© 2013 Adobe Systems Incorporated. All Rights Reserved.

Leonard Rosenthol | PDF Architect • Principal Scientist Adobe and Cloud-based Signatures

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Adobe EchoSign: Securely sign, send & archive contracts via the Web

§  Ease of use

§  Simple, quick, entirely web-based solution

§  Real-time visibility into the entire process

§  10x be!er than the alternative – paper, fax, email

§  Works the way you want – 1000s of work"ows, options & features

§  Highly customizable to #t your business needs

§  Always gets the job done – any scenario, anytime, anywhere

§  Ubiquitous

§  Send, track & #le from wherever your documents are created or stored

§  Pre-built integrations into CRM, Contract Management & Document Management systems

2

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Acceleration

Game Changing Bene#ts of eSignatures & Web Contracting

Icons for each of the three pillars – Agility, Acceleration

and Trust

Agility Trust

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Acceleration

4

Handshake Close Deals Faster 43 minutes vs. 5 calendar days

Any Language • Any Device Any Place

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Agility

5

Something that shows “ease of access” with clouds?

•  Easy to Deploy a Cloud-based Solution

•  Seamlessly Mirror Your Existing Process

•  Integrates With Your Existing Systems

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Trust

6

•  Legally Enforceable

•  Your Documents are in a Secure Cloud

•  Vendor Stability

© 2013 Adobe Systems Incorporated. All Rights Reserved.

EchoSign e-Signature Applications

© 2013 Adobe Systems Incorporated. All Rights Reserved.

EchoSign “Work"ow” Diagram

Application Server

Cryptographic Hardware (HSM) Database/Storage Document Processors

Web Server/UIMobile Clients Acrobat/Reader

Documents Users/Groups “Trust”

8

© 2013 Adobe Systems Incorporated. All Rights Reserved.

EchoSign and Signatures

§  Started life doing strictly non-certi!cate-based signatures

§  Graphical representations

§  Email addresses as “identity”

§  $e system provides the “trust”

§  Recently adopted support for Certi!ed Documents

§  Signs the PDF with a PAdES-compliant certi#cate-based signature

§  $e certi#cate is issued by Adobe on behalf of EchoSign

§  User sees the “Blue Bar”

§  Next step – allow for certi!cate-based signing by users

9

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Biggest problem with signing in the cloud…

§ How to obtain the user’s certi!cate in a reliable & secure manner?

10

© 2013 Adobe Systems Incorporated. All Rights Reserved.

(Re-)Introducing Adobe Signature Service Protocol (ASSP)

§  Used between a User Agent/Client and one or more servers (Enrollment, Credential and/or Signing)

§  Supports: §  Credential enrollment

§  Credential request and retrieval

§  For client-side signing or veri#cation using the credential

§  Signature request and retrieval

§  For server-side signing (using a speci#ed credential)

§  Decrypting a RecipientInfo encrypted data block

§  For opening a PDF that has been encrypted with Certi#cate encryption

11

© 2013 Adobe Systems Incorporated. All Rights Reserved.

ASSP Certi#cate Request

12

© 2013 Adobe Systems Incorporated. All Rights Reserved.

Deployment of ASSP

§  Co-developed in 2005-2006

§  between Adobe and various partners

§  Adobe Acrobat & Reader 8 and later (clients)

§  Over a dozen companies offer compatible server implementations

13

© 2013 Adobe Systems Incorporated. All Rights Reserved.

ASSP Futures?

§ Adobe would like to propose turning over ASSP to ETSI/ESI for development as an open standard to address some of the issues raised today.

14

© 2013 Adobe Systems Incorporated. All Rights Reserved.

© 2013 Adobe Systems Incorporated. All Rights Reserved.