopher Kuner, Esq.
www.digistamp.com /links.htm   (306 words)

  
 Digital signature - Wikipedia, the free encyclopedia
[edit] Association of digital signatures and trusted time stamping
[edit] Using digital signatures only with trusted applications
Turkey has an Electronik Signature Law (in Turkish) since 2004.
en.wikipedia.org /wiki/Digital_signature   (3003 words)

  
 Security and Encryption Links
Proposed EC framework for digital signatures and encryption.
Initiative to harmonize dozens of incompatible digital signature laws.
Digital signature information published by the German telecoms/post regulation authority.
www.cs.auckland.ac.nz /~pgut001/links/pki.html   (631 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.