The following are general requirements for electronic signature capture. These requirements are based upon the concepts used to determine the authenticity of any electronic signature to- document relationship, and are based on e-Sign and digital handwritten signature regulations.

All of the data being agreed to (the document or transaction data) should be contained in the original document or transaction data.

The document should be reviewed. A time-and-date stamp can be used to record information about the document, its presentation and acceptance, and any changes that may occur to the document prior to the completion of its review by the signer. The signature should be bound to the entire single document, transaction or message that was reviewed, and to no additional information. Displaying or storing any additional statement or data that may relate to the signature or the intent of the signer should be avoided. These statements or data could potentially conflict with other facts or with the wording in the actual document being signed. With Topaz, the goal is to mimic traditional pen-on-paper transactions - just the document or transaction data and the signature with nothing extra added or subtracted.

The signature should be linked in some way to the document or contract.

The best way to do this is with the Topaz SigPlus binding, which forms a direct cryptographic relationship between the signature and a single document or aggregated data message, and security data.

Changing any document data after capturing the signature results in a binding violation. Without the original document, you cannot examine, print, or display the signature. This is evidence of a powerful link between data and signature. Topaz SigPlus ActiveX software is compliant with state and federal regulations which require that the signature be cryptographically bound to only a single document message.

The Autokey function provides a cryptographic hash based on a file or a set of data.

Hundreds of data-base cells can be combined to form a single document to be signed. Autokey is commonly used to aggregate all of the database or forms cells into a common hash, creating therefore a single message entity for binding to the signature(s),

The OCX software generates document and signature receipts.

Receipts are unique 8-character strings representing the data content of the signature or the document. They can be provided to the signer as a virtual receipt of the contents of the paperless document being signed. The patent-pending Topaz receipt system allows all parties to detect attempts to tamper with documents or signatures.

The signature should be prevented from being copied by ordinary means.

Binding is the best way to achieve this. The SigPlus ActiveX control signature-capture software binds the signature using the Autokey function or to a hash of your own choice.

The captured signature should be stored in a Topaz .sig file if the application permits.

Storing a signature in a Topaz ".sig" file preserves the original signature in electronic form. No data is lost in a driver layer, and the combination of patented hardware and both patented and patent-pending software facilitates forensic authentication and verification of the signature at a later date.

Choice of hardware is critical is determining ease of use and productivity in electronic signature-capture systems. Important issues include:

Is the signer experienced in using electronic signatures, or is this a "one-time" signer?

If this is a "one-time" signer, then it is vital to have some kind of ink show up from under the tip of the pen. Electronic artist pads and pens with plastic tips can be dis-orienting for the one-time signer, making them slow to use. Often, the individual has to sign several times before getting it right. Touch pads used with ordinary ball point pens can cause signatures to not be "true" due to high signing pressure to deform the paper enough to activate the touch pad.

Will the signature have to be compliant with state regulations for digital signatures?

The signature must be natural in order for forensic authentication capability, as required by state regulations, to be as effective as possible. The best way to ensure the highest-possible compliance is to use an inking tip in the pen (as supplied with most Topaz tablets) and a pad or sheet of paper or the actual printed contract for the customer to take as a receipt. Touch pads used with ordinary ball point pens can cause signatures to not be "true" due to high signing pressure to deform the paper enough to activate the touch pad.

Is the application portable? Does the tablet have to be rugged?

Even if the environment seems benign, it can still be brutal on signature-capture equipment. Dropping tablets and even running them over with a vehicle are things that do happen out in the field. Immunity to minor scratches and cuts is important in the choice of tablet and pen. Be sure that the tablet does not have any sensitive membrane or semiconductive writing surface. If the tablet uses an ordinary pen, then it will also have one of these thin (1/100") surfaces which are easily damaged in storage, transit, and use.

What about pen storage and tether?

If the pen has no tether connecting it to the tablet, it will most certainly be lost or misplaced. If there is no built-in storage compartment for the pen, then it may leak ink onto valuable documents or clothing, or become damaged. All Topaz tablets are designed with built-in pen holder and tethers.

What is the size of the area to be signed? Is the signature single, multiple or a whole page?

Most applications can use the small SignatureGem, even if signing multiple times. It is the most widely used portable tablet in the industry. When your application calls for a larger signing area (such as standard forms, 3x5 cards, and bank signature cards), the SignatureGem4X5 may be the best choice. For an entire 81/2 X 11 inch form to be signed and marked-up, the ClipGemtm is the best choice.

How can I go about testing a Topaz signature product to see if it fit's my needs?

Contact the factory or Topaz distributor to qualify for a no-risk evaluation unit. All evaluation units are supplied complete with all hardware, software, and technical support you need to get your application up-and-running in very little time. In this way, you can be sure that everything works to your satisfaction right away.