Browser based digital signing for PDFand XML

Ease of Use

  • Full Control over the User Experience

    The web application developer has complete control over the look and feel of the ADSS Go>Sign Applet user interface. Ascertia provides sample source code web pages to show how a solution can quickly be deployed. The aim is to use language that are meaningful to the business and the end-user and eliminate confusing technical terms.

  • Controls Signing Location

    Often users do not know where to sign the document and end up signing in the wrong page or wrong place. The use of digital signature fields helps but even so sometimes users will sign in a field assigned for another party. ADSS Go>Sign Applet caters for these by guiding users which fields they must sign and also prevent them from signing in the wrong place. Where flexibility is needed ADSS Go>Sign Applet allows user to create the signing field anywhere the desire. screenshot

  • Enables Greater Trust

    In many cases business managers and citizens do not know how to choose the correct certificate for signing and do not wish to be asked to do this. The web application can command ADSS Go>Sign Applet to look for a specific certificate based on signer’s name, issuer name, key usage, policy or other criteria and thus select the right certificate automatically without involving the end-user. The application can retrieve details of the selected certificate to show to the user. It may also need to show messages such as ‘insert your eID card’ where no certificate exists. screenshot


Digital Signature Formats

  • Standard Digital Signature Formats

    ADSS Go>Sign Applet supports the creation and verification of all basic and advanced digital signature formats according to PDF, CMS/PKCS#7, XML DSig and all ETSI CAdES, XAdES and PAdES profiles.

  • What You See is What You Sign (WYSIWYS)

    ADSS Go>Sign Professional provides the ability to use a built-in document viewer so that PDF documents can be displayed to users within the secure confines of the applet. The user is shown a flattened PDF image before being asked to sign it. The signed document can then be re-shown to the user if required. screenshot

  • Advanced PDF Signature Support

    ADSS Go>Sign Applet supports all the different kinds of PDF signatures including: visible and invisible signatures, certifying (author) signatures, approval signatures, Adobe® CDS signatures, PAdES signatures and PDF/A compliant signatures. Note long-term digital signature formats which include embedded timestamp and revocation information are created via calls to ADSS Server to provide this evidence information.

Multiple Document Sources

  • Server Supplied Documents

    If the web application holds the document which needs signing then this can be supplied to the ADSS Go>Sign applet for local signing.

  • Local Documents

    If the end-user locally holds the document then this can be located (or fed from web page using javascript) and then signed by ADSS Go>Sign Applet before uploading to the web application on the server.

Encryption Option

  • Secure Upload

    Often end-user not only need to sign but also encrypt their documents as part of a secure upload process e.g. as part of an e-tendering response submission process. To cater for this ADSS Go>Sign Applets allows the encryption of payload using the certificate supplied by the web application.

Easy Integration

  • ADSS Client SDK

    We have made integrating advanced trust services using ADSS Go>Sign Applet so simple with our JAVA and .NET SDKs. A PHP SDK is also coming soon. These provide a very high-level API so you could be going in just a couple of lines of code. The SDKs also include plenty of source code samples and demo applications.

  • Rapid Development and Retro-fitting

    ADSS Go>Sign Applet and ADSS Server make it easy for developers to add digital signature generation and verification options to existing web pages and document workflows. All signing complexities are handled by these products using simple high level calls.

  • Reduced Application Complexity

    For visible PDF signatures ADSS Server manages the other complexities that include digital signature appearance, obtaining a timestamp, obtaining certificate chain status information. The PDF can also be Certified and locked. All these parameters are configured within signing profiles on the ADSS Server. When using ADSS Go>Sign Professional, users can draw digital signature fields. Where a digital signature field is shown the user can click within it to initiate digital signature generation. For greater control over trust the status of the digital signature is displayed based on ADSS Server decisions rather than local desktop trust decisions.

Multiple Keystore Options

  • Local digital signatures using smartcard / USB tokens

    End-users can apply personal digital signatures using locally held smartcards, USB tokens or software keys. This is an ideal solution where users already hold smartcards/tokens e.g. as part of a national citizen eID infrastructure. ADSS Go>Sign Applet supports both Windows® CAPI and PKCS#11 specifications for accessing keystores on Windows and UNIX systems. screenshot

  • Local digital signatures using roaming credentials

    ADSS Go>Sign Applet also provides an option to sign using roaming credentials. These are signing keys held within a secure container stored centrally by ADSS Server and delivered to user whenever required. User authentication is performed locally by ADSS Go>Sign Applet. A very flexible, low-cost and secure solution which provides ability to sign from any machine anywhere! screenshot

  • Unique user digital signatures on server

    Yet another ADSS Go>Sign Applet signing option is for the document to be hashed locally and then sent to the ADSS Server for signing. In this case the user’s keys are held securely on the ADSS Server within a secure HSM or encrypted database. This is very much like corporate digital signatures, but this time ADSS Server holds unique signing keys for ever user! The HSM (or encrypted database) acts a global smartcard for everyone. This approach has major cost and ease of use benefits than deploying smartcards/tokens to every user. screenshot


Centralised Verification

  • Centralised verification

    There are issues with end-users verifying documents using locally-installed software including complexity in understanding, trust anchor management and no centralised control on verification policy as well as no centralised logging. For these reasons ADSS Go>Sign Applet uses centralised verification services of ADSS Server. screenshot

  • Quality Assessments

    ADSS Server not only provides cryptographic digital signature verification capability but also performs quality assessment of the Certificate Authority policy and practises, algorithm strengths and key lengths to get an overall idea of how trustworthy a particular digital signature is. ADSS Server follows the latest PEPPOL digital signature and certificate quality rating scheme. This quality assessment results can be delivered to ADSS Go>Sign Applet. For further details read this whitepaper.

Data Leakage Prevention (DLP)

  • Securely Deliver Your Documents

    Maintain control over documents and intellectual property by keeping them secure using the built-in security of ADSS Go>Sign Applet. The web application can set the ADSS Go>Sign Applet GUI by enabling/disabling functionality no a per user/document basis. Examples include ability to sign, ability to create blank digital signature fields, ability to print, ability to save document locally etc. The document is shown as an image file so preventing cut and paste of your sensitive information. screenshot

  • Get Notification of Delivery

    Another advantage of ADSS Go>Sign Applet for document delivery is that it can prove that the document was seen by the user and if necessary also acknowledged.

Security & Admin

  • Secure communication with Server

    The ADSS Go>Sign Applet communicates with the server-side application using a secure SSL/TLS connection for authentication, confidentiality and data integrity of information exchanged.

  • Applet Digital Signature

    The ADSS Go>Sign Applet is signed to ensure it is trusted by the browser. By default this is signed by Ascertia but can be signed by the client organisation as required to ensure local trust of the applet.

Low Total Cost of Ownership

  • Modular Licensing

    Because of its modular architecture you only need to license the functionality you need today. E.g. if you need only PDF signing capability, then there is no need to license XML signing, or even PDF signature verification! This helps to ensure you only pay for what you actually use.

  • Future Proof

    It’s inevitable that business requirements change over time, but is your security server able to cope with future demand for e-trust services? With ADSS Go>Sign Applet and ADSS Server supporting the widest range of digital signature formats, document formats and PKI protocols you can be assured we already have all the bases covered. Whenever you need a new licensed module, all you have to do is update your license file.

Legal Compliance

  • Legal Compliance

    ADSS Go>Sign Applet and ADSS Server has been designed to be compliant with a range of digital signature legislation and regulatory frameworks, including EU law (EU Directive for Electronic Signatures), EU Directive for E-Invoicing, IdenTrust, US Electronic Signatures in Global and National Commerce Act (E-Sign), The Health Insurance Portability and Accountability Act (HIPAA), 21 CFR Part 11(a regulation governing the use of electronic signatures within the pharmaceutical industry), Sarbanes-Oxley Act (SOX) and others. A configurable legal statement can be shown to the user before signing using ADSS Go>Sign Applet to ensure the user understands the implications of their digital signature.

Platform Independence

  • Operating System independence

    ADSS Go>Sign is 100% JAVA applet and supported on Windows, Linux (Centos, Suse) and Solaris (X86 and Sparc). Other UNIX flavours and MAC can also be supported upon request.

  • Browser independence

    ADSS Go>Sign has been successfully test on various browsers including Internet Explorer®, FireFox, Opera and Chrome.

  • Smartcard / Secure USB token Independence

    Any CAPI or PKCS#11 crypto device (i.e. smartcard or USB token) can work with ADSS Go>Sign Applet to sign documents.

Speaks Your Language

  • Multi-lingual interface

    Localize the viewer to any language and cater to your local audience. Change the full viewer look & feel or change the tooltips and text to any language.

  • Look ‘n Feel Flexibility

    ADSS Go>Sign has been designed such that the user interface can be defined completely by the web application developer. Thus all communication with the user can be made in whatever terms are required to make it easy to use. For example a signing action button could be presented as a Sign or Confirm or Accept button in whichever local language is appropriate. Certificate selection and other interactions can be fully controlled by the application.

Copyright © 2002-2011 Ascertia. All rights reserved.

Company | Privacy Statement | Contact Us

Ascertia is a global provider of Digital Signature products and solutions that enable trust within electronic workflows. Organisations can now safely cross the final hurdle in migrating old paper-intensive approval processes to the new secure digital world. Ascertia’s Digital Signing products are designed to be easy to integrate and use in a range of business scenarios.