Assurance of authenticity, integrity, non-repudiation and true confidentiality of information: these are the reasons why you need to understand what a checker is for digital signature.
From this article, it will be clear what a digital signature validator is. Brazilian Public Key Infrastructure (ICP-Brasil), how this verification is done, and how to confirm the validity of a digital signature. want to use your digital certificate and digitize your routine safely and legal validity? Here's everything you need to know.
What is a signature verifier
The signature verifier is a platform specialized in validating digital signatures, capable of verifying compliance with ICP-Brasil signature rules and policies.
This service is used, above all, to guarantee the correspondence with the ICP-Brasil standards, based on the definitions of the MP 2.200-2/2001, as well as the international recommendations of the respective digital signature standard used.
Why invest in digital signature security?
In the midst of a generation of interactivity, constant connectivity and portability, technological simplification gains new features with the aim of making the digital environment even safer.
To interact with social media, internet banking, corporate and government websites, for example, the user needs to adopt the use of login as a means of personal authentication, as well as a password or biometrics. Still, cases of cyber attacks, data theft, signature and identity tampering continue to grow.
According to digital security company Sonicwall, ransomware attacks, which can be translated as a data hijacking, shot up 62% between 2019 and 2020, while Brazil was listed as the ninth country with the highest number of such episodes.
Then how to ensure the security of your information? Through the ICP-Brasil digital certification, qualified to attest and preserve the user's identity in a digital environment that uses internationally recognized encryption standards for their technological security, and validation of the digital signature.
Advantages of the validator for companies and individuals
O ZapSign digital signature authenticity checker guarantees transparency, immutability and irrevocability for transactions of electronic signature occurred in platform.
There is also the ICP-Brasil digital signature verifier or validator that analyzes the validity and compliance based on the Brazilian Digital Signature Standard (PBAD), created from the DOC-ICP-15 of the National Institute of Information Technology - ITI, in order to guarantee that the respective signature is 100% adequate so that it has legal legitimacy.
A digital signature with an ICP-Brasil certificate is a device that recognizes the sender of a given electronic message. This technology is recognized by the Brazilian Judiciary as well as handwritten documents with a notarized signature.
In addition to being protected with the same legal guarantees - more efficiently and without bureaucracy -, the digital certificate ensures secure or unambiguous identification and authentication of the author of a message or transaction.
It is worth noting that this technology confers a series of advantages, such as the possibility of forming agreements and signing digital contract. Furthermore, the digital certificates of the ICP Brasil standard can be used to encrypt documents, messages or transactions and thereby also guarantee the confidentiality of these documents.
Another very important point is that digital certification streamlines processes, which is now immediate, reduces costs and increases security.
Is the digital signature verifier really necessary?
If there is already a certificate that regulates and promotes a high-security digital transaction, why is the digital signature validator indispensable?
When a document is signed with a digital certificate, it becomes impossible to change any validated information, as its content is sealed by encryption. As a result, signature verification begins by evaluating the integrity of electronic transactions.
In addition, the ICP-Brasil standard digital certificates allow signing in electronic transactions, guaranteeing authenticity (with a secure identification process for certification of an individual or legal entity), integrity (preserving data and documents without risk of alteration), -repudiation that the Certification Authority can no longer deny the authorship of this digital certificate and the confidentiality that ensures protection in operations against unauthorized access.
On the other hand, as the digital signature is a data structure embedded in the document that is not visible. Given this scenario, it is necessary to use the digital signature verifier to identify any attempt to circumvent the security of the digital system and confirm the validity of the certificate and legal certainty.
⚠️ Also check out these related articles ????
➡️ ICP-Brasil: how the Brazilian National Digital Certification System works
➡️ How to sign contracts on WhatsApp electronically
➡️ What is a digital contract and how to adopt one for your company
Criteria investigated by the validator
When a digital signature follows the standards of ICP-Brasil, in addition to the original copy, the signed copy containing the following main information is delivered:
- holder's public key;
- holder data (such as name and email, for example);
- certificate validity period;
- name of the Certification Authority (CA) that issued this certificate
- the serial number;
- electronic signature of the CA that issued that certificate.
In detail, the verification process is related to the verification of the items listed below:
document integrity
When a file is signed with a digital certificate, it is no longer possible to change the data contained therein, since its content is locked by encryption. Therefore, the digital signature verifier assesses the integrity of the document, noting if there were any modifications not authorized by the signatory after signing.
Digital signature integrity
Here, the cryptographic digest or hash of the original document with the cryptographic summary of the document that was encrypted by the signer through the public key of the signer's digital certificate. It will be possible to assess whether the cryptographic summaries are the same and thus confirm (or not) the integrity of the signature.
Certificate validity
The validity of the digital certificate used in the signature is also examined to ensure that it has not been revoked. The certificates of the ICP-Brasil process are divided into:
- A1, A2, A3 and A4 (certificates for digital signature that confer authenticity, integrity and non-repudiation of electronic documents);
- S1, S2, S3 and S4 (Secrecy certificates are used to encrypt documents, messages or transactions, ensuring the confidentiality of information);
- T3, T4 (Time Stamp certificates).
These types of certificates have the maximum validity period (in years) different from each other, being one (1) year for A1 and S1, two (2) years for A2 and S2, 5 years for A3, S3, T3 ( although they are commonly issued with three years, the maximum valid period is up to 5 years).
Finally, A4, S4 and T4 can have a maximum validity period of 11 years in the case of elliptic curve algorithms or 6 years in the case of other hierarchical chains.
Basically, the digital signature verifier will compare the document's signature date with the certificate's expiration date.
Trusted Certification Authority
When we talk about the official digital certification process in Brazil, it should be noted that there is a root certification authority (AC-RAIZ), the ITI, responsible for certifying the credible and appropriate Certification Authorities (CA) for ICP-Brasil. These public or private entities are responsible for issuing, distributing, renewing, revoking and managing digital certificates for the user.
time stamp
Finally, it is imperative that the signature date and time confirmation come from a trusted third party. This is possible through the Timestamp and is one of the elements evaluated by the digital signature to validate it as credible.
This information reflects data from authorized sources, such as the National Observatory or the National Institute of Information Technology, and eliminates the ease of manipulation of the date and time, as well as the possibility of repudiation. Therefore, this is a fundamental tool to increase information security and prevent fraud in the process.
How to use the ICP-Brasil digital signature verifier
In addition to playing the role of root certification authority, the ITI – a federal agency linked to the Civil House of the Presidency of the Republic – is responsible for certifying cryptographic equipment, standardizing the sector and fighting fraud.
To verify the ICP-Brasil digital signature, go to service page.
In the common documentation for all cases, the file will be submitted for verification of compliance (files prepared in CAdES, XAdES and PAdES formats are accepted). Refers to the file with electronic signature which you want to submit to the compliance check.
When submitted to the ITI verifier, the result of the verification of a digitally signed file with ICP-Brasil certificate may result in the following feedbacks:
- approved (signature in accordance with regulations);
- disapproved (subscription does not follow the established regulations);
- undetermined (insufficient information available to validate or invalidate digital signature).
Did you like to know the importance of the digital signature and how to confirm the validity of an electronic signature? Share this article so that digital freedom and security are spread.
