PKI

Currently, when most people think of digitaland standards similar to the ABA Guidelines
signature capturing the first technology thatpertaining to electronic signatures.
comes to mind is Public Key Infrastructure orThe vast majority of electronic signatures are
(“PKI”). However, the old guard of PKI is acaptured through a method called
dying technology. PKI is a good solution with“click-wrap”. People use this method every
serious limitations that will hinder and impede itstime they install new software or purchase
continued growth. PKI is both expensive tosomething online using a credit card. The system
implement and expensive to maintain. PKI is alsowill validate their identity and then require the user
time consuming. Professionals do not want toto click an “OK” or “I Accept” button
slow down the sales cycle to send someone to ato install the software or authorize a credit card
third party certificate authority just to make atransaction. The reason most people use the
sale. Currently, when most people think of digital“click-wrap” process is in its simplicity. There
signature capturing the first technology thatis no training required and most users get
comes to mind is Public Key Infrastructure orcomfortable with the process after just one use.
(“PKI”). However, the old guard of PKI is aClick-wraps have been tested in the courts by
dying technology. PKI is a good solution withdozens of companies, including AOL-Time Warner,
serious limitations that will hinder and impede itsMicrosoft, Netscape, Sun Microsystems and Dell
continued growth. PKI is both expensive tojust to name a few. The technology necessary to
implement and expensive to maintain. PKI is alsouse the product is built directly into web browsers
time consuming. Professionals do not want toso there is no software to install. Finally, it is
slow down the sales cycle to send someone to asignificantly less expensive to maintain, install and
third party certificate authority just to make aprocess than traditional PKI technologies.
sale.PrivaSign uses a patented, proprietary
PKI authenticates but it fails to identify who a“click-wrap” method to capture the actual
user is. The American Bar Association identifiedsignature and the industry standard form of
this critical weakness in its ABA PKI Assessmentencryption known as Secure Socket Layer
Guidelines, D.3.1.2 says “a pseudonym or alias(“SSL”) technology, along with MD-5, SHA1
may be used as the name within a certificate”and SHA2 file integrity hashes to protect the
and not their real name.PrivaSign client’s data with a tamper proof
VeriSign, one of the largest PKI solution providers,seal. SSL is commonly available in virtually every
admits in their paper “ROI for PKI” thatweb browser and the user does not need any
“PKI systems are particularly expensive tospecial training or instruction in order to use the
maintain.”service.
A Better SolutionPrivaSign’s patented technology allows for
By giving power to the business and not a thirdfast digital signature capturing on virtually any
party certificate authority, PrivaSign can aiddocument and from any web browser.
businesses trying to comply with regulatory law