Internet signatures

There is no standard report form offered because the standard requires it be completed and in accordance with any specific instructions in the test or calibration methods (subsection 5.10.1). It is noteworthy that the general notes to subsection 5.10 do allow a simplified report to be issued to internal clients, as long as the full information is readily available in the laboratory. There are 11 items that are required on test reports and calibration certificates (unless there are valid reasons for their exclusion) plus five additional items that cover aspects of interpretation and six items when sampling has also been carried out as part of the test. Increasingly test reports are submitted electronically. This is referred to in the standard (subsection 5.10.7) and is allowed as long as the requirements of the standard are met. Of importance is the integrity of the report and the nature of the signature when the report is sent by e-mail or via the Internet. 

Many of the private laboratories offer screening for heavy metals (including lead, mercury, cadmium, arsenic, aluminum, and nickel) and other chemicals, such as PCBs, chlorinated solvents, trichloroethylene, and pesticides. One such laboratory advertised testing for nearly 70 chemicals. Occupational screening was also offered at some of the laboratories. For many laboratories, people may order test and screening kits over the Internet, by fax, or by telephone. A person can send in a blood, urine, or hair sample for analysis. In some cases, a physician s signature is required to have the sample tested. 

Widely adopted technical standards for this area are also still missing. A format for Archival Electronic Signature (ES-A) has been defined in [ETSI]. An IETF working group is working in this field (see [DOS] and [WAL]), but most documents are at the level of Internet Drafts and they are works in progress. 

Open systems refer to computer setups in an environment where a specific person who is responsible for the stored data does not control system access. A good example of an open system is the Internet. Specialist controls are required such as encryption and digital signature standards like Public Key Infrastracture (PKI) to provide necessary assurance in electronic records and electronic signatures. 

An essential application of the Internet is exchanging data. The most important validation task is to verify correct data transfer when uploading and downloading files to the Web server and for e-mail communication. Correct file data transfer should be tested not only under normal but also high load conditions. Test variables should include Web browser, time of day, location of destination computer, and file size. For verification of correct file transfer we can use hash calculations, which are also used for digital signatures. Important is development of specifications, for example, maximum file size. 

For practical applications, digital signatures are one of the two most important cryptologic primitives. In particular with the rise of electronic conunerce on the Internet and the World Wide Web, they may become even more important than the better-known schemes for message secrecy. 

In many companies, a major Management Review process is conducted annually and a summary progress report carrying the signature of the chief executive officer is published. Such reports may be made available broadly, such as on the Internet. Publication of the reports serves the purposes of good community relations as well as good employee relations. 

Universities and Schools. Universities require a secure computer system to store student demographic and health data student grades and course work computer access information personnel information, including salaries research data and Internet use. Most students have their own personal computers and are able to access some areas of the university s computer system. Their digital signatures must be linked to a table that reflects their limited access. Faculty members, both on and off campus, are able to access the university s system, and their access also has limits. Researchers use the university system to store data for their projects and to perform analyses. Much of the research on encryption of data has been performed by university researchers. University staff have access to additional data based on their... 

Hacking, identity theft, and other types of cyber theft have become problems, which have only increased the need for better security tools, such as digital certificates and digital signatures. Increased security needs will continue to fuel the ever-expanding Internet security industry. 

---