Not to be confused with digital signature. The electronic signature is a legal concept, the electronic equivalent of a handwritten signature, where a person accepts the content of an electronic message through other valid electronic means. Examples:
Signing with an electronic pen by using a credit or debit card at a store.
Checking a box on a computer, machine or applied with mouse or finger on a touch screen.
Using a digital signature.
Using username and password.
The electronic signature in turn can have different techniques to sign a document and include the following: secret code or entry: the need for a certain combination of numbers or letters that are known only to the owner of the document, or we all use, for example in ATMs, it is the famous PIN (Personal Identification Number). Methods based on Biometrics: access the document is performed by physical or biological mechanisms of the user or owner identification document. The form of identification involves comparison of physical characteristics of each person with a known pattern stored in a database. Biometric readers identify the person making it (hands, eyes, fingerprints and voice). In the development of message encryption, we come to what is known as cryptography. This is a system of coding a text with key confidential and complex mathematical processes, so incomprehensible to the third document known if the decoding key, which lets you view the document in its original form. Hence it is that there are two types of cryptography:Â
secret or symmetric key: the parties in the two encryption and decryption processes share a common pre-agreed key. Must be known only by both sides to prevent a third party to the transaction can decrypt the message transmitted and thus will break down all security system.Â
For this reason the system of asymmetric key or double key, public key and private key emerged. This system was developed by researchers at Stanford University in 1976. As its name suggests the system has two keys: one is only known by the document author and the other can be known by anyone. And while these two keys are related mathematically by an algorithm, it is not possible through public key, the private key known, at least in the current technological standards.
An electronic signature creates an audit trail that includes verifying who sent the document signed and stamped with the date and time.
According to the Law 59/2003 of electronic signatures, in Spain, the electronic signature is the set of data in electronic form, attached to or associated with other, that can be used as a means of identifying the signatory.
According to Directive 1999/93 / EC of the European Parliament and of the Council of 13 December 1999 establishing a Community framework for electronic signatures, an electronic signature is data in electronic form attached to other electronic data or logically associated with them serve as a method of authentication.
The advanced electronic signature is an electronic signature that identifies the signer and detect any subsequent change in the signed data, which is linked to the signatory only way and the data relates and has been created by means that the signatory can maintain under its exclusive control.
Regulations in different countries
Colombia
Law 527 by dela which defines and regulates the access and use of data messages, electronic commerce and digital signatures was adopted on 18 August 1999. This standard provides a definition for digital signature âas a value Numerical that adheres to a data message and, using a known mathematical procedure, linked to the key initiator and the message text to determine this value has been obtained exclusively with the key initiator and the initial message has not It modified after completing conversion. â
While there is no explicit definition of electronic signature, Law 527 provides that where any rule requiring the presence of a signature or set certain consequences in the absence thereof, in relation to a data message is deemed satisfied if that requirement you have used a reliable and appropriate method to identify data originator of the message and check that the latter has its approval. This description can encompass what in academic terms is defined as electronic signature.
By Decree 1747 of 2000 they were regulated in detail aspects of certification bodies, certificates and digital signatures. At present there are three (3) open certification entities.
European Union
The internal market of the European Union is an area without internal frontiers in which the free movement of goods is ensured. They should meet the specific essential requirements for electronic signature products in order to ensure free movement in the internal market and to build trust in electronic signatures.
In that sense Directive 1999/93 / EC sets a common framework for electronic signatures which culminated with the transposition of the Directive to different national laws of the member countries.