How does Digital Signature Gateway service work?

Digital Signature Gateway service is a back end service that interacts with other information services and systems. It means Digital Signature Gateway service provides the functionality of creation and validation of electronic signatures, but does not offer any graphical user interface to end users. Thus, the graphic design and screen layout presented to end users, signers, will vary across the customers of Digital Signature Gateway service (i.e. other information systems).

To ensure confidentiality, Digital Signature Gateway service processes the fingerprint of a document, also known as hash, and not the document itself. The simplified document signing steps are as follows:

1. Digital Signature Gateway service receives the hash value and basic signature of a document to be signed.
2. Digital Signature Gateway service interacts with trust services to collect the details that are mandatory elements of a qualified electronic signature, e.g. the timestamp and the validity confirmation of the signer’s certificate.
3. Digital Signature Gateway service returns the correctly signed container to the signer.

Our service supports signature creation with Estonian ID card/e-Seal, Estonian Mobile ID or Estonian Smart ID.

What can I do with Signature Gateway service?

Once your information system is integrated with Digital Signature Gateway service, you can

• create containers in ASiC-e format
• add your electronic signature to a container holding any type of digital data (documents, spreadsheets, multimedia content etc.)
• sign your data using a qualified signature creation device or a qualified signature creation mobile app, such as:
  • Estonian ID card
  • Estonian e-Seal
  • Mobile ID
  • Smart ID
• validate signed ASiC-e, BDOC, and DDOC containers in the HASHCODE form

Whom is Digital Signature Gateway service for?

Digital Signature Gateway service is offered to all public sector organisations listed (298.93 KB, XLSX) by the Ministry of Finance of the Republic of Estonia.

What does Digital Signature Gateway service cost?

The service is currently free for the above specified target audiences.

What are the key benefits that we offer?

Digital Signature Gateway service offers unified API for container and signature creation. API is platform independent and can be used in any e-service capable of handling JSON/REST API.

E-service maintenance is limited to the updates for API integration.

We keep our service up-to-date with security patches and ensure compliance with eSignature standards.

Customers of Digital Signature Gateway service need to set up only one contract with RIA to access digital signing and validation services. No extra integration with Mobile ID, Smart ID, or trusted services are required.

Digital Signature Gateway service uses the HASHCODE container form, which ensures

• confidentiality of the signed data – the service neither processes nor stores the content of the signed data
• no maximum limit on the size of the signed data

How can I join Digital Signature Gateway service?

To join our service, you need to go through a two-step procedure:

1. Register your e-service in our demo environment and conduct Digital Signature Gateway service integration tests.
2. Register your e-service in our production environment. You can find application forms on RIA website. Submit your completed applications at help@ria.ee .

Can I use Digital Signature Gateway service if my organisation is not part of the Estonian public sector?

Our service is currently only provided to the public sector organisations of the Republic of Estonia. However, the source code of Digital Signature Gateway service is freely available for anyone to use and to create your own digital signing solution.

Additional questions?

Feel free to contact us at help@ria.ee if you have any questions about Digital Signature Gateway service.