Friday, July 15, 2011

Digital v. Electronic Signatures: Both Are legal, But only 1 is Secure. Go Digital. Save Paper.

An electronic signature is defined as an electronic sound (e.g., audio files of a person's voice), symbol (e.g., a graphic representation of a person in JPEG file), or process (e.g., a procedure that conveys assent), attached to or logically associated with a record, and executed or adopted by a person with the intent to sign the record. An electronic signature is easy to implement, since something as simple as a typed name can serve as one. Consequently, e-signatures are very problematic with regards to maintaining integrity and security, as there is nothing to prevent one individual from typing another individual's name. Due to this reality, an electronic signature that does not incorporate additional measures of security (similar to a digital signature, described above) are considered an insecure way of signing documentation.

A Digital signature (standard electronic signature) takes the concept of traditional paper-based signing and turn it into an electronic "fingerprint.” This "fingerprint,” or coded message, is unique to both the document and the signer and binds both of them together. The digital signature ensures the authenticity of the signer. Any changes made to the document after it is signed invalidate the signature, thereby protecting against signature forgery and information tampering. E-signatures help organizations sustain signer authenticity, accountability, data integrity and non-repudiation of electronic documents and forms.

No comments: