File encrypt, sign and validate any type of file or folder

With File Sign&Seal you can sign and/or encrypt any type of file (e.g. Word, Excel, PDF, Visio, EXE, JPEG, etc.), multiple files or whole folders. It works very much like a ZIP utility but providing advanced digital security as well as compression.screenshot

Smart Card & USB Token Support

If you need strong protection for your signing keys and the ability to protect files from any PC, then File Sign&Seal offers full hardware-based signing and encryption capability (using a PKCS#11 interface).screenshot

Controlling Signing Order

The original signer of a document can specify further users who are required to sign the same document as part of a sign-off process within your organization or with external customers, suppliers or partners. File Sign&Seal then ensures that only those identified users are then allowed to sign and in the order specified. Anyone who opens the archive can immediately see who has signed-off and who still needs to sign the document.screenshot

Multi-Party Signing

Any number of users can countersign the same File Sign&Seal archive. Each signer's information is maintained separately and verified every time an archive is opened.screenshot

Legally Compliance

File Sign&Seal has been designed to be compliant with a range of digital signature legislation and regulatory frameworks, including EU law (EU Directive for Electronic Signatures), EU Directive for E-Invoicing, IdenTrust, US Electronic Signatures in Global and National Commerce Act (E-Sign), The Health Insurance Portability and Accountability Act (HIPAA), 21 CFR Part 11(a regulation governing the use of electronic signatures within the pharmaceutical industry), Sarbanes-Oxley Act (SOX) and others. A configurable legal statement can be shown to the user before signing to ensure the user understands the implications of their digital signature.

Auxiliary information

When signing, it is possible to add signing reason, signer’s location and any additional comments that the signer wishes to pass to the recipient. Hand-signature images or company logos/seals can also be included as part of the signature.screenshot

Strong File Encryption

File Sign&Seal provides a range of file encryption algorithms including 3DES and AES with a key size of 256 bits. Digital signatures can be produced with keys of 1024-bit, 2048-bit size or even larger.screenshot

PKI Compliance

File Sign&Seal implements the following PKI standards:

• Signature generation and verification: PKCS#7 / CMS
• Encryption: DES 56bit (evaluation versions) AES128/192/256 in fully licensed versions
• Certificate validation: X.509v1 CRLs and OCSP (RFC2560) – using optional module
• Token Support: Microsoft CSP based or compatible PKCS#11 v2.0.1 tokens

Online Identity Checking

When performing a digital signature verification, File Sign&Seal automatically validates the signer's credentials in real-time with the original credential issuer (e.g. with Bank, Government or Corporate online servers) to ensure signer is still considered trustworthy. All validations are signed and stored for future dispute resolution purposes.

Evidential Seal for Long-Term Validation

File Sign&Seal provides financial/legal strength evidence archive for any file, set of files or folders of information. Once the archive is signed new encrypted files or folder cannot be added to the archive. If encrypted files are opened from an archive, they cannot be saved back into it. The signature can include an embedded independent timestamp (RFC3161) and signer's certificate status information (CRLs or OCSP), thus enabling long-term validation even after signer's certificate expires or is revoked e.g. after 7 years as in financial circles.

Interoperable File Encrypt & Digital Signature Software

File Sign&Seal is completely PKI neutral and will work with PKI components from any vendor (this includes CAs, certificates, CRLs, OCSP responders, smartcards, etc.). File Sign&Seal is primarily intended for Windows, but could be provided on a UNIX and Mac platforms as part of a project. File Sign&Seal protected files can be transmitted using any transport mechanism (e.g. email, FTP, web, CD-ROM). The encrypted files will always be secure regardless of transport medium since protect is directly on the encrypted files, rather than the underlying channel.

Signature Verification

All signatures are verified using a standard cryptographic techniques including validation of the signer’s digital certificate using offline (CRL) or using the online (OCSP) revocation checking features of the ARP-OCSP product.

Optimized File Encryption & Signing

All I/O operation are done in a streaming fashion to reduce memory utilization at the time a signed and/or encrypted archive is being generated.

Low foot print

The generated archives from File Sign&Seal can pre compress the input file/folder data before storing in the archive to reduce disk foot print.

Memory Stick Variant

File Sign&Seal is available for use on a memory stick – this avoids the need for software installation and makes it even easier to communicate data between organisations or even transport critical information using such media.

Pre-Configuration before roll-out

Administrators can pre configure the main settings prior to distributing the product to end-users for maximum ease of use.