Policy-Driven Signing Frameworks in Open Electronic Transactions

Abstract

Electronically signed transactions typically associate the applied electronic signature with the signed data and implicitly with the terms and conditions related to the scope of the performed transaction. Some aspects of the association between an electronic signature and the transaction can be conveyed by means of a signature policy. Signature policies are a set of rules for the creation and validation of an electronic signature, under which an electronic signature can be determined to be valid. This chapter suggest however, that additional transaction constraints might be conveyed by means of a signature policy. Standardization work has highlighted signature policies as a significant element to leverage trust in electronic commerce transactions that make use of electronic signatures. Summing up technological, organizational and legal concerns, this chapter addresses issues related to the content, form and function of signature policies within a transaction context.