|
ADSS Enterprise Server
Overview
ADSS (Advanced Digital Signature Services) Enterprise Server offers enhanced digital signature creation, verification and time-stamping services for business applications needing to trust documents and data. It ensures that the applications have access to easy to use trust services and ADSS Server off-loads the often forgotten overheads of authorisation decisions, detailed policy definitions, auditing logging, billing and other management tasks. ADSS Enterprise Server has been designed for internal Enterprise use as well as External multi-party use and for Managed Service Providers.
Features & Benefits
ADSS Server has been built to satisfy a wide variety of business trust services, which have various data and signature formatting requirements. The many options are controlled through security policies that make ADSS Server easy to use via any or all of its interface types:
- Web Services interface (XML/SOAP) – Java & .Net API client code is available
- Watched Folders using the ADSS Auto File Processor application
- Email using Secure Email Server
- Web gateway using ADSS Gateway
Almost any business application can use ADSS Enterprise Server with ease, the central policy driven controls ensure that applications are able to easily use high level security services to sign, counter-sign, timestamp and verify the following document and data types:
- PDF Documents
- Any file type (e.g. Word, Excel, AutoCAD, PDF, Project, Visio, etc)
- XML data
- Web-form data
These document types can be signed, verified, validated and also be historically verified at a future point in time. ADSS Server even includes an in-built CA module so that there is no need to deploy a CA or use an external CA service provider. Signing options include:
- Corporate key signing – for documents receipts, invoices, etc.
- Multi-user signing using keys generated and stored on the ADSS Server
- Multi-user signing on the client-side using local keys and certificates on smart cards or USB tokens
The last point shows that using ADSS Enterprise Server and the ADSS GoSign applet, end-users can sign documents directly from the browser (using soft keys, smart cards or USB tokens) without the need for installing a local signing application on the desktop. The GlobalTrustFinder web-site includes a live ADSS GoSign client-side signing demonstration. Based on an example ‘purchase order’ application, it uses ADSS Server with its optional PDF Signing module to sign a document. Click here to view this demonstration.
ADSS Server is modular product - only the module required need be licensed. This provides a flexible yet cost-effective solution, with in built investment protection since other modules can be added later to support future business needs. To make it easy to find on Internet searches it is also branded under the following marketing names PDF Signer Server, File Signer Server and XML Signer Server.
Details
ADSS Enterprise Service has been designed from ground-up for maximum flexibility, security, scalability and usability – all essential requirements for a centralised multi-application and multi-party trust server. The following diagram illustrates the broad set of features at each layer of the architecture:
| Basic Signatures |
PDF, XML DSig, S/MIME, PKCS#7, CMS, PCKS#1 |
| Long-term standards |
CAdES (all important profiles), XAdES (all important profiles), PDF |
| Signing Modes |
Server-side corporate or end user signatures, and client-side signatures using OASIS DSS protocol |
| Wrapping Techniques |
Enveloping, Enveloped and Detached signatures |
| Key Lengths |
1024-bit, 2048-bit, 4096-bit RSA, and with SHA-1 and SHA-2 algorithms |
| Trust layer |
Use inbuilt CA, OCSP and TSA modules or back-end trust services providers |
| Security layer |
Strong caller authentication, secure logs, optional dual control, database integrity, alert system, usage reporting, HSM support |
| Scalability layer |
J2EE application allowing scalability horizontally and vertically |
| Interfaces |
On demand web services API, watched folder, email, desktop applications |
| Hardware tokens |
SafeNet, nCipher, USB token and any other PKCS#11 compliant device |
| Databases |
SQL Server, Oracle, PostgreSQL, MySQL (others available on request) |
| Operating Systems |
Windows Server, Solaris, Linux (others available on request) |
Deployment Scenarios
The following are just some of the deployment scenarios possible, to demonstrate the power and flexibility of the ADSS Enterprise Server:
saber mais
>>
|
|