The following page gives a brief overview of the use of digital and electronic signatures in LincDoc. LincDoc has four digital signature types (or signature providers): Topaz pad signatures, LDAP signatures (authenticated), mouse signatures, mobile signatures, and one electronic signature type, clickwrap.
NOTE: it is assumed that the terms final document or generated document as used below refer to a PDF generated by LincDoc.
Topaz
A Topaz signature pad captures the user's handwriting/signature and converts it into an electronic format. This process creates an image and captures biometric data of the signature. When using a Topaz pad to sign documents in LincDoc, LincDoc will capture this image and biometric data and store it in the generated PDF document. The biometric data that is collected by the Topaz pad is also encrypted with the unsigned document. This means that not only can this method be used to verify that someone has signed the document, but we can also verify that this is the document that they signed and that the biometric data has not been tampered with.
This signature process begins after the data entry steps are complete and the user has reviewed the draft copy of the document. The following is breakdown of the steps:
The user completes the data entry process and generates the PDF form/document.
LincDoc displays the form in the document viewer window for the user to review.
Once reviewed, the user clicks on the sign button on the document viewer window.
LincDoc prompts the user for the signer of the document.
The user selects the signer and clicks OK.
LincDoc then initializes Topaz pad.
The user signs the pad.
LincDoc merges the image of the signature into the form
LincDoc stores the biometric data from the signature along with the data record.
LincDoc locks the PDF form with a digital signing certificate.
LincDoc displays the signed form in the document viewer window.
This is best illustrated in an example. Sally Jones comes into the office and sits down with John Doe (assume he is an office clerk) to complete an application. The data is gathered and the document is ready to be signed.
The preview button is clicked in LincDoc; a watermarked PDF document is generated (possibly even printed) and displayed to Sally for her to review all of the information.
Once Sally is satisfied, the sign button is clicked in LincDoc, the Topaz signature pad that is connected to John's computer is initialized and Sally signs the document.
LincDoc inserts the image of the signature into an Adobe signature field and stores the Topaz biometric information in the LincDoc database.
If the document is tampered with in any way, then anyone opening the document gets an immediate visual indication that the signature is no longer valid.
In order to validate the Adobe signature, the LincDoc Trust Certificate must be installed on the computer of the user who is validating the signature. This is a one-time, 2 step process performed inside of Acrobat Reader.
In addition, the user has the ability to upload the PDF document to the LincDoc server to run it through the aforementioned hashing validation process.
NOTE: you must have purchased the LDAP Integration Module in order to do LDAP signatures.
An LDAP signature validates the user by challenging that user for his password when he executes an LDAP signature. Once validated, LincDoc will apply a digital signature certificate to digitally lock the document. This signature process begins after the data entry steps are complete and the user has reviewed the draft copy of the document. The following is breakdown of the steps:
The user completes the data entry process and generates the PDF form/document.
LincDoc displays the form in the document viewer window for the user to review.
Once reviewed, the user clicks on the sign button on the document viewer window.
LincDoc prompts the user for the signer of the document.
The user selects the signer and clicks OK.
LincDoc then prompts for the current logged in user's password.
LincDoc will then validate that password against LDAP or Active Directory.
If success, LincDoc will digitally lock the PDF with the digital signing certificate.
If fail, LincDoc will prompt the user's password.
LincDoc displays the signed form in the document viewer window.
The mouse signature applies the same process that Topaz uses but instead of using a Topaz pad, the user simply uses their mouse to draw their signature on the signature canvas. The type of signature requires the use of an HTML5 compliant browser:
Internet Explorer 9+
Chrome 8+
Firefox 4+
Safari 4+
The following is breakdown of the steps:
The user completes the data entry process and generates the PDF form/document.
LincDoc displays the form in the document viewer window for the user to review.
Once reviewed, the user clicks on the sign button on the document viewer window.
LincDoc prompts the user to select the appropriate signer.
LincDoc displays a canvas for the user to draw their signature using a mouse or stylus.
The user must click Accept to apply the signature.
LincDoc displays the signed form in the document viewer window.
Currently, LincDoc only supports iPads for use with Mobile signatures but will be coming out with support for the iPhone, and all mobile devices that support a webkit browser. This type of signature allows the user to complete a form on their iPad and have a user sign directly on the screen of that device, as illustrated above.
The user must download and install the LincDoc Mobile iPad application. Once installed and configured with an activation key, the user is able to access the forms on their LincDoc Server.
The following is breakdown of the steps:
The user launches on the LincDoc Mobile application
The user completes the data entry process and generates the PDF form/document.
LincDoc Mobile displays the form in the document viewer window for the user to review.
Once reviewed, the user clicks on the sign button on the lower toolbar.
LincDoc Mobile prompts the user to select a signer.
Once selected, a canvas is displayed for the user to sign.
The user must click Accept to apply the signature.
LincDoc Mobile displays the signed document.
Clickwrap
Clickwrap signatures are electronic signatures that do not require a digital certificate or signature capture pad. Clickwrap signatures in LincDoc offer a simple method of obtaining electronic evidence of user acceptance to the data entered into a LincDoc form. The data entry question/answer process ensures a level of authentication that the user is who he/she says they are. This can be configured in LincDoc to collect any information including:
User's name.
User's personal information, such as mother's maiden name, can be used to verify identity.
Statement to show that the user certifies and agrees with the document they are signing.
Once the user provides this information, the data is written to the document, and cannot be changed because it is written to an image format or a secured, read-only PDF document.