Il gergo, decifrato

Da AES a marca temporale

I termini della firma elettronica, in parole semplici: cosa significano e perché contano per i vostri documenti.

A

AES: A signature uniquely linked to its signer, able to identify them, created with means under their sole control and linked to the document so that any later change is detectable (Art. 26 eIDAS). In German also called FES.
Audit trail: The record of every step in a signing: sent, opened, identity verified, signed, each with its time. It is sealed together with the document, so it can be shown later as evidence.

eID: A national digital identity, such as ID Austria, that you can use to identify yourself online. swipesign accepts 20+ national eIDs for qualified signatures.
eIDAS 2.0: The EU regulation for electronic identification and trust services. It defines the simple, advanced and qualified signature levels and makes a qualified signature valid in every member state.

GDPR: The EU rules for handling personal data. swipesign stores all data in the EU, in Germany, encrypted in transfer and at rest.

Hash: A short value calculated from the document’s content. Change a single character and the hash changes, which is how any tampering after signing becomes visible.

Identity verification: Confirming that a signer is who they say they are, before a qualified signature: by video ident, with an eID app or by scanning the chip of an ID document. A person does it once and can then sign again without repeating it.

Long-term validation: Embedding everything needed to check a signature into the document itself, so it can still be verified when the certificates behind it have long expired.

NFC scan: Reading the chip of a passport or ID card with a phone. It checks that the document is genuine and is one of the ways to verify a signer’s identity.

PAdES B-LTA: The highest level of the European standard for signatures in PDF documents (ETSI EN 319 142). Certificates, revocation data and a timestamp travel inside the file, so the proof outlasts the services that issued it.
PDF/A: The archival form of PDF: everything needed to display the file is inside it, so it looks the same in twenty years. Archives, courts and authorities often require it.

QES: An advanced signature created with a qualified signature device and based on a qualified certificate. In every EU member state it has the legal effect of a handwritten signature (Art. 25(2) eIDAS).
QTSP: A provider supervised under eIDAS and listed in the EU trusted lists, allowed to issue qualified certificates and timestamps. A-Trust is one of them.
Qualified certificate: An electronic certificate a qualified trust service provider issues after verifying a person’s identity. It ties a qualified signature to that person.
Qualified timestamp: Proof from a qualified trust service provider that a document existed in exactly this form at a given time. swipesign adds one from A-Trust after every signature.

Recipient: Someone who receives a signed document or a file without having to sign it. Like signers, recipients need no account and never pay.
Redaction: Removing content from a document for good, not just covering it, before it is sent. What is redacted cannot be recovered from the file.

Safe Transfer: Sending files instead of signatures: recipients pass an identity check before they can download. Separate from signing, with the same identity mechanics underneath.
Sender: The person who sends a document for signature. They choose the signature level, the order of signers and how signers are identified.
SES: Any data in electronic form attached to a document as a signature: a typed name, a click, a scanned image. The easiest to make and the weakest as evidence.
Signer: A person asked to sign a document. Signers need no account and never pay; the sender’s plan covers it.
Signing order: The sequence in which signers receive a document: one after another, or all at once.

Template: A saved document with its fields and roles already placed, so every new round starts from it instead of being built again.

Ancora bloccato?

Se qui non trova risposta alla sua domanda, ci invii il nome del documento e che cosa stava provando a fare.