How to sign a digital document: signature types and procedure

In an environment where companies are increasingly moving toward dematerialization, the issue of electronic signatures becomes inevitable. Indeed, it is not simply a matter of digitally signing a document or scanning a handwritten signature, but rather of setting up a process that ensures total compliance with current legal regulations.

To do this, how to sign a digital document? In fact, the goal is to ensure the integrity of your documents and the authentication of the signer, whether a legal entity or an individual.

But how to implement electronic signature in practice? Find out how it works, its legal context and how to affix a certified electronic signature thanks to dedicated tools.

See all software Electronic Signature

Types of digital signatures

Before moving on to analyze the procedure for signing a digital document, it is necessary to make a difference between the different types of digital signatures that can be affixed to electronic documents.

"Simple" electronic signature

This type of signature consists of affixing one's signature by "drawing" it on the screen or by scanning it from a previously hand-signed paper document.

This type of signature has no legal validity because the signature affixed in this way cannot be certified through the appropriate evaluation tools.

The only way to confirm the validity of the signature would be through the judgment of a judge who will use the expertise of a calligrapher.

Advanced electronic signature

This type of signature is valid for legal purposes because it is created through the use of computer software that can prove the authenticity and integrity of documents. The signer has unique and exclusive control over the signature affixed.

Qualified electronic signature

This type of signature has the highest level of security and authenticity because the signature is affixed through the use of special kits issued by accredited certifying bodies. For this reason, the signature is valid for legal purposes for all types of documents and contracts.

Electronic digital signature

A particular type of signature is the digital electronic signature, which is a "version of the advanced electronic signature in which there is a system of encrypted keys that will enable the holder by means of the private key and the recipient by means of the public key, respectively, to make manifest and verify the provenance of a computer document. "Source (CAD)

How to sign a digital document: procedure

To create the signature of a digital document in accordance with legal regulations, you use a provider of electronic signature and archiving services with evidentiary value. In the secure space it provides you with, transactions are tracked, recorded, sealed, stamped and stored in an integrated and secure manner.

Software for affixing digital signatures

In order to perform the digital signature procedure, you must have software or hardware that is legally certified:

• a smart card or USB device equipped with a digital signing certificate. This tool must be issued by an accredited Certifier, which you can find on the DigitPA directory.
• smart card reader, which you can buy on the Chamber of Commerce website).
• digital signature software. Open source and free software that can be downloaded online are Dike or File Protector, which you can find available at www.card.infocamere.it.

If the person affixing the digital signature has a USB Token, he or she does not have to install the reader and signature software.

Once you obtain the system that allows you to digitally sign the document, the following steps are followed:

How to sign a document with an electronic signature

• you click on the access link received by e-mail
• you consult the electronic document
• you sign after receiving a security code via SMS that guarantees a unique connection.

How to apply to have a document signed electronically

• you import the document (in the chosen format) into the software;
• you select the settings;
• you request the recipient to sign it.

All you have to do is monitor the status of the document in real time to make sure deadlines are met, then receive the signed document and store it in a digital safe if necessary.

The characteristics of the digital document to be signed

Technically, all file formats can be signed electronically (Word, XML, PDF, JPG, etc.). However, best practices favor the PDF format as it offers better preservation and protection of content.

To be more precise, the document must be in PDF-A LOGO II, drafted in static format, i.e., PDF/A, the best format the archiving of electronic documents for a long period of time.

Why are other formats not suitable? All files that contain within them "macroinstructions" or "executable codes" that allow the modification of information, data, and documents are not suitable, as changes can be made even after digital signature.

Files, therefore, in .doc (Word), .xls (Excel), .odt, .ods (Open Office), i.e., all files with the .p7m extension are editable after signing and therefore must be converted to the standard PDF/A format.

See all software Electronic Signature

How to sign a digital document: step by step procedure

Document valid for legal purposes

1. Equip yourself with one of the digital signature kits we mentioned in the previous paragraphs.
2. Launch the signing software contained within the kit
3. Select the file on which you want to affix the digital signature
4. Enter the PIN of the smart card with which the digital signature certificate is associated
5. Select the type of file to be generated after the signature is affixed:
   1. P7M cryptographic envelope (CAdES), to generate a P7M format file that encloses the original document along with the digital signature files;
   2. PDF, to obtain a PDF file that has the digital signature included (whether visible or not);
   3. XML (XAdES) to again create a P7M format file.
6. Choose between the two options provided by the software:
   1. a certification to verify the date and time the digital signature was placed on the document;
   2. the addition of a password to encrypt the file. In this the document is protected and only the selected recipients, in can of a decryption key, can have access to the selected file.

Document without legal validity

As we saw at the beginning, you can affix a simple digital signature to the digital document, which, however, will have no legal validity.

In this case, you do not need a certified digital signature kit: you can affix your signature by hand and then scan the document. Alternatively, there are programs that allow you to put your signature directly on the document, or if you have a touch screen, you can draw it directly by hand.

So are you ready to sign your first digital document ?