Cloud Signature Consortium Update
Andrea Valle

JT2A Meeting – 7th November 20181

Improving and simplifying Digital Signatures• Provide highest Integrity and Authenticity to an electronic document.
• Meet compliance with the main regulatory and industry requirements.
• Allow users to complete digital signing anytime, anywhere and on any platform:web, mobile, desktop.

2

© 2018 Cloud Signature Consortium. All Rights Reserved.

Meet the Cloud Signature Consortium
The Cloud Signature Consortium was originally founded in 2016 by an international
cooperation group of industry and academic experts, including solutions, technology
and trust service providers


Promoting cloud-based Electronic Trust Services.

Design a common architecture and building blocks to facilitate their interactionDevelop technical specifications for protocols and APIs
to make these interactions easy and interoperable.



Publish technical specifications as open standards.

© 2018 Cloud Signature Consortium. All Rights Reserved.

4

Solving the Digital Signature challenges• Define a unified and open standard for cloud-based digital signatures.
• Solve the issue with smart cards and USB tokens that only work on desktop computers.
• Create a network of specialized Trust Service Providers focusing on solutions.
• Combine highest security with powerful document intelligence for business agility.

Document
to be signedDocumentof record5Current activities


In January 2018 the Consortium became a Not For Profit AssociationAcquired legal personality to support membership expansion and advocacy worldwideCooperation
Establishing a Cooperation Agreement with ETSI to allow mutual exchange of contributions for thedevelopment of standards for trust services.

The CSC API specification is referenced in ETSI TS 119 432 “Protocols for remote digital signaturecreation”

Active cooperation with Government agencies involved in public policies about remote signatures.

Making the CSC API V1 Specification publicly available
Draft available at: https://cloudsignatureconsortium.org/specifications

JSON schema



OpenAPI schema© 2018 Cloud Signature Consortium. All Rights Reserved.

6

The Members
Adobe
USA/Ireland
Asseco Data Systems
PolandBuyPass
NorwayCertinomis Docapost
FranceCertSign
Romania
DigiCert
USA
D-Trust/Bundesdruckerei Germany
eMudhraIndia
GMO GlobalSign
USA/Japan
KPMG
NorwayInfoCert
Italy
Intarsys
Germany
Intesi GroupItaly
Notarius
Canada
QuoVadis WiseKey
Switzerland/Benelux
SafeLayer
Spain
SeikoJapan
Technische Univ. GrazAustria
Trans SpedRomania
Universign
FranceValidated IDSpain
Worldline ATOSFrance© 2018 Cloud Signature Consortium. All Rights Reserved.

7

Joining the Cloud Signature Consortium
The Cloud Signature Consortium is a technical communityJoining the CSC means becoming part of an active community of adopters and endorsers:






Service Providers, Solution Providers, Technology Providers, System Integrators, Consultants, Auditors.

Contribute to the development of the standard:Influence and drive strategic directions

Benefit from early access to API specifications.

Marketing initiatives, Public policies

Conformity CheckerThe Consortium has developed a Conformity Checker software to help testing service
implementations for interoperability and performance analysis.

https://cloudsignatureconsortium.org/contacts© 2018 Cloud Signature Consortium. All Rights Reserved.

8

A quick look into the CSC Standard© 2018 Cloud Signature Consortium. All Rights Reserved.

The CSC Technical Specifications in a nutshellThe CSC Specification V1 covers architectures, protocols and APIs for Remote Signature Creation


Web Service API based on REST protocol and JSON data-interchange. Modern and easy to implement.

Designed for growth. Self-discovery capacitySupports modular services, in line with the mission/capacity of providers and consumers.

Services may implement only a particular subset of the API. Clients can easily discover the supported APIs.

Native support of client and user authentication


Covers multiple implementation contexts: desktop and mobile apps, cloud-based and on-premise services.

Supports Basic/Digest auth, TLS, OAuth, SAML, OpenID Connect.

Flexible support of credential authorization mechanismsSupports static secrets, synchronous and asynchronous OTP, OAuth, SAML, OIDC.

Multi-Factor-Authorization can be obtained by combining multiple mechanisms.

Designed to support eIDAS requirements and CEN / ETSI standards


But flexible to support a broader set of requirements for Global adoption.

© 2018 Cloud Signature Consortium. All Rights Reserved.

10

Standardization Roadmap© 2018 Cloud Signature Consortium. All Rights Reserved.

Standardization roadmap
 Expand the API to support additional Trust ServicesCore API for Cloud Signatures (Remote Digital Signatures)
Identity Verification and Authentication
Certificate enrollment automation
Signature validation and augmentation
Long-term Preservation

 All future services will benefit from a common API framework and unified designClient and user authentication
Flexible resource authorization
REST+JSON API
Open Standard and interoperable
Privacy by design© 2018 Cloud Signature Consortium. All Rights Reserved.

12

© 2018 Adobe
Cloud Signature
Inc. All Rights
Consortium.
Reserved.
All Rights Reserved.

13

© 2018 Cloud Signature Consortium. All Rights Reserved.

© 2018 Cloud Signature Consortium. All Rights Reserved.

Adobe Sign adopts the CSC specifications


Adobe Sign implements the preliminary V0 of the CSC specifications
Works from any laptop or mobile device, using a web browser or dedicated app

Supports OAuth for user-centric authentication

Supports ETSI standards for Advanced and Qualified SignatureSupports ETSI PAdES-B-LT for long term validity. Expanding to support PAdES-B-LTA

The CSC advantage
A new CSC provider can be onboarded in 2 working days (Configure and Test)

Authentication and authorization mechanisms are under the control of the Provider



Unique market coverage for the Enterprise market
Work with multiple providers supporting multiple Regions and languages

Wide support of operational models

Wide industry and regulatory compliance (e.g. Pharma / Finance)© 2018 Cloud Signature Consortium. All Rights Reserved.

16

Adobe Sign Cloud Signature Demo

© 2018 AdobeCloud Signature
Inc. All Rights
Consortium.
Reserved.
All Rights Reserved.

17

© 2018 Cloud Signature Consortium. All Rights Reserved.

Click the signature field to start signing• Fill in data fields
as needed.
• Click on thesignature field toapply the digitalsignature.

© 2018 Adobe Systems Incorporated. All Rights Reserved.

19

Select your Provider• Select the CSC
Provider as needed.
• Currently available
providers:•••••••••

AssecoBankID Sweden
BankID Norway
GlobalSign
InfoCert
Intesi GroupSeikoTrans Sped…more coming soon!

© 2018 Adobe Systems Incorporated. All Rights Reserved.

20

Authenticate with your Provider• Authenticate with thechosen Provider usingOAuth.
• Supports Single Sign Onfor Enterpriseenvironments© 2018 Adobe Systems Incorporated. All Rights Reserved.

21

Configure and Preview your signature• Preview the visualpresentation of yourdigital signature.
Shows how it willappear in the final
signed agreement.
• Add a Signing Reason
if needed.

© 2018 Adobe Systems Incorporated. All Rights Reserved.

22

Apply the digital signature to the document• Complete any otherrequired form fields.
• Accept the terms andconditions asrequired and press
the Click to Sign
button.

© 2018 Adobe Systems Incorporated. All Rights Reserved.

23

Authorize the signature• Enter the authorization
data that protects theDigital ID (e.g. PIN/OTP).
• Also supports otherauthorization factors viaOAuth.
• A Qualified Timestampis also automaticallyapplied as a proof ofexistence and to obtaina Long Term Validitysignature.

© 2018 Adobe Systems Incorporated. All Rights Reserved.

24You have successfully signed the agreement!
• Your Cloud Signature
has been applied
successfully.
• The signed document
is archived forunlimited time.
• You can download a
copy of your signed
document whenneeded at any time.

© 2018 Adobe Systems Incorporated. All Rights Reserved.

25

A look into Adobe’s 2019 Roadmap©
2018 AdobeAdobe Systems
Inc. All Rights
Reserved.All Rights Reserved.
© 2018
Incorporated.

26

Adobe’s Cloud Signature Roadmap


Adobe Cloud Signature Partner program

Co-sell and co-marketing opportunity for TSPs

Develop custom solutions with Adobe Sign APIs

Support of OAuth for signature authorization

Add Cloud Signature support to Adobe Acrobat and Reader

Gives the Provider full control of the authorization process
Create remote signatures from the ubiquitous desktop applications with Zero Footprint Setup

Expand Cloud Signature services with Dynamic Identity Verification
Currently supporting multiple eID schemes in Europe, extending to other eID schemes (e.g. My Number in Japan)

Simplified integration with Corporate Identity Services with dynamic certificate generation.

User Experience enhancements



Onboard additional Trust Service Providers© 2018 Adobe Systems Incorporated. All Rights Reserved.

27

Thank you!
Andrea Valle
avalle@adobe.com© 2016 Cloud Signature Consortium. All Rights Reserved.