The eIDAS Regulation1 states the following about authentication in relation to digital signatures:
Authentication is an electronic process that enables the confirmation of the electronic identity of a natural or legal person, or the origin and integrity of data in electronic form.
This regulation has been established by the European Union to provide clarity and guidance on various methods of electronic identification of individuals. This regulation also describes the levels of electronic signatures within the context of digital signing of contracts. It's important that proper authentication checks are conducted during digital signing.
The European Union defines three different levels. These levels are defined and elaborated upon in the eIDAS Regulation.
This regulation distinguishes three levels of reliability for electronic identification:
Simple or Basic Electronic Signature (SES)
Advanced Electronic Signature (AES)
Qualified Electronic Signature (QES)
In summary, the level of identity verification determines the level of reliability. Identity verification is crucial to assigning a reliability level to a digital signature.
Stiply offers various authentication methods that you can select for each signatory. The evidential value of the document may depend on the method you choose. Therefore, always determine per signatory how strong the authentication should be for the contract you're signing.
Email: Simple or Basic Electronic Signature (SES)
SMS: Simple or Basic Electronic Signature (SES)
Direct Debit Authorization: Advanced Electronic Signature (AES)
IDIN: Advanced Electronic Signature (AES)
When you have a contract signed, you want to be able to establish as accurately as possible that the signature is being placed by the correct person. Furthermore, you want to be able to demonstrate afterward who the signatory was, to avoid any disputes.
The goal is to identify the signatory as accurately as possible, so that as the sender, you know who has signed your contract.
It's important that the authentication is sufficiently reliable, considering the purpose and content of the contract or document.
How do the authentication methods work?
When deciding which authentication method you want to use, it is important not only to consider the evidential value, but also to understand what information is shared and how the process works. Below is a brief explanation of what happens for each authentication method:
- SMS: The signer receives a code via SMS, which must be entered either before or after signing the document.
- iDIN Basic: The signer authenticates via their bank. You will receive: initials, surname, and date of birth.
- iDIN Complete: The signer authenticates via their bank. You will receive: initials, surname, date of birth, gender, address, email address, phone number, and BIN.
- Direct Debit Authorisation: The signer issues a direct debit authorisation via their bank.
- Electronic Seal: The signed document is sealed, enabling verification of the document’s integrity.