How SuperSigner SDK works

SuperSigner SDK is based on client-server architecture. It consists of the client component and the server component. Client component acts as the interface between the client machine and the server. It is a small auto-downloadable component, which downloads for the first time when client signs the document through the application with which SuperSigner SDK is integrated.

Server component is integrated with the application on the server. It enables to verify the signed data, submitted by client on the server as well as perform other security operations. Integrators design their own workflow within their application as per requirement and call SuperSigner SDK components wherever required for digital signing and verification. Components perform requested operation and return the output to the host application to process it further.

SuperSigner SDK enables users to digitally sign and encrypt documents of any format

1. User can digitally sign files from client machine and upload them to the server
2. User can sign files stored on server

Signing :

The client component is in the form of very small cab file (600 KB), which gets auto downloaded on client machine first time when the user connects with the application. Component displays the list of digital certificates present on the user machine and enables the user to select desired certificate to digitally sign the document.

Multiple Signatures :

Supports the multiple signatures for hierarchical and parallel digital signing. Information on all signers is provided in a single glance. It provides the facility wherein all previous digital signatures can be independently verified.

Verification :

The signed files/data can be verified for data integrity, authentication, certificate status (whether valid, expired or revoked) and certificate trust.

Encryption :

Supports PKI based encryption. User needs to specify the recipients for whom the file should be encrypted. Selects the recipient's public certificates in order to encrypt. These public certificates can be in .cer or .crt format.

Decryption :

The main function of this component is to decrypt the file. A user will only be able to decrypt a file using his digital certificate, if he/she has been specified as a recipient by the sender (i.e. if recipients public key is used for encrypting).

Time Stamping :

Supports local time stamping as well as third party time stamping

SuperSigner SDK - Technical Specifications

SuperSigner SDK Web server has been tested on following environments

For Windows Server Platform

• Platforms: Windows operating system (2K or above)
• Web Servers: IIS 6.0 or above
• Browsers: IE-9.0 or above, Google Chrome, Mozilla firefox, Flock

For Non-Windows Server Platform

• Platforms: Linux, Solaris, IBM AIX
• Web Servers: Websphere, Apache Tomcat, Oracle Application server, etc.
• Browsers: IE-9.0 or above, Google Chrome, Mozilla Firefox, Flock

SuperSigner SDK Web Client has been tested on following environments:
• Platforms:Windows operating system (2K or above), Linux, Solaris
• Browsers: Internet Explorer 9.0 or above (for Windows platform), Google Chrome, Mozilla Firefox, Flock

SuperSigner SDK supports digital signatures using:
1. Certificates present on smart cards, hardware tokens, HSM or any PKCS#11 device
2. Directly using PFX / P12 files
3. Certificates installed in browsers like, Internet Explorer, Google Chrome, Mozilla and its derivatives like Netscape, Firefox, Thunderbirds etc..

Business Benefits

1. Digitally sign the document :
   SuperSigner SDK supports PKI based digital signing, maintained in PKCS#7 format. Signed documents are legally enforceable ensuring the data integrity, confidentiality, signer authenticity and provide Non-repudiation.
2. Easy integration to automate business processes :
   SuperSigner SDK is delivered in the form of API's, callable from scripts. It can be integrated with any existing third party application without disturbing the existing workflow of the process making them more secure, efficient & cost effective.
3. Transition to paperless processes :
   Allows easy transformation from paper-based processes to paperless. This speeds up the decision-making and approval process, enabling faster and convenient communication and services. Saves time, reduces costs which in turn enhances staff productivity and business profits.
4. Signed data is maintained in PKCS#7 format :
   The documents signed using SuperSigner SDK components are maintained in PKCS#7 format, which is an industry standard.
5. Secure the sensitive communication :
   Using PKI based encryption for the classified document you ensure that no one except the authorized person/s will be able to decrypt and view the documents, maintaining complete privacy and security.
6. Compliant solution :
   SuperSigner SDK is compliant with major worldwide e-signature and digital signature legislations. Enabling users to abide by the rules and regulations laid by these laws.
7. Compatible and user friendly :
   SuperSigner SDK components are compatible with Windows and Linux operating systems as well as all the widely used browsers like IE, Mozilla Firefox, and Netscape etc. Once integrated it allows the users to digital sign and encrypt any file at a click on mouse.
8. Speedy ROI :
   SuperSigner SDK provides you an opportunity to use the digital Signature technology in your application allowing you to implement speedy, paperless and more efficient processes to maximize your business benefit as well as helps you to achieve compliance. It also enables the speedy approvals, decision-making and guarantees a speedy RO

Compliance with Industry & Government Standards

1. PKCS#7 compliant software
2. US Electronic Signatures in Global and National Commerce Act (E-Sign)
3. JITC (Certification by US DOD)
4. Government Paperwork Elimination Act (GPEA)
5. The Health Insurance Portability and Accountability Act (HIPAA)
6. 21 CFR Part 11(a regulation governing the use of electronic signatures within the pharmaceutical industry)
7. EU law (EU Directive for Electronic Signatures)
8. Sarbanes-Oxley Act (SOX)
9. Uniform Electronic Transactions Act (UETA)
10. Indian IT ACT 2000