Signing your name on the dotted line, online
By Bill Scales, BuyerZone.com Research Associate
January 10, 2001
When President Clinton and Congress passed the Electronic Signatures in Global and National
Commerce Act (or E-Sign) last June, it seemed as though the Internet was going to eliminate
yet another reason to have to leave the office. Under this legislation, documents signed
and verified "electronically" would be legal and binding, allowing people to forgo having
to physically sign a document.
If this sounds too good to be true, it's because - at least for now - it is. While
legislation has mandated that online contracts signed electronically would have the same
legal force as paper contracts, the usual security concerns that arise whenever you are
dealing with confidential information moving over the Internet, e-mail, or even a company
network still exist. The bill didn't designate a standard technological protocol for
signing documents electronically, so to date, there are a variety of electronic signature
options but no universal standards or regulations when it comes to security.
The other problem is a lack of compatibility between the various available technologies.
In other words, unless both the person seeking a signature and the person providing one
use the same company's technology or software for electronic signatures, documents will
still need to be signed the old-fashioned way.
That is not to say your business could not benefit from electronic signatures right
now, though. There are a number of technologies that might help with your business's
day-to-day tasks.
Digital signatures
A digital signature (not to be confused with "electronic signature") encrypts a document
in such a way that those who decrypt it can verify who sent it. Although there are multiple
ways of encrypting a document, the most common is through public key infrastructure (PKI).
With the popular public-key method, you create a lock with two unique keys - one public,
one private. The public key, copies of which you can distribute to any number of people,
is used to "lock" a document intended for you. This document can only be unlocked by
using the matching private key, which is held by you. Within an office, this technology
can be useful for signing expense reports, time sheets, and other HR documents.
Smart cards
Smart cards are also used to verify the identity of anyone trying to open a document
or message. They are small cards that are used to organize passwords and user information.
Because only a select group of people have access to the document, it is easier to
verify that someone has seen and approved the document. Security can be an issue, though.
Cards can be lost or stolen, and identities can sometimes be forged. And not all computers
come with smart card capability, so you may need to equip your computer to handle this
technology. Smart cards can also be used to access sensitive documents, files, and
information that are on your company's network.
Biometrics
Biometrics refers to any method of closely analyzing physical attributes, like a handwritten
signature or voice, for example. There is software that works in conjunction with a
writing tablet and pen that analyzes signatures and verifies user identity.
If you're interested in electronic signature technology that will allow you to sign
any and all business documents without having to leave your desk, though, then it is
probably best to sit tight for now. Without a universal technological standard for electronic
signatures in place, your business could still be vulnerable to looming security concerns.