ACCREDITATION AS A SERVICE PROVIDER
FOR
ELECTRONIC SIGNATURE CERTIFICATION SERVICES
PURSUANT TO
CHAPTER 426, ELECTRONIC COMMERCE ACT
PART V – PROVISION OF SIGNATURE CERTIFICATION SERVICES
APPENDIX “B”

Introduction

It is well established that if a person’s handwriting is being used as a biometric identifier, the “shape, speed, stroke order, off-tablet motion, pen pressure and timing information” during signing can be recorded, and this information is almost impossible to duplicate by an impostor.

Thus, the essential feature of computer hardware and software methods which enables an expert (i.e., myself) to authenticate an electronic signature is the simultaneous recordation of 3D biometric data (“shape, speed, stroke order, off-tablet motion, pen pressure and timing information”) in addition to the purely graphical 2D representation of the visual image of the handwritten signature.

Appreciate that there is no such thing as a truly automated method for the authentication of electronic signatures.  It is always necessary for an expert (i.e., myself) to make a human judgment based upon the 3D biometric data and the graphical 2D representation of the handwritten signature.

The acquisition of biometric data is described in the following patent application entitled: ELECTRONIC SIGNATURE AUTHENTICATION METHOD AND SYSTEM; (Ref: Patent PCT/1B12/57577).

Overview

Legal documents such as contracts, agreements and affidavits typically require a handwritten signature from signatories thereto in order to render the same legally binding. The signature is assumed to be original and is normally considered enough evidence in the authentication of the signing parties when the document is under dispute. The traditional pen-to-paper approach has several shortcomings, namely fraudulent activities, misplaced documentation and forgery.

Electronic signatures aim to facilitate document management whilst trying to duplicate the traditionally accepted action of physically signing a document. Rather than print out documents for the purpose of signing, the document is rather displayed on-screen. The signer is then asked to sign on an electronic pad (or tablet) with a stylus (in a manner similar to signing with a real pen on paper) and the electronic signature representation (otherwise referred to the electronic signature) is then applied to the document displayed on-screen. Various electronic security measures exist to enforce that the document cannot then be altered in its electronic format after it has been electronically signed. In its electronic format, digital signatures and biometric data (e.g., “shape, speed, stroke order, off-tablet motion, pen pressure and timing information”) is recorded and attached to the document for subsequent authentication by an expert (person).

Method

Put simply, the method employed by the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. to facilitate authentication of an electronic signature, is as follows:

REGISTRATION PROTOCOL

Step 1              The client introduces himself to the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. and physically presents himself together with original government-issued official identification documents including but not limited to his or her valid passport and valid driver’s license.

Step 2              The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. produce high-resolution scanned images of the client’s valid passport and valid driver’s license and right thumb fingerprint for subsequent storage of this digital information in a remote computer system not connected to the internet.  Back-up data are stored on a read-only CD and locked in a fireproof vault within the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq.

Step 3              The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. follow customary legal notarial practice to establish the client’s identification.  [NOTE: Staff members are licensed as Commissioner for Oaths or Notary Public as required by the laws where the notarial act is performed.]

Step 4              The client “registers” his or her electronic signature with the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. by handwriting his or her signature upon a tablet computing device using a pen-like writing implement (called a “stylus”) in the conventional fashion.  The stylus and tablet computing device record the electronic signature plus biometric data (“shape, speed, stroke order, off-tablet motion, pen pressure and timing information”) recorded during the act of signing the document; multiple handwriting samples are collected.  This digital information is called a “signature card” and stored on a remote computer system not connected to the internet.  Back-up data are stored on a read-only CD and locked in a fireproof vault within the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq.

[NOTE: the registration of the client’s electronic signature sample is valid for a period of 5 years or until the expiration date of the client’s passport or driver’s license, whichever occurs first.]

MAKING AN ELECTRONIC SIGNATURE

Step 5              Days, weeks, months or even years later and anywhere in the world, the client needing to make an electronic signature writes his or her signature on a tablet computing device using a pen-like writing implement (called a “stylus”) in the conventional fashion.  The stylus and tablet computing device record the electronic signature plus biometric data (“shape, speed, stroke order, off-tablet motion, pen pressure and timing information”) recorded during the act of signing the document;

Step 6              The electronic signature plus biometric data are sent to the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. via encrypted transmission over the internet.

EVALUATING AN ELECTRONIC SIGNATURE

Step 7              The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. receive the electronic signature plus biometric data via encrypted transmission over the internet.

Step 8              The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. retrieve the client’s “signature card” on file that comprises the scans of the client’s identification documents plus the client’s electronic signature and biometric data as per the registration protocol described above.

Step 9              The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. compare the most recently received electronic signature (test signature) with the set of all previous electronic signature samples (reference signatures) on file.  Statistical and mathematical methods are used to evaluate the likelihood that the test signature matches the reference signatures. Put simply, the handwritten signature is decomposed into a number of different strokes.  Each stroke, i, is evaluated mathematically and expressed in terms of a finite sine transform or third-order polynomial expression of the form y_i(x) = a_ix³ + b_ix² + c_ix + d_i.  In effect, each stroke, i, is represented by the parameters (a_i, b_i, c_i and d_i).  Each stroke, i, from the test signature is compared with the corresponding stroke, i, from the set of reference signatures on file.  Statistical methods are used to establish the best-fit parameters (a_i, b_i, c_i and d_i).  Statistical methods are also used to compare the parameters (a_i, b_i, c_i and d_i) derived from any test signature with the corresponding parameters derived from the set of reference signatures.  Outliers are readily identified by means of probability theory and pattern recognition algorithms.  In this way, any test signature which does not conform to the pattern of strokes in the set of reference signatures is identified as questionable.

Step 10            The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. compare the most recently received biometric data from the test signature with the set of all previous biometric data from the set of all previous electronic signature samples (reference signatures) on file.   The following biometric data are recorded:

• The Cartesian coordinate, x, of the stylus over the device as a function of time, namely x = x(t);
• The Cartesian coordinate, y, of the stylus over the device as a function of time, namely y = y(t);
• Whether or not the stylus is touching the surface of the device at any time, t.
• The contact pressure, p, of the stylus with the tablet as a function of time, t, namely p = p(t);
• The speed, v_xi = dx_i/dt, in the direction of the x-coordinate during the interval of time when each signature stroke, i, was made, namely v_xi = v_xi(t);
• The speed, v_yi = dy_i/dt, in the direction of the y-coordinate during the interval of time each of the signature strokes, i, were made, namely v_yi = v_yi(t);
• The spatial orientation of the stylus during the time each of the strokes, i, was made;
• The height of the stylus during the time each of the strokes, i, was made;
• The order and direction of movement of the stylus during the time each stroke, i, was made;
• When the stylus was lifted between strokes and the duration of the pauses.

As above, the biometric data associated with the test signature is evaluated mathematically and expressed in terms of finite sine transforms or third- or higher-order polynomial expressions. In effect, each biometric parameter, j. is represented by the parameters (a_j, b_j, c_j  . . . ).  Each biometric parameter, j, from the test signature is compared with the corresponding biometric parameter, j, from the set of reference signatures on file.  Statistical methods are used to establish the best-fit parameters (a_j, b_j, c_j  . . . ).  Statistical methods are also used to compare the parameters (a_j, b_j, c_j  . . . ) derived from the test signature with the corresponding biometric parameters derived from the set of reference signatures.  In this way, any test signature which does not conform to the pattern of reference signatures is identified as questionable.

CLIENT NOTIFICATION

Step 11            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. sends an email message to the client indicating that an electronic signature has been received for authentication.

TELEPHONE VERIFICATION

Step 14            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. places a telephone call to the client indicating that an electronic signature has been received and requests verbal confirmation from the client that the electronic signature was made by an act of the client.

AUTHENTICATION

Step 15            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. evaluates the authenticity of the electronic signature in light of the client’s verbal response.

Step 16            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. evaluates the authenticity of the test signature in light of the client’s handwritten reference signature specimens on file.

Step 17            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. evaluates the biometric data associated with the test signature in light of the client’s biometric data on file.

Step 18            Dr. Peter Scott Geissler of the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. makes a (human) judgment regarding the authenticity of the electronic signature.

NOTIFICATION

Step 19            The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. notify the client and /or the designated recipient that a determination has been made regarding the authenticity of the electronic signature.

Step 20            The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. apply an electronic certification stamp to the document that serves as certification of the authenticity of the electronic signature.

ARCHIVE

Step 21            The Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. save a copy of the test signature and associated biometric data to the client’s records on the secure, remotely located computer system. Back up data is stored in a read-only CD and locked in a fireproof vault within the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq.

APOSTILLE

Step 22            If requested to do so, the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. shall submit the electronic document, together with the authenticated client’s electronic signature with the certification stamp by the Law Offices of Dr. Peter Scott Geissler, M.D., Ph.D., Esq. to the governmental authorities as set forth in the Hague Convention of 5 October 1961.

I verily believe and hereby confirm that the above statements are true.

Signed this 20^th day of November 2013,
Dr. Peter Scott Geissler, M.D., Ph.D., Esq.
European Intellectual Property Attorney