Validation
The Certum QESValidationQ service supports the validation process of qualified signatures in the following cases: standard signatures, time-stamped signatures and signatures with long-term evidential value.
Validation and Preservation
The Certum service, acting as a preservation service, uses the Validation service to validate the submitted signatures. It then collects the maintenance proofs. The proofs are cryptographically secured and stored for the period specified in the maintenance profile. The proofs are secured using a qualified time-stamp provided by Certum QTSA.
Validation and preservation Gateway allows avoiding sending entire signed documents with
potentially confidential content or be large.
The Gateway is installed (software package) on the Subscriber’s IT infrastructure side. It supports
the same API for validating electronic signatures and seals as the Validation Service.
Description of the signature validation process results and validation process report
The Certum service provides a full validation process report, allowing the DA to check the individual steps taken in the validation process, along with the ability to see why the process returned a different result.
​
​
​
​
If the user uses the web application delivered with the Certum service or the Validation Gateway, the validation process report is presented in a user-friendly PDF file.
​
​
​
​
​
The Certum service ensures consistency between the validation process report in PDF form, in machine-readable form, and presented in the web application.
​
​
​
​
​
The validation report is signed with a certificate which identifies the service. The report signature is in basic form, the time-stamp is not added.
​
​
​
​
​
For the same input data, the Certum service should return the same validation status. However, it may happen that for a longer period of time the validation result for the same document will change, as it depends on many components, e.g. trusted signature time, validity period of the signer's certificate, availability of certificate validity information.
