|
|
INTEROPERABILITY
SPES Interoperability is based on a set of strategic choices:
- the adoption of a Trusted List of Certification Authorities (CAs) that specifies all the CAs that the SPES team consider as "trusted" for the SPES applications.
- The maintenance of an Electronic Signature Verification software which is capable of verifying all the signatures producedi, using the specific "SPES trusted" CA's instruments.
- The adoption (wherever possible) of a centralized architecture for strong authentication in on-line service implementation.
- The definition of a negotiated procedure to "validate" any new CA as "trusted"
Using the SPES interoperability tool, each end user receiving an electronically signed document, and each person responsible for web service implementation, will be helped in the making the decision of whether or not to accept the digital certificate.
However, due to the state of the art in European Electronic Signature regulation, and due the nature of the SPES
project consortium, neither SPES nor the specific Certification Authority, considered "trusted" by SPES team, will be affected by the existence of this SPES interoperability tools in terms of their existing liabilities.
All allocation of the existing risks associated with the independent activity of the SPES partners and of the Certification Authority will continue unaltered by these SPES interoperability tools.
There will be no additional liability to the Certification Authority as it will maintain its existing liability to its customers.
Nor will any liability fall upon SPES partners relating to the usage of the certificates supplied via the Certificate Trusted list and relied upon by the relying parties.
For each electronic signature that is verified using the SPES interoperability tools, the end user will have the full responsibility in accepting that electronic signature.
SPES provides no warranty, either actual or implied, for certificates issued by member CAs and that the use of these certificates is completely at the discretion of the user who is the relying party.
The SPES software will be provided free of charge, but its use will be at the sole risk of the user.
|
|
|
|
|
|
