|
Law Office of Elias M. Gordan
ELECTRONIC DOCUMENTS AND DIGITAL SIGNATURES - II
Electronic communications and the Internet are transforming the way that business is being transacted, whether across the street or across the world. Two major questions hindering the growth of electronic commerce have been
- Are electronic documents legally binding?
- How do I know an electronic document has not been forged or altered?
Recent new laws at the State and Federal levels are attempting to answer these questions.
How do I know an electronic document has not been forged or altered? When you receive an important electronic message, you want to be sure of the message, and the party sending the message. This concern has been mostly addressed by the rise of secure Internet connections and public key encryption. An SSL (Secure Socket Layer) connection (with the prefix “https://” instead of “http://”) allows for secure communication between a server, and a computer’s browser (such as “Internet Explorer” or “Netscape”). The server provides the secure connection.
But what if a person wants to send a secure email to another person, and neither has a secure connection? The answer under current technology has been public key encryption. This form of encryption uses a complex mathematical function to generate a “digital signature” to an electronic document. The sender prepares the document and adds a “private key”, a mathematical formula that encodes the document with a unique “signature” for the sender. In addition, a “hash function” can generate a unique “hash result”, or “fingerprint”, for the document. The private key and the “fingerprint” combine to form a “digital signature”.
Upon receipt, the document can be verified with a “public key”, a mathematical formula designed to “unlock” a message, that has been “locked” with a matching private key. A third party “certification authority” can certify that a specific public key is linked to a specific person and their private key (a “certificate”). This proves that a specific person sent an electronic document. An owner of a private key is responsible for protecting their “key”, much like a credit card or PIN (personal identification number).
Meanwhile, a second matching “hash function” can verify the content of the document, and assure that the document’s “fingerprint” was not altered in transit. This is possible because a digital signature is unique to a particular sender and a particular message. It is also possible to “time stamp” a particular document to establish when it was sent.
Using a public key/private key pair, a “secure electronic signature” can be established under Illinois law, if the parties agree to use this method, or if the third party certification authority is approved by the Illinois Secretary of State, and the third party certificate is found to be trustworthy.
A secure electronic signature, in turn, can be used to show that a secure electronic record was created. Both the record and the signature, then, could be presumed to be genuine.
The laws of other states may or may not address these issues. Other States may address issues that Illinois law does not address. E-SIGN does not cover means of authenticating electronic documents. If in doubt, seek the advice of an attorney familiar with these issues.
For information on obtaining public/private key pairs, please visit the LLRX (Law Library Resource Xchange) at http://www.llrx.com/email/bibliography.htm Recent versions of “Microsoft Outlook” may also offer links to purchase these key pairs.
RESOURCES
3). Illinois Electronic Commerce Security Act, 5 ILCS 175, available from http://www.legis.state.il.us . Go to Illinois Compiled Statutes on the Website, then go to Chapter 5, then to 5 ILCS 175/. There is no direct link available.
4). Indiana Uniform Electronic Transactions Act,
|