www.elock.com

Sign PDF files in WEB Environment with “Split Signing” Technology

E-Lock PDFeSign Web SDK

www.elock.com

www.elock.com

Introduction

E-Lock has developed its most innovative “Split-Signing” technology to sign PDF files more securely in client-server environment for Windows Platform. This technology allows the clients to digitally sign the PDF files stored on server without the actual files being downloaded on client end.

E-Lock PDFeSigner Web SDK facilitates you to integrate this new “Split Signing” Technology with your Web application to sign PDF files securely in the WEB environment.

PDFeSign SDK is in the form of Windows based API’s callable from script that can be integrated with any Windows based third party application on the server. A small client component gets auto downloaded on the client machine enabling the clients to select their certificate and sign the PDF files generates on the server

These API’s can be invoked from the languages like C, C++, VBScript, JavaScript, VBA and .NET etc. The components can be seamlessly integrated with existing processes / applications without reengineering or disturbing the present workflow

www.elock.com

PDFeSign WEB SDK Features

Uses E-Lock’s most innovative “Split Signing” Technology which allows to Sign PDF files on server without downloading it on the client end

Signature is PKCS#7 compliant which is a international standard Sign PDF files in the Adobe compatible format Verification of the signed PDF through Adobe Reader Supports embedding visible Digital Signature in the PDF files Support embedded signature in PDF files in Adobe compatible format Support silent signing Support associating signature image or a company logo with the signature block Support signing using digital certificates or using credentials generated using E-

Mark Configuring signature placement, signature block size etc Support local time stamping Support multiple signatures Support Bulk signing

www.elock.com

How does PDFeSign WEB SDK Works

Client End

Client End

PDFeSigner WEB - SDK in Client-Server environment

Application Server Host Application + PDFeSigner WEB

SDK

Centrally stored Public Keys of all Signers

Client Component

Client Component

Generated PDF files on the server to be signed

Digital Certificate Digital Certificate

Note: For implementing PDFeSign WEB SDK You should have the the public keys of all the users (signers who will be signing the files) on the server.

- In a typical scenario the host application generates PDF files on the server, PDFeSign Web SDK’s server component integrates with the Host application on the server which prepares PDF Files for signing and can also verify the PDF files if required.

- The PDF files thus generated on the server require client authentication(digital signature) Client access the Host application sign the PDF files( there can be an option to download the PDF file to review before signing).

- A small client component gets auto-downloaded on the client machine, this component allows clients to sign the PDF files generated on the server using their digital certificate on their local machine. - The “Split-Signing” technology allows the users to sign files residing at server from the client side without the hassle to download the PDF at client end. - It also supports Batch signing, several PDF files can be signed in “one-go”

www.elock.com

Benefits of PDFeSign WEB SDK

Benefits of using PDFeSign Web SDK with Split Signing Technology:

•Speedy signing operations in 2 tier and 3 tier environments

•More secure, as there is no file downloads

•Digital certificate (private key) is always in the custody of the signer

•Easy to use and integrate

•Signatures are in Adobe Compatible format which can be verified using Adobe reader

•Associate the visible signature image or a company logo with the signature block

•Configure signature placement and size of the signature block as per requirement

www.elock.com

Technical Requirements

Server requirementsPlatforms: Windows operating system (2K or above)

Web Servers: IIS 6.0 or above

Browsers: Internet Explorer 6.0 or above, Mozilla Firefox, Flock

Client requirements

Platforms: Windows operating system (2K or above)

Browsers: Internet Explorer 6.0 or above (for Windows platform), Mozilla Firefox, Flock

www.elock.com

Licensing

PDFeSign WEB SDK consists of two main componentsServer component: o It resides on the application server for verification of the signed files, that are submitted or signed on servero The license of the server component is specific to the Live IP address of the server on which it is installed

Client component: o Auto-downloadable client component get are installed on each signer’s machine enabling him to sign- the PDF fileo Client licenses are per desktop based

Client licenses, though not specific to IP address of the clients, work only against the servers from which the client-side components are downloaded. In case of deployment of applications developed using this SDK, it is the responsibility of the application developer to distribute the components and the license keys to appropriate user machines.

www.elock.com

Client Package (WINDOWS)

PDFeSign WEB SDK client component allows the users to execute the signing operations on the client. Client components are available for Windows systems and supports widely used browsers like IE, Mozilla Firefox, Netscape family etc

Following Client components packages are available to the users:CAB: Auto downloadable cabs for Windows platformXPI: Required to support Mozilla family of browsersEXE: If auto download is not possible because of some security settings

Sample Scripts: Which will detect the platform and type of browser and download required components to the client. E-lock provides sample scripts for the client reference for developing their own workflow

CAB: This is an auto downloadable cab that has to be hosted on the server. This cab contains all the required components for signing and verification.

EXE: This executable contains the same components as cab. Server can optionally host this exe just in case clients are not able to download cab due to some security settings on the client machine.

XPI: This file contains plug-ins for invoking SDK functionality from Mozilla family of browsers. This XPI needs to be hosted on the server.

www.elock.com

How does PDFeSign WEB SDK WorksFor more information please contact info@elock.com

Thank You!!