Digital Signature in asp.net page

Question

We have a letter writing software writtein in ASP.net hosted on cloud. It is used by lawyers to write letters.

Lately the users have received digital signature from some government agency on a CD, that identifies them uniquely. Now they want to sign each letter they write on the web in our software with this digital signature.

Is this technically even possible? Can someone please give me some direction on what this entails?

Tx

Possible duplicate of [How to digitally sign PDF documents in a web application?](http://stackoverflow.com/questions/2147732/how-to-digitally-sign-pdf-documents-in-a-web-application) — CularBytes, Mar 04 '16 at 08:06
Please clarify what you mean by "digital signature". Are you referring to cryptographic signatures (which have legal and technical standing) or just pictures of handwritten signatures? — Dai, Mar 06 '16 at 07:25
@Dai As they are rolled out by *some government agency*, one should assume cryptographic ones. — mkl, Mar 06 '16 at 08:49
You may find working solution for pdf signing form modern browsers, which does not support ActiveX or Applets on this SO Answer https://stackoverflow.com/a/55676351/9659885 — Bharat Vasant, Aug 27 '19 at 05:32

score 1 · Answer 1 · answered Mar 06 '16 at 07:21

You can either roll a solution yourself or use an off the shelf solution such as the CoSign Central digital signature appliance from DocuSign (my company)

Note that if you decide to roll your own solution, you must ensure that the signer has sole control over their private key. (Presumably what is included on the CDs that you received.)

This is another aspect of using a SSCD (Secure Signature Creation Device) for creating the signature.

Bottom line: for using X.509 digital certificates to digitally sign documents on behalf of person, the entire system must meet the legal requirements for a digital signature system (US terminology). In Europe and elsewhere, this called an Advanced or Qualified Electronic Signature system, depending on the source of the root cert of the signer's cert.

This is different than code signing, signing SSL requests and other uses of X.509 digital certificates.

score 0 · Answer 2 · edited Aug 29 '18 at 08:34

Larry's answer is good only if you are implementing it From Scratch and also if you have total control over the end users. In Order to use Individual Token, you must use a third party Interface(From any Certificate Authorities Preferably) to Sign the document from the End User Token/CD DSC. This Solution will work for certificates from multiple CA's ,so end users with existing certificate can digitally Sign any PDF Document. We have implemented such kind of Solution for Government Agencies and is Very feasible.

Digital Signature in asp.net page

2 Answers2