How to assess a digital signature?

Digitally Signed Documents

Olav Harald Våge avatar
Written by Olav Harald Våge
Updated over a week ago

Audit requests and other signed documents, received through Brevio, are always digitally signed with a Norwegian BankID, Swedish BankID, Danish MitID or Finnish FTN. This is a personal and easy method of secure electronic identification and signing on the Internet.

The mentioned electronic signatures, has the same value as a ordinary signature, and is used the same way, regardless of the bank that issued it.

Introduction

When the document is signed, the service provider (e.g. BankID) issues a document file in the format of a PDF Advanced Electronic Signature (PAdES). This PAdES contains information about who signed the document, when the signature was added and a validation of signature at the time of signing. The PDF cannot be edited without breaking the digital seal (certificate).

Slightly simplified, a signed document contains two components:

  1. Signature panel: This defines whether the document is signed or not, and whether the document integrity is maintained (ie, the document has not been changed after signing). Via the signature panel you can see which certificate is used for signing, as well as additional information about the signees and signature process.

  2. Signature page: This is a visual overview showing when and who has signed the document, and which signature method has been used (eg BankID or BankID on mobile).

How do I validate the signature?

Step 1: Open signed PDF in Adobe Reader

Step 2: Check one of the following two options:

  • Option 1: Signature panel is present at the top of the document

       This means the document is signed and has not been modified 🎉

  • Option 2: The signature panel is not present at the top of the document

       This means that the document is not signed and / or changed after signing 😞

Did this answer your question?