Newsletter July / August 2021
This newsletter issue is as varied as the current summer weather. As promised in May, we will introduce you to the new "PDF/A-3 Invoice" workflow for our 4-Heights® Conversion Service in more detail. After that, you can take our crash course on "Electronic Signature". Finally, we would like to draw your attention to two events in September where you can meet us – in person. We look forward to seeing you there!
Do you have questions or topics you would like to read about in this newsletter? Let us know at pdfmarketing(at)pdf-tools.com.
Happy reading and have a beautiful summer!
Your PDF Tools Team
New workflow in Conversion Service: Invoice PDF/A-3
As announced in the May issue, we present the “Invoice” workflow of our 4-Heights® Conversion Service in more detail today.
As the name implies, the workflow is engineered specifically for creating invoices. The "Invoice" workflow converts source documents, which contain the visual representation of the invoice, to PDF/A-3 and attaches one or more files to the result.
This workflow combines all input documents in a single PDF/A-3 file with the following benefits:
- 1 file = 1 invoice
- The conformance to the PDF/A-3 standard guarantees the unambiguous visual reproduction of the document.
- Supports the attachment of matching machine-readable XML to create ZUGFeRD (versions 1.0 – 2.1) invoices for automated processing.
- The invoice can be digitally signed to ensure authenticity and integrity of the invoice.
- Other optional attachments for justifying the invoice or to supply additional information.
The main file containing the visual representation of the invoice can either be a Microsoft Word Document or an existing PDF document.
- Matching, machine-readable XML to create invoices according to the ZUGFeRD standard, ready for automated processing.
- An Excel or CSV table containing detailed additional information to justify the invoice, e.g. an itemized statement for phone bills or meter data for electricity bills.
- Information material or advertising
- A document containing data that was used to derive a visual presentation such as a table or a graph.
Electronic Signatures – A Crash Course in 7 Questions
1) What is the difference between an electronic signature and a digital signature?
The two terms are closely related and are often used interchangeably. The term electronic signature is a legal term and can replace a hand signature, for example, to sign a contract. Unlike a hand signature, an electronic signature has no visual appearance. It consists of a set of electronic data that enables other data, such as a PDF, to be verifiable and capable of being authenticated.
A digital signature, on the other hand, refers to a cryptographic process of creating an electronic signature using a secret signature key. By using the associated public key, the recipient of the signed document can perform a signature verification.
Please note that there are country-specific differences in the translation and interpretation of these terms.
2) What types of signatures are used in practice?
For a simple electronic signature (SES), a secret key created in any way is sufficient. For example, a self-signed certificate can be used for this purpose. Self-signed means that the issuer, verifier of legitimacy and owner are the same person.
The advanced electronic signature (AES) authenticates the signer and ensures the integrity of a document. It is not equivalent to a handwritten signature and is particularly suitable for signing digital documents where legal regulations do not require a qualified electronic signature (QES). Examples include automated mass signatures of receipts, bank statements, or other business documents.
An AES is usually created using an advanced certificate issued to a natural or legal person. Advanced means that it has been issued by a legally recognized certification authority (CA), with which the signer must authenticate himself once. Access to the certificate and thus to the creation of the signature is protected by password or PIN.
The qualified electronic signature (QES) must comply with additional formal requirements compared to the AES because it is equivalent to the hand signature in many countries and is therefore legally binding, e.g. in Switzerland, the EU, the USA. The "holder" is always a natural person. The signature certificate of a QES must also be issued by a state-recognized CA.
Qualified certificates must generally be delivered physically (SmartCard, USB stick, HSM). Unlike the AES, the password or PIN of the QES must be entered for each individual signature. This ensures that a signature really comes from its owner. With a qualified signature, a time stamp can be used to check whether the certificate was valid or not revoked at the time it was created – with an AES, this is optional.
What is not mandatory, but recommended, is to also include a time stamp with QES. This increases the value, or the evidential value of the signature.
3) What is an electronic signature used for?
To replace a handwritten signature. The electronic signature can satisfy the requirement for a handwritten signature in the same way as the handwritten signature itself, provided that the legal requirements are met (see question 2).
The use of a digital signature helps saving time and resources. For one thing, it does not require the physical presence of the signatory. For another, the document does not have to be printed out specifically for signing.
Processes in which many documents need to be signed or the signers are in different locations can take up a lot of time and postage costs. Digital signatures make this much faster and less expensive.
4) Why are documents signed electronically?
Electronic signatures have a "sealing effect" for digital documents. They offer the possibility of verifying the authenticity of the signer and the integrity of the document, as well as the time of signing, if necessary. Authenticity means that a signature can be clearly assigned to a person. A document is said to have integrity if it has not been subsequently changed. The electronic signature can therefore be used to trace who created a document, last edited it or submitted it to the archive, and that it has not been changed since then.
5) How do you verify a digital signature?
Basically, this task is performed by a signature verification software, e.g. 3-Heights® PDF Security. The integrity of the document is ensured if the signature is not broken. For this purpose, a public key and a cryptographic procedure are used, similar to the one used to create the signature. To check the authenticity, the validity of the certificate and a trust chain check are performed. The software also checks whether the certificate was valid at the time of signature.
6) How does the signature "notice" that the document has been subsequently changed?
As with signing, a hash value is calculated from the content of the document during verification. The hash value is a kind of "sum of the digits" of the document, but it is not possible to deduce the content from it. Every change to the document significantly alters the hash value. The hash value of the document is stored in the signature. If the document is changed, the hash values no longer match. This breaks the signature.
7) Which PDF tools can apply electronic/digital signatures?
Events are back! – Let's meet in September
Documation | September 07 – 09, 2021 | Paris
In September, Documation, the trade fair for document and content management, will open its doors for the 27th time at the Paris Expo. In hall 4.3, booth D10-E9, PDF Tools will exhibit together with our partner iLovePDF. We will be presenting our 4-Heights® Conversion Service, our service for automatic document conversion, live for the first time. In addition, we will of course be showing our latest 4-Heights® products, PDF Web Viewer and PDF Toolbox. We can contribute to the congress program as well with a keynote on the topic "How to manage PDF clutter.... with only ONE control point" (in French). Be curious! Tickets for the professional audience are available for free at documation.fr.
Meet us at Documation 2021 in Paris. We look forward to seeing you at our booth or at our presentation!
PDF Days Europe | September 27 – 28 | Berlin
We are particularly looking forward to many exciting presentations at the Technical Days of "PDF Days Europe" in Berlin. The PDF Association's PDF Days are known for high-quality presentations, education and networking opportunities focused on the world's most popular digital document format. All presentations will also be live-streamed.
Documation 2021 September 7 – 9, 2021 Paris, France
PDF Days Europe 2021 September 27 – 28, 2021 Berlin, Germany
NEW CUSTOMERS @PDF TOOLS AG
Cibernos Consulting, S.A., Madrid, Spain Products used: 4-Heights® Conversion Service