PDF Tools AG - Customer testimonial - success story
Digitally signing of PDF/A documents via HSM at Swiss Mobiliar Insurance
Insurance requests are signed by Mobiliar customers and returned to the insurer by post. Legal guidelines (accounting records by-law GeBüV and the by-law concerning electronically transferred documents and information – EIDI-V) as well as internal directives dealing with compliance place additional requirements on the archiving of these documents. Insurance requests (around 2.5 million pages per year) should in the future be converted to digitally-signed PDF/A conforming documents before they are archived.
This process includes having the documents scanned and signed with a functional certificate in accordance with the Swiss Digital Signature Act and stamped with an official timestamp. The existing LunaSA HSM had to be incorporated into the solution. In addition, a high throughput rate had to be considered, since the performance for large volumes of documents is of crucial importance. A verification of the signature and the timestamp should occur after the documents are archived.
The 3-Heights® PDF Security is integrated via its Java interface. Digital signing occurs under Windows, making use of the current LunaSA HSM. The documents are signed by means of a functional certificate from QuoVadis and are stamped with an official timestamp. This occurs via a secure, automated PIN transfer. Signatures and timestamps are then verified under Linux using a PKCS#11 interface and Keystore software.
The desired high throughput could be achieved due to the fast signature software and parallel processing. The tight schedule for implementation was an additional challenge that could be adhered to thanks to a strong engagement from the PDF Tools AG support team.
“The complete system has been in production for several months. The signature interface has proven to be stable and reliable. The expectations were fulfilled and the uncomplicated support from PDF Tools AG deserves special mention.”
Project Leader, Swiss Mobiliar
“The decision to use 3-Heights® PDF Security was based on the functional range of the product, the ability to integrate it into the Mobiliar’s applications and IT infrastructure, and additionally the extremely promising functional and performance tests. The Java interface that encapsulates the signature function and is responsible for communicating with HSM and the timestamp service is worthy of special mention. Through it, the required signature functionality can be achieved in the application with minimal footprint. The interoperability under Linux could be ensured together with support from PDF Tools AG.”
Executive Partner, Insurance Leader Switzerland, IBM Switzerland