Validation Authority solution for cross border recognition of e-s (VASolution)

Published on: 13/05/2008
Document

Normal 0 false false false MicrosoftInternetExplorer4 In 2008 DNV (Det Norske Veritas) put into operation a global and neutral Validation Authority to offer a new independent third party trust service to manage the process of verifying digital signatures and validating the accompanying digital identity (eID) certificates. In 2009 DNV’s operations partner BBS (Business and Banking Solutions) in Norway took over the service, supported by DNV in the quality classification of eIDs. The VA service is a fully operational solution for cross border recognition of eIDs and e-signatures which is needed for organisations involved in international e-business, for example e-procurement.

Policy Context

EU's e-signature directive. The European Economic Area treaty. EU's principle of free flow of goods and services.

Description of target users and groups

Any business or organisation who needs to be able to rely upon eIDs and/or e-signatures received from communicating parties in a B2B, B2G or C2G context.

Description of the way to implement the initiative

Normal 0 false false false MicrosoftInternetExplorer4 The VA solution is implemented as an on-line subscription service.  The VA Solution, marketed as the BBS Global Validation Service, is a pragmatic approach to the requirement to conduct business to high assured service levels both within and externally to the EU. Even if the solution as such is novel, the IT environment in which it runs is mature and well tested.

Technology solution

The VA solution is accessible via Web Services using an open, standards based XML schema. Standards are used as widely as possible, and interoperability is a major concern. The software engine of the solution is proprietary.

Technology choice: Standards-based technology, Mainly (or only) open standards

Main results, benefits and impacts

Normal 0 false false false MicrosoftInternetExplorer4 The business value of the VA solution can be summarized as follows:

  1. It secures critical electronic services by enabling them with electronic IDs and signatures verified against the issuers and tested against organizational risk policies.
  2. It allows full digitisation of business processes by removing the last barrier to paperless business (the handwritten signature) while maintaining consistent centralized compliance.
  3. It extends e-business usage globally through policy-based interoperability and extended market reach beyond EU Qualified Certificates.
  4. It assures low total cost of ownership by providing validation/verification as a service which is fast to implement and reduces the commercial resources required to conduct business internationally.
  5. It offers strong and reliable trust partnership based on BBS’s 30+ years of experience in operating national critical financial infrastructures, supported by DNV as independent assessor of eID quality.

Return on investment

Return on investment: Not applicable / Not available

Track record of sharing

The VA solution has been shared in numerous presentations at meetings, seminars and conferences in Europe and in the USA. It has drawn substantial interest and recognition from public sector as well as industry stakeholders.

Lessons learnt

Normal 0 false false false MicrosoftInternetExplorer4 The main lessons learnt are:

  1. Even though the advantages of making use of eID and digital signatures (advanced electronic signatures) are substantial, the uptake of this technology in the market place is rather slow.
  2. Public sector is an important driver for the deployment of eIDs and implementation of digital signatures.
  3. Interoperability may not be restricted to within the EU. Many EU programs are collaborative with other Non-EU organizations yet still require the same levels of Trust.
  4. The necessary technical solutions for wide spread use of eID and digital signatures are available. Implementation is dependent on management attention, understanding and decision which must be shown to be consistent, transparent and available against Service Level Agreements between all parties.
Scope: International, National