Online%20Form%20Signing%20Solution

1
E-Lock FormSeal
Online Form Signing Solution
www.elock.com
2
Introduction

• E-Lock FormSeal is a Web-based, form signing
  solution which can be integrated with any
  existing web application without disturbing the
  actual workflow of the application
• Integrating FormSeal with the application
  provides authenticity and integrity to the web
  transactions by allowing users to digitally sign
  the forms(HTML/Oracle) they submit
• FormSeal is a platform independent solution and
  supports both Windows and Open source platforms
  like Linux,Solaris etc
• FormSeal archives all the transaction data
  together with the HTML page contents,images,inform
  ation filled-in by the user and any file
  attachments. This allows exact re-creation of the
  page as it was signed by the user long after the
  form was signed. This provides strong
  non-repudiation to both users and application
  provider

3
FormSeal Features

• Platform independent digital signature tool for
  signing HTML/ Oracle Forms
• Supports server based signing of generated Oracle
  PDF reports
• Based on client-server architecture
• Can be easily integrated into any Web application
  JSPs, struts, ASPs, .Net
• Supports IE, Netscape, Mozilla etc. as browsers
  as well as certificate stores
• Allows simultaneous selection of IE and Netscape
  certificates through a single interface
• Uses any X.509 certificate for signing
• Signed data is maintained in PKCS 7 format (as
  per industrial standards)
• Supports signing form data with attachments
• Ability to support multiple signatures, i.e. more
  than one signature by one user or more than one
  user signing the same form

4
FormSeal Features

• Supports Smart cards, USB tokens, PFX / PKCS12
  files
• Client signs Form text, images, user data and
  attachments
• Server verifies signature for certificate
  validity and data integrity and archive the
  transaction
• Ability to exactly re-create what the user saw
  and signed, long after the application or the
  server is gone
• Supports Windows and non-Windows platforms on
  both client and server

5
FormSeal Workflow
FormSeal Workflow
Client connects to Server Automatic detection of
Client component
1.
Client fills form and clicks the Submit button
2.
The FormSeal signing engine is initiated and
the client can choose a digital certificate to
sign data
FormSealClient
3.
The FormSeal Server component receives the
signed data and performs verification and
validation checks
FormSealServer
4.

• Following Validation done
• Data integrity verification
• Signer certificate expiry status check
• Signer certificate trust status check
• Signer certificate revocation check

The FormSeal Server component passes the
verification information to the backend which
sends a customizable Receipt to the user
conveying the result of transaction and processes
the data further
5.
6
FormSeal Digitally Signing of attachments
FormSeal also supports digital signing
attachments with the form. Any attachment that
you choose to submit will get digitally signed
along with the other information in your form.
7
FormSeal Transaction Receipt and Verification
Result
After verification and validation of users
submitted data, FormSeal server component accepts
it and returns a transaction receipt to the user
Transaction Receipt
Verification Result
8
FormSeal Server components

• The server component needs to be installed on the
  same server machine as the web application server
  if FormSeal is to be integrated with the
  application. Other wise FormSeal can be hosted as
  a separate application.
• There is no need for a dedicated server
• The server component also requires a database.
• The server component is written entirely in JAVA
  and works with any JAVA enabled web server

9
FormSeal Client components

• Client component available for Windows and
  Unix/Linux clients
• The Windows client component is an ActiveX
  control, auto - downloaded as CAB file
• The Unix/Linux client component requires JRE
  installed on the user's machine
• The client component lists certificates from both
  IE (in windows) as well as Netscape browser
• Smart Card support is also present

10
FormSeal Server Tested Environment

• E-Lock FormSeal Server has been tested in the
  following environments
• Platforms
• Windows, Linux and Solaris
• Web Servers
• TomCat, WebLogic, Oracle 9i Application Server,
  WebSphere, JBoss
• Databases
• MS Access, SQL Server, Oracle, MySQL and PgSQL

11
FormSeal Client Tested Environment

• E-Lock FormSeal Client has been tested in the
  following environments
• Platforms
• Windows, Linux and Solaris
• Browsers
• IE 6.0 and above
• Mozilla FireFox 1.5 or above
• Netscape 6.0 and above

12
FormSeal Database Support

• FormSeal supports a variety of databases such as
• MS Access,
• SQL Server,
• Oracle,
• MySQL and
• PgSQL
• For HTML signing, the HTML Form page code (the
  user presentation), the
• data submitted, attachments, images and
  signatures are stored in the
• database and can be retrieved any time later to
  recreate the exact form and
• the data that was submitted by the user and can
  be verified.

13
Case Study Directorate General of Supply and
Disposal -India
Business Challenge E-Lock Solution Benefits
DGSD required the Digital signing solution to sign the order applications generated in the PDF format, containing following features Digitally sign PDF reports Sign single page forms or multi page forms Validate certificates for signing Oracle forms and reports Digitally sign the reports on the server before they are sent to the clients PKI based form signing and file signing software components and digital signature verification software components Allow only those who have signed forms to sign reports E-Lock provided its form signing solution-FormSeal with enhancements as a solution to DGSD FormSeal was customized to integrate with the existing application to enable users to sign Oracle Forms and PDF reports (that are generated by Oracle Reports) The main function of FormSeal was to sign-enable the Oracle forms so that users could sign them at their end (i.e. through client component/machine) and then upload them to the server. Configuration components were also provided to create multiple security configurations and signing/verification of files on the server side. Compliant solution for the e-Procurement Easy digital signing for the Government agencies via browser to authenticate the data submitted to DGSD Integration of the signing and verification solution in the present IT infrastructure without disturbing the workflow making the infrastructure more efficient. Verification of the signed data to authenticate the data integrity User Friendly facilitating even the novice users to sign the orders
14
Case Study Commercial Bank of Romania
Business Challenge E-Lock Solution Benefits
The process of Money Transfer and Loan application and approval provided by the bank where highly paper intensive and time consuming. The Bank had the software for applying for loans and money transfer online but faced the challenge of providing ability to their clients to digitally sign the information they submitted through this online system. Also the approvals for these applications by their staff were to be in an electronic format. E-Lock recommended and implemented FORMSEAL as a solution for BCR FormSeal was integrated into the online software application of BCR without disturbing the present workflow   This enabled BCR clients to securely sign and authenticate the information they provided in the online application.   With the FormSeal verification component BCR staff was able to verify the information provided by the clients online and approve the loan application by signing it electronically. Reduced Processing Time as the information arrives nearly instantaneously, regardless of distance Increased Productivity and Business with more satisfied customer Making the Process Paperless and saving overheads, once set up, the cost of sending application is virtually nothing no stamps, no post room, no envelopes, no fax machine, no fax paper. Secure application verification of the applicant information
15
FormSeal and Business Application
The following are common processes and workflows
where FormSeal can be utilized to bring online
digital signing and verification functionality to
web applications.
Banking applications Mortgage applications
Loan Applications and Loan Processing Online Accounts and Money Transfers
Online Purchase Orders Online Contracts
Online transactions between organizations and their partners Online transactions between organizations and trading parties
Online internal transactions between organizations and their employees Insurance Forms and Claims
Real Estate Transactions Legal Agreements
Tax Forms Submission Human Resources Management
Online Bid Submissions Supply chain management applications
16
For more details please write to us at
info_at_elock.com For the Online FormSeal demo
please visit http//www.elock.com/demo_reg.asp?Pr
oductFormSeal Thank You!