With OpenXAdES example document portal, we try to give you an idea of what the process of digitally signing documents should look like. The portal is just one way of creating end-user applications based on the OpenXAdES/DigiDoc architecture, but we have found that web-based solutions are simple to use for end users and are easily accepted. The DigiDoc portal in Estonia has received a lot of positive feedback from its users due to interface simplicity and consistency, and we will try to demonstrate these features also to you in this OpenXAdES example portal.
Below are some guidances for using the portal, although the interface itself should be self-explanatory.
If you want to try out digital signing in the portal, upload your signature certificate into our database using this page. If you already have some signed documents and just want to verify the signatures, this is not necessary.
For adding a document to the portal, click the "Add document" link in the lefthand menu. In the displayed form, enter the document that you wish to upload and click "Save". The document can be any document you want to digitally sign - a Word file, Excel spreadsheet, executable file, picture file etc. It can also be a document in DigiDoc format that has already been previously signed - in this case, the portal recognizes this and you will be able to view the details about who has previously signed the document.
To view the document list, click the "Documents" link in the lefthand menu. To view details about a document, just click its title in the document list. You can delete the document directly if you click on the trashcan icon.
In the document details dialog, details about the document will be displayed. If the document has already been signed, the system displays data about the persons signing it. You can also extract the original data files from the document, save the full file with signatures to your computer or delete the file.
To sign a document, click the "Sign" button while viewing a document. For signing, you will need to have a number of tasks carried out:
After you click the signing button, the system extracts signing certificate from your token and adds it to the document. You are then prompted for your PIN code or any other verification method that your token uses for actually creating the signature. After you have successfully entered the PIN and created the signature, your certificate is validated using our OCSP: according to our concept, the certificate must be valid at the time of signing. The system then receives the validity confirmation from our responder and stores it in the document. You are now returned to the document viewing display and you can view your signature added to the document.
After you have signed the document, you may store it in your own computer and send to someone else as a normal file, e.g. with e-mail attachment. That person can then upload the document to this portal and see your signature already added to the document.
Your documents will never be shared to anybody and can be viewed only by yourself during the same browser session. The portal is session-based, so keep your browser window open as long as you want to be able to access the document. All the documents are deleted from this portal 30 minutes after they have last been accessed, so this portal is not suitable for long-term storage. Different types of portals, however, can be created using OpenXAdES/DigiDoc technology, and this may very well include personalized document management system with long-term storage capabilities.