FormSeal Features

When users submit data through forms, on clicking the submit button the information is sent to the backend for processing. FormSeal intervenes in this process, and enables users to select any certificate from their computer to digitally sign the data they would like to submit. When you submit a form, what you submit are name value pairs in the context of the form. FormSeal digitally signs this information along with the images and the html content and sends it to the Server. This maintains the context of the information signed and submitted.

Usually, you can select certificates only for a particular security framework. For instance, if you are using Internet Explorer, you will only be able to choose those certificates that have been acquired using IE and that reside in the Microsoft Security Framework. The same is true of Netscape, where you can only select certificates acquired through the Netscape browser and that reside in the Netscape Security Framework.

E-Lock has countered this problem and major issue with its FormSeal tool. With FormSeal you can select certificates from both IE and Netscape, irrespective of which browser you are using and irrespective of which framework the certificates reside in.

Since FormSeal has been developed using Java technology, there is no restriction on the platform used by the client. This provides platform independence and ensures that your application will work for all your users, clients, partners, and trading parties who can in return transact securely with your organization.

FormSeal also supports digital signing of attachments. Any attachment that you choose to submit will get digitally signed along with the other information in your form.

The FormSeal Server component receives the data signed and submitted by users. It verifies the data submitted by the user and performs several verification checks.

Data integrity checking refers to ensuring that the data submitted by the user has not been changed or tampered in transit. This check ensures that what the user submitted is what the server receives.

This refers to ensuring that the digital certificate used by the user / client to sign data has not expired. The certificate is also checked for revocation, as it may have been revoked for some reason other than expiry. Also, a check is performed for certificate trust, which means that the server must trust the root certificate of the certificate used to sign the data.

If the user completes the transaction successfully - that is if data is signed, submitted, and successfully verified by the server - then a receipt is returned to the user for the transaction.

Ability to support Multiple Signatures on a form, i.e. more than one signature by one user or more than one user signing the same form