Status of Remote Signature
Adoption andImplementation in Japan
Japan Network Security Association
Remote Signature Task Force Leader

Mizuho Information & Research Institute, Inc.
Management & IT Consulting Div Manager

Hirohisa OGAWA

Main Topics• Activities of JNSA & Electronic Signature WG• Remote Signature Task Force & METI’s Projects• Activities supporting Electronic Signature Adoptionand Implementation2

Japan Network Security Association Organization Chart

General Assembly
AuditorAdvisorBoard of Directors

Secretariat

Board of Secretaries

Committee

Social Activities
Committee

Identity
ManagementWorking Group

Western Japan
BranchISEPA

ISOG-J

Information Security Education
Providers Association

Information Security Operation
Providers Group Japan

Survey andResearch CommitteeStandards Investigation
Committee

Education
Committee

PKIInteroperability
Working GroupElectronic Signature
Working GroupSecure
Programming
Working Group

Standard drafting TF
Member company: 191 companies (as of May 16, 2017)

Skill-up TF

JNSA Interactive
Committee

U40
Committee

Globalization
Action Backup
Working Group

Remote Signature TF
3

Relationship with other organizations
ETSI/TC ESIAssociate Member

JNSA
Electronic Signature
Work Group
ISO/TC154

ExpertInternational Organization for Standardizationex) PAdES Profile

ISO/TC171

JAHIS
Technical cooperationex) Electronic Prescription

TBF
Partnerex) Timestamp, Trust List

ExpertDocument management applicationsex) PDF signature

ISO/SC34
Technical committee

LiaisonDocument description and processing languagesex) Long-term signature of XML

JAHIS : Japanese Association of Healthcare Information Systems Industry
TBF : Time Business Forum in Japan Data Communications Association

ETSI/TC ESI #42 meetings in Austria
4

METI Projects involving JNSA International Standardization Project• Standard drafting TF's responsibility• ISO 14533-3:2017, Part 3: Long term signature profiles for PDF
Advanced Electronic Signatures (PAdES)

 Remote Signature Project• Remote Signature TF's responsibility• In Japan, Electronic Signatures and certification businesses
must adhere to the Electronic Signature Act (Act # 102),
Electronic Signature Law Study Group studies all aspects ofRemote signature• During 2016, we examined Remote Signature basic functions
and security requirements

METI : Ministry of Economy, Trade and Industry

5

Japanese Law as pertains to Electronic Signatures
Electronic Signatures and Certification Business
Act No. 102 - May 31, 2000
Article 3 Any electromagnetic record that is made in order toexpress information (except for that prepared by a public
official in the course of duties) shall be presumed to beestablished authentically if the Electronic Signature (limited tothat which can be performed by the principal throughappropriate management of codes and properties necessaryto perform this) is performed by the principal with respect toinformation recorded in such electromagnetic record.
Japanese Law Translation
http://www.japaneselawtranslation.go.jp/law/detail/?id=109&vm=04&re=01
6

Electronic Signature Law Study Group• The Electronic Signature Law Study Group holds a meeting on theElectronic Signature Act quarterly• In 2015 and 2016 the group examined remote signatures• Last year we implemented the following:

Ministry of Economy,
Trade and Industry

Ministry of Internal Affairs
and Communications

Electronic Signature Law
Study GroupJNSA Electronic Signature WG
Remote Signature TF

Ministry of Justice

Document review
e-sig Expert, user

Document editor
Electronic signature WG
Members comprise:
Remote signature operators,
HSM vendors, cloud vendors,security vendors, etc.
(17 companies participated)

7

20 Items to consider for remote signature
I. Player / Role

II. Remote Signature / Provider

IV. Registration Phase

1

Players and roles of remote signatures2

Requirements and assurance levels of remote signature providers

3

Consideration of the level according to the use application of the signature

4

Remote signature installation environment

5

Basic Functional component in Remote Signature

6

User registration method

7

Installation of Signing key of user (* generation and import of Signing key)

8

Protection measures for user's Signing key

9Presence or absence of backup function of Signing key

10 Requirements for signing instructions
11 User authentication method
12 Protection measures for user information and Signing key information
V. Signature Phase

13 Signature function requirement
14 Presence or absence of transmission function of signed data
15 Presence or absence of signature generation log function
16 Presence or absence of signature verification function
17 Confirmation of data to be signed by the user
18 Distributed signature processing in user environment

VI. Other

19 Application of long-term signature
20 Relation to Electronic Signature Law

8

1. Players and roles of Remote Signatures• Assumed remote signature pattern (Including concrete examples)• A single company carries out the part surrounded by red.
• By implementing it in a single company, efficiency of user registration can be expected. But
governance is necessary.

Pattern 1

Pattern 2CAUser

CSP

User

CSP

Pattern 5

CSP
RS

User

Pattern 6CACAUser

CSP
RS

CSP

RS

RSCAUserCACARS
Pattern 4

Pattern 3User

CSPRS
9

7. Installation of Signing key of user
• It is about importing and generating signing keys. The user registers theuser in the remote signature and sets the signature key to be used.
Key Import(Key Generated by user)

Key Import(Key Generated by CA)

CAUserKey Import

CAUserRS

Key Generation by RS

Key Import
RSCAUserRS

Key Generation10

5. Basic Functional component in Remote Signature
Credential Service Provider
Authentication Credential

Certification Authority
Key pair Generation / Certificate Signing Request

Remote Signature
Signature application (SAP)
Authentication request

Signature request (Key-ID)

SignerData to be signed
Signing key Activation data (PIN)

Signature data

Signature Verification Result

User
Authentication
function

Hash Value
Generation
function
Signing key
Activation
function
Signatureformatconstruction
function

Signature
Verification
function

User
Information
management
function

User
Information DB(user ID, key ID, etc.)

Key pair Generation
functionCertificate
signing / issue
Request function

Signing key
Registration
function

Signature function
Signing key
management function
Signing key DB(key ID, Signing key, etc.)

Signing key
Backup function
Signature Value Generationmodule (SGM)

Signature
Generationlog function

11

5. Basic Functional component in Remote Signature• SAP : Signature Application• SGM : Signature value Generation Module
Signature application (SAP)
Signing key registration function
Certificate signing request (/issue ) function
User authentication function
User information management function
User information DB(user ID, key ID, etc.)

SignerHash value generation function
Signing key activation function
Signature format construction function

Signature valuegeneration module (SGM)
Signing key management function
Signing key DB(key ID, Signing key, etc.)
Signature function
Signing key backup function
Key pair generation function

Signature verification function
Signature generation log function

12

Registration Phase (User information)
CSP
Authentication Credential

Signature application (SAP)
Signing key registration function
Certificate signing request (/issue ) function
User authentication function
User information management function
User information DB(user ID, key ID, etc.)

SignerHash value generation function
Signing key activation function
Signature format construction function

Signature value
generation module (SGM)
Signing key management function
Signing key DB(key ID, Signing key, etc.)
Signature function
Signing key backup function
Key pair generation function

Signature verification function
Signature generation log function

13

Registration Phase (Signing Key Generation or Import)
CA
Key pair Generation / Certificate Signing Request

Signature application (SAP)
Signing key registration functionCertificate signing request (/issue ) function
User authentication function
User information management function
User information DB(user ID, key ID, etc.)

SignerHash value generation function
Signing key activation function
Signature format construction function

Signature value
generation module (SGM)
Signing key management function
Signing key DB(key ID, Signing key, etc.)
Signature function
Signing key backup function
Key pair generation function

Signature verification function
Signature generation log function

14

Signature Phase

CSP

Signature value
generation module (SGM)

Signature application (SAP)
Signing key registration function
Certificate signing request (/issue ) function
Authentication

SignerUser authentication function
User information management function
User information DB(user ID, key ID, etc.)

Signature
request (Key-ID)
Signing key
Activation data (PIN) Hash value generation function
Data to be signed Signing key activation function
Signature format construction function

Signing key management function
Signing key DB(key ID, Signing key, etc.)
Signature function

HashSigning key backup function
Key pair generation function

Signature verification functionSignature generation log function

15Result Confirmation Phase

Signature application (SAP)
Signing key registration function
Certificate signing request (/issue ) function
User authentication function
User information management function
User information DB(user ID, key ID, etc.)

SignerConfirmationof signature
resultHash value generation function
Signing key activation function
Signature format construction function

Signature value
generation module (SGM)
Signing key management function
Signing key DB(key ID, Signing key, etc.)
Signature function
Signing key backup function
Key pair generation function

Signature verification function
Signature generation log function16

Next step JP in Remote signatureIndustrie 4.0 and Society 5.0.
People and things connect. Business andservices are connected, making it more efficientand advanced. For this purpose, we consider
technologies supporting the service platform.

Cooperation with related organizations
Remote signature guidelines
・Implementation guideline
・operation guideline
・service policy etc.

Establishment of Remote Signature
consortium

JTSC
Japan Trusted Signature-service
Consortium（Tentative name）
17