Electronic Signature
We are on the list of trusted service providers
Accredited Certification Authority CA Disig
As of July 2016, a qualified trust service provider pursuant to the eIDAS Regulation
Accredited certification authority CA Disig operated by the company Disig, a.s. (the „Disig“) pursuant to the Act No. 2015/2002 Coll. on electronic signature, as amended (the “Act 215/2002 Coll.”) provides the following accredited certification services:
a) Administration of certificates, which includes issuance of qualified certificates, their revocation, providing the list of revoked qualified certificates, confirming their existence, searching for and provision of issued qualified certificates
b) The long-term preservation of electronic documents signed by a qualified electronic signature or sealed with a qualified electronic seal,
c) Issuance of time stamps
In accordance with the Act No. 215/2002 Z. z. and X.509 v.3 standard, CA Disig issues the following type of certificates:
• Qualified certificates for natural persons according to Art. 7 (1)
• Qualified certificates of agency for natural persons according to Art. 7 (3)
• Qualified certificates for legal persons according to Art. 7 (8)
As of 2015, the company Disig also included a preservation service for electronic documents signed with qualified electronic signature or sealed with qualified electronic seals into its long-term portfolio of services consisting of provision of time-stamping services and services of certificate administration. By doing this, it reached an important milestone in its history as it became the first Slovak company that provides the full range of accredited certification services pursuant to the Act 215/2002 Coll.
Basic characteristic
- provides certification services as of 1st April 2006
- accreditation for the certification service of certificate administration awarded by the Slovak NSA on 24th July 2007
- accreditation for the certification service of issuing time stamps awarded by the Slovak NSA on 30th January 2009
- accreditation for the certification service of long-term preservation of electronic documents signed with qualified electronic signature or sealed with qualified electronic seal awarded by the Slovak NSA on 27th April 2015
- uses its own software products certified by the Slovak NSA for provision of accredited certification services
- developed wide portfolio of its own products and services enabling use of qualified electronic signatures and seals
- subject to regular annual conformity assessment of its accredited certification services by the external team of auditors
QC can be used for creation and verification of a qualified electronic signature
QC is stored in the smart card certified by the Slovak NSA (the size of a SIM card or a credit card)
Smart card is provided with software for card administration
QC is issued to a natural person
QC contains a unique identifier of a natural person
QC can be used for creation and verification of a qualified electronic seal
QC can be stored on a smart card certified by the Slovak NSA or a HSM (hardware security module)
QC is issued to legal persons including public sector bodies
Validity of the QC is usually 1 to 4 years
QCA is stored on a smart card certified by the Slovak NSA
QCA is issued to natural persons:
o authorized by law to act on behalf of another person including public sector bodies,
o who perform regulated activities pursuant to special laws (e.g. notaries, bailiffs, advocates…) or
o who perform public law duties pursuant to special laws (e.g. judges, public prosecutors)
Validity of QCA is usually 1 to 3 years
CA Disig issues QCA only for authorizations listed in the “Authorizations list” maintained by the Slovak NSA
The service is accredited by the Slovak NSA
Private keys are stored in a HSM device, which complies with FIPS 140-2 level 3 requirements and is certified by the Slovak NSA
Authentication to access the time-stamping service is performed by use of an authorization token (in the form of certificate) or from a selected IP address
Possibility to check the number of time-stamps used from the amount prepaid for the service
Based on agreement, it is possible to have the service available 24 hours a day, 7 days a week and 365 days a year
Disig CA Signer – issuance and revocation of certificates
Disig TSA Signer – issuance of time stamps
Disig OCSP Responder – instant validation of a certificate
Disig Validation Authority – centralized validation of certificates
Disig QES Signer – server solution for creation and validation of QES
Disig Web Signer – portal solution for creation and validation of QES
Disig Desktop Signer – client-side application for QES
Disig eArchive – long-term preservation of electronic documents signed with QES
Disig eRegistry – electronic registry system
Disig Identity Server – two-factor authentication using eID and QES
Disig KeyPoint – cloud solution for QES
Disig QES Portal – web-based application for QES creation