Digital Signatures in Digital Signatures in State of TennesseeState of Tennessee

Pam RobertsFinance & AdministrationOffice for Information ResourcesPlanning, Research & Development

2

Digital Signatures in Digital Signatures in State of TennesseeState of Tennessee

Internet and Why Digital SignaturesInternet and Why Digital Signatures What is electronic signature? What is digital What is electronic signature? What is digital

signature?signature? Purposes of Digital SignaturesPurposes of Digital Signatures Certificate AuthoritiesCertificate Authorities Electronic bid process -- digital signaturesElectronic bid process -- digital signatures ExamplesExamples Current Tennessee LawCurrent Tennessee Law

3

InfrastructureInfrastructure

Networks

DigitalSignatures

ElectronicMoney

4

Building Electronic

Commerce

Infrastructure

Security one of the

most

important factors!

5

Building Electronic Building Electronic Commerce Commerce InfrastructureInfrastructure

Bring our most important transactions into the Bring our most important transactions into the electronic worldelectronic world

Increase the convenience, accuracy, timeliness Increase the convenience, accuracy, timeliness and cost-effectiveness of government operationsand cost-effectiveness of government operations

Why Digital Signatures?

6

Electronic SignatureElectronic Signature

A Digitized Handwritten Signature...A Digitized Handwritten Signature... The Typed Name of an IndividualThe Typed Name of an Individual A Secret Code or a Pin NumberA Secret Code or a Pin Number

An Electronic Signature can be:

7

Digital SignatureDigital Signature

A more secure way of signing electronic A more secure way of signing electronic documents documents – Provides a High Level of SecurityProvides a High Level of Security– Virtually Impossible to Forge Virtually Impossible to Forge

A Digital Signature IS:

8

Purposes of Digital Purposes of Digital SignaturesSignatures

AuthenticationAuthentication– Unique to you and can be verified later by all Unique to you and can be verified later by all

partiesparties

9

Contract

AuthenticationWho

signed this?

Digital Signature Purpose

10

Purposes of Digital Purposes of Digital SignaturesSignatures AuthenticationAuthentication

– Unique to you and can be verified later by all Unique to you and can be verified later by all partiesparties

IntegrityIntegrity– Verification that the data/document has not Verification that the data/document has not

been modifiedbeen modified

11

Contract

Has this been altered?

Integrity

Digital Signature Purpose

12

Purposes of Digital Purposes of Digital SignaturesSignatures AuthenticationAuthentication

– Unique to you and can be verified later by all Unique to you and can be verified later by all partiesparties

IntegrityIntegrity– Verification that the data/document has not been Verification that the data/document has not been

modifiedmodified Non-repudiationNon-repudiation

– Binding, cannot deny participation in the electronic Binding, cannot deny participation in the electronic transactiontransaction

13

Contract

Can they deny signing this?

Non-Repudiation

Digital Signature Purpose

14

Achieving Trust Achieving Trust

Public Keys Infrastructure maintained Public Keys Infrastructure maintained by Certificate Authorityby Certificate Authority

Establish identity of business partnersEstablish identity of business partners Ensure integrity of informationEnsure integrity of information Provide confidentiality of informationProvide confidentiality of information

15

Certificate AuthorityCertificate Authority

Individual, Organization, or Agency, public Individual, Organization, or Agency, public or private which acts as a notary for or private which acts as a notary for electronic transactions electronic transactions

Issues certificates which contain your Issues certificates which contain your digital signaturedigital signature

ExamplesExamples– VeriSign, Entrust, US Postal Service, BanksVeriSign, Entrust, US Postal Service, Banks

16

Electronic Bid

Purchasing

PrivateKey

PublicKey

General ServicesPurchasing Division

Bid Response

17

Electronic Bid ProcessElectronic Bid ProcessAdvantagesAdvantages More convenient for all partiesMore convenient for all parties Reduction of paperwork and mailing costsReduction of paperwork and mailing costs Savings of timeSavings of time No middle person or unforeseen delay in No middle person or unforeseen delay in

bid openingbid opening Potential for increased competitionPotential for increased competition

18

Examples of Electronic/DigitalExamples of Electronic/DigitalSignature ApplicationsSignature Applications

Washington State Washington State – First state to receive a legally binding bid over First state to receive a legally binding bid over

the Internetthe Internet Tax FilingsTax Filings Motor Vehicle RegistrationMotor Vehicle Registration Renewing Professional LicensesRenewing Professional Licenses Vendor RegistrationsVendor Registrations

19

State of TennesseeState of TennesseeIT/BAIT/BA PROPROfessional Servicesfessional Services

IT Professionals

Statement

of Work

State

Agency

Vendor

Memo ofUnderstanding

20

Current TennesseeCurrent TennesseeLawLaw Electronic and Digital Signatures LegalElectronic and Digital Signatures Legal

– HB 922/SB 525 -- 1997HB 922/SB 525 -- 1997– amended “signature”, “signed”, “writing”, amended “signature”, “signed”, “writing”,

“written”“written”– added “record”added “record”

Electronic Signature legalElectronic Signature legal– HB 1718/SB 1090 -- 1997HB 1718/SB 1090 -- 1997– specific bill for Courts of Tennesseespecific bill for Courts of Tennessee

Digital Signatures in Digital Signatures in State of TennesseeState of Tennessee

Pam RobertsFinance & AdministrationOffice for Information ResourcesPlanning, Research & Development