Difference between revisions of "E-Signature"

From MediaWiki
Jump to navigation Jump to search
 
(88 intermediate revisions by 6 users not shown)
Line 1: Line 1:
<center><span STYLE="font: 40pt arial;">'''Division 1 Supplemental Information'''</span></center>
+
<div style="text-align: center;">[mailto:Change?body=http://mdotwiki.state.mi.us/construction/index.php/E-Signature Email this Page]</div>
<center><span STYLE="font: 30pt arial;">'''e-Signature'''</span></center>
 
  
 +
====[[#General Information|General Information]]====
  
===[[#General Information|General Information]]===
+
In 2004 FHWA issued direction that according to the Code of Federal Regulation,[https://www.ecfr.gov/cgi-bin/text-idx?SID=c961274a08c1423164e297c9d95b4e02&node=pt29.1.5&rgn=div5 29 CFR 3.3 Part 5 Federal Contract Law Provisions] electronic signatures are defined as a computer data compilation of any symbol or series of symbols executed, adopted, or authorized by an individual to be the legally binding equivalent of the individual's handwritten signature.  [https://www.fhwa.dot.gov/construction/cqit/111204dol.cfm Read FHWA Direction on Electronic Signatures] A specific type of electronic signature is digital signatures.  Digital signatures are defined as an electronic signature based upon cryptographic methods of originator authentication, computed by using a set of rules and a set of parameters such that the identity of the signer and the integrity of the data can be verified.
  
According to the Code of Federal Regulation, electronic signatures are defined as a computer data compilation of any symbol or series of symbols executed, adopted, or authorized by an individual to be the legally binding equivalent of the individual's handwritten signature.   A specific type of electronic signature is digital signatures. Digital signatures are defined as an electronic signature based upon cryptographic methods of originator authentication, computed by using a set of rules and a set of parameters such that the identity of the signer and the integrity of the data can be verified.
+
An entity such as a computer user can be assigned a unique digital identification.  This digital identification is composed of a public key, a private key, and a digital certificate.  As their names suggest, the public key should be shared amongst users who wish to carry out transactions amongst themselves, while the private key should be only known by its user. The digital certificate is used within a public-key infrastructure to allow a third-party certificate authority to verify that the digital certificate is correctly associated with that particular public key.
 +
 
 +
As public keys are shared amongst a group of users, someone’s public key can be used to encrypt a document and their respective private key can be used to decrypt that document.  Confidentiality and data integrity of the sent document can be practically guaranteed assuming if the recipient is the only one who knows their private key.  Similarly, someone’s private key can be ‘embedded’ into a document to constitute an electronic signature, and the identity of the electronic signature may be verified by using that user’s public key.  
 
   
 
   
An entity such as a computer user can be assigned a unique digital signature.  This digital signature is composed of a public key, a private key, and a digital certificate.  As their names suggest, the public key should be shared amongst users who wish to carry out transactions amongst themselves, while the private key should be only known by its user.  The digital certificate is used within a public-key infrastructure to allow a third-party certificate authority to verify that the digital certificate is correctly associated with that particular public key.
 
 
If a user is assigned a digital ID, and if that digital ID is composed of a unique public and private key, then that user is associated with a unique public and private key.  As public keys are shared amongst a group of users, someone’s public key can be used to encrypt a document and their corresponding private key can be used to decrypt that document.  Confidentiality and data integrity of the sent document can be practically guaranteed assuming if the recipient is the only one who knows their private key.  Similarly, someone’s private key can be ‘embedded’ into a document to constitute an electronic signature, and the identity of the electronic signature may be verified by using that user’s public key.
 
 
{{top}}
 
{{top}}
  
 
====[[#Adoption at MDOT and Acceptable Uses|Adoption at MDOT and Acceptable Uses]]====
 
====[[#Adoption at MDOT and Acceptable Uses|Adoption at MDOT and Acceptable Uses]]====
The Michigan Attorney General’s office, in concurrence of the Federal Highway Administration, has issued a decision authorizing the Michigan Department of Transportation (MDOT) to use and accept digital signatures (see [http://www.michigan.gov/documents/mdot/MDOT_IM12-02_378056_7.pdf BOH IM 2012-02]).
+
The Michigan Attorney General’s office, in concurrence of the Federal Highway Administration, issued a decision in 2011 authorizing the Michigan Department of Transportation (MDOT) to use and accept digital signatures.
 +
 
 +
The Department approved process is to use the OneSpan Sign ID Verification & Acceptance Electronic signature Solution (OneSpan), and OneSpan Sign Mobile Applications for document signing processes. More information regarding OneSpan digital signature can be found here: [https://www.michigan.gov/mdot/Business/digital-signature MDOT Digital Signature Program].  
 +
{{top}}
  
There are many standards available for digital signatures, but MDOT currently authorizes the use of PKCS#12 files for digital identification.  This cryptographic standard requires the signer to enter their unique password each time they digitally sign a document.  This ID can be obtained from various certification authorities, but MDOT will primarily use Adobe as a certification authority.  [http://www.michigan.gov/documents/mdot/Setting_Up_an_Electronic_Signature_422066_7.pdf This PDF file] and [http://www.youtube.com/watch?v=pUIWvJgkw8E this YouTube video] shows how to create a digital ID on Adobe Reader.
+
====[[#Guidance for Non-MDOT Users|Guidance for Non-MDOT Users]]====
  
MDOT is working on integration of electronic signatures on mobile devices. There are several mobile applications that allow PDF files to be digitally signed using mobile devices, but as of now none have been authorized for employee use. Employees are encouraged to submit mobile applications to the E-Sign team and to the Department of Technology, Management and Budget. *Use these links to submit application ideas.
+
External user guidance can be found in the MDOT special provision for [https://mdotjboss.state.mi.us/SpecProv/getDocumentById.htm?docGuid=c5cf0ff9-f732-4145-97c6-f5f4eef29768&fileName=%2220SP-104C-02.pdf%22 Construction Document Management 20SP-104C-02] and on the MDOT digital signature website: [https://www.michigan.gov/mdot/Business/digital-signature MDOT Digital Signature Program].
 +
 
 +
<div style="text-align: right;">[mailto:Change?body=http://mdotwiki.state.mi.us/construction/index.php/E-Signature Email this Page]</div>
 +
{{top}}
  
[http://www.michigan.gov/documents/mdot/How_To_Add_A_Digital_Signature_Via_iPhone_422065_7.pdf This PDF] shows off a potential app that can be used to digitally sign a PDF file on an iPhone.
+
====[[#Transition to OneSpan|Transition to OneSpan]]====
It is important to note that for records retention and archiving purposes whenever digital signatures are used on documents, the electronic file (usually PDF) is considered the original legal document.  Printouts of the document containing digital signatures are considered copies, so the signed electronic file must be retained and follow the relevant approved records retention proceduresMDOT will address the records storage issue through the requirement that all electronically signed documents must be placed in the project directory in the ProjectWise document management programThe [http://mdotwiki.state.mi.us/construction/index.php/E-Construction E-construction wiki page] contains more information regarding ProjectWise.
+
Construction Field Services owns over 250 forms, many of which were affected by migrating from DocuSign to OneSpan. Documents signed in OneSpan cannot have text revisions after the first signature is placed unless a created Template or Layout exists to allow for that process. The signature process may not be intuitive for some users and many forms may look different than they have previously. Signature fields have been removed from many MDOT forms as we refocus on areas where signatures are necessary. Signatures are still being placed on multiple party agreements, contract documents and amendments to contracts, and other forms as indicated on the form itselfForms will specify what the expectation is for the authorization requiredForms may specify one of the following:
{{top}}
 
  
====[[#MDOT Style Guidelines for Use of Electronic Signatures|MDOT Style Guidelines for Use of Electronic Signatures]]====
+
:* '''Signature'''  If a signature is being requested, that signature must take place in OneSpan. 
MDOT electronic signatures will need to conform to the following style guidelines:
 
Adobe Software digital signature option selections:
 
*Graphic options shall be:
 
**“Name” Or “Imported Graphic” (as outlined below)
 
  
*Configure text shall be configured as:
+
:* '''Stamp'''  If an approval stamp/dynamic stamp/pdf review stamp is requested, this stamp is built into in all pdf creator applications, and all stamps from all pdf creators are acceptable.  Stamps must include the individual’s name, and the date & time must be embedded within the stamp.  The individual may use pdf stamps, non-OneSpan pdf signatures or even OneSpan signatures as long the minimum components of Name, Date and Time are included in the applied stamp.
**Uncheck the adobe “logo”
 
**Required to include: (“Name”, “Date”, “Location” and “Reason”)
 
**Optional “Distinguished Name” (includes job title)
 
**Optional for “labels”
 
**“left to right”
 
  
You may have multiple digital signature files configured for different purposes. It is even possible to configure a digital signature with an “Imported Graphic” (option noted above) containing an image of your scanned written signature or a scan of a professional license stamp. These are acceptable, but written signature images are not required and non-business related graphics are not acceptable.
+
:* '''Name'''  In some cases, a typed name is acceptable. A signature or stamp may also be applied, as they meet the minimum requirement of supplying a name in the required field.
  
 +
It is prudent that all users are directing themselves to the MDOT forms repository to ensure they are using the most current form in all scenarios.
  
Below are some Presentations on how to setup and administer electronic signatures
+
====[[#Tranistion to OneSpan – Frequently Asked Signature Questions|Tranistion to OneSpan – Frequently Asked Signature Questions]]====
  
*[http://www.michigan.gov/documents/mdot/Setting_Up_an_Electronic_Signature_422066_7.pdf Setting up an Electronic Signature]
+
Please see below for instructions on some of MDOT’s forms:
  
*[http://www.michigan.gov/documents/mdot/How_To_Add_A_Digital_Signature_Via_iPhone_422065_7.pdf How to Add a Digital Signature via iPhone]
+
* '''Inspectors Daily Report - IDR'''
 +
:Please note guidance listed in Construction Manual Inspector’s Daily Report. Note that the text stating (Signature) is legacy text associated with FieldManager and will not/can not be removed. A pdf review stamp is the mandatory approval action for this document. Transition to AASHTOWare Project will negate the need for this instruction as the Department moves away from FieldManager.
  
*[http://www.michigan.gov/documents/mdot/Applying_an_Image_To_Digital_Signature_422061_7.pdf Applying an Immage to a Digital Signature]
+
* '''Form 1302 FED - Subcontract form'''
 +
:Contractor signatures may be of any legal signature type. Complete and return a copy of the cover page and pay item page(s) to the Engineer prior to any subcontract work beginning.  
  
*[http://www.michigan.gov/documents/mdot/Trusting_and_Validating_a_Digital_Signature_422068_7.pdf Trusting and Validating a Digital Signature]
+
* '''Form 0501 – Materials Source List'''
 +
:All signature fields have been removed from this form. Document does not require signature in OneSpan and instead simply requires typed name of Engineering and Contractor staff reviewing and providing information for this form.
  
{{top}}
+
* '''Pay Estimates
 +
:Previous guidance required electronic signatures on all pay estimates.  Dynamic PDF stamps noting the approver’s name, date and time are now acceptable to be used to document pay estimate approval.  See revised guidance in the Construction Manual for Construction Pay Estimate Approvals.  Transition to AASHTOWare Project will negate the need for this instruction as the Department moves away from FieldManager.
  
===[[#Using Adobe Reader to Digitally Sign|Using Adobe Reader to Digitally Sign]]===
+
* '''Form 1100A – Extension of Contract Time – Request Number'''
 +
:All signature fields have been removed from this form. Document does not require signature in OneSpan and instead simply requires typed name of Engineering staff reviewing and approving the Extension of Time request. Note that Site Supervisor/Foreman/Contractor provided designee must be copied on this final document to ensure mutual understanding of items that will be paid or unpaid as a part of any perspective time extension.
  
Adobe Reader(tm) can be used to sign forms which are enabled for electronic signature. The video below provides a demonstration on how to set up and sign a document digitally using Adobe Reader(tm).
+
* '''Form 1165 – Notice of Non-Compliance with Contract Requirements'''
 +
:Form 1165 must be signed as two distinct processes: The Non-Compliance portion, and the Resume Work Portion. Two layouts are necessary in OneSpan to achieve one completed form. The steps necessary for completion of this form can be found here: [https://mdotwiki.state.mi.us/images_construction/c/cc/1165_Signature_Process.pdf 1165 Signature Process]
  
{{#ev:youtube|pUIWvJgkw8E|350|center|How to Digitally Sign a document with Adobe Reader}}
+
* '''Form 0582B - Moisture and Density Determination'''
 +
:The signature field has been replaced with an “Approval Stamp”. 
  
  
 +
<div style="text-align: right;">[mailto:Change?body=http://mdotwiki.state.mi.us/construction/index.php/E-Signature Email this Page]</div>
 
{{top}}
 
{{top}}
 +
 +
  
 
[[Category: Construction Manual]]
 
[[Category: Construction Manual]]
 +
[[Category: Division 1]]
 +
[[Category: Division 1 Supplemental]]

Latest revision as of 15:30, 20 September 2023

Email this Page

General Information

In 2004 FHWA issued direction that according to the Code of Federal Regulation,29 CFR 3.3 Part 5 Federal Contract Law Provisions electronic signatures are defined as a computer data compilation of any symbol or series of symbols executed, adopted, or authorized by an individual to be the legally binding equivalent of the individual's handwritten signature. Read FHWA Direction on Electronic Signatures A specific type of electronic signature is digital signatures. Digital signatures are defined as an electronic signature based upon cryptographic methods of originator authentication, computed by using a set of rules and a set of parameters such that the identity of the signer and the integrity of the data can be verified.

An entity such as a computer user can be assigned a unique digital identification. This digital identification is composed of a public key, a private key, and a digital certificate. As their names suggest, the public key should be shared amongst users who wish to carry out transactions amongst themselves, while the private key should be only known by its user. The digital certificate is used within a public-key infrastructure to allow a third-party certificate authority to verify that the digital certificate is correctly associated with that particular public key.

As public keys are shared amongst a group of users, someone’s public key can be used to encrypt a document and their respective private key can be used to decrypt that document. Confidentiality and data integrity of the sent document can be practically guaranteed assuming if the recipient is the only one who knows their private key. Similarly, someone’s private key can be ‘embedded’ into a document to constitute an electronic signature, and the identity of the electronic signature may be verified by using that user’s public key.

[top of page]


Adoption at MDOT and Acceptable Uses

The Michigan Attorney General’s office, in concurrence of the Federal Highway Administration, issued a decision in 2011 authorizing the Michigan Department of Transportation (MDOT) to use and accept digital signatures.

The Department approved process is to use the OneSpan Sign ID Verification & Acceptance Electronic signature Solution (OneSpan), and OneSpan Sign Mobile Applications for document signing processes. More information regarding OneSpan digital signature can be found here: MDOT Digital Signature Program.

[top of page]


Guidance for Non-MDOT Users

External user guidance can be found in the MDOT special provision for Construction Document Management 20SP-104C-02 and on the MDOT digital signature website: MDOT Digital Signature Program.

Email this Page

[top of page]


Transition to OneSpan

Construction Field Services owns over 250 forms, many of which were affected by migrating from DocuSign to OneSpan. Documents signed in OneSpan cannot have text revisions after the first signature is placed unless a created Template or Layout exists to allow for that process. The signature process may not be intuitive for some users and many forms may look different than they have previously. Signature fields have been removed from many MDOT forms as we refocus on areas where signatures are necessary. Signatures are still being placed on multiple party agreements, contract documents and amendments to contracts, and other forms as indicated on the form itself. Forms will specify what the expectation is for the authorization required. Forms may specify one of the following:

  • Signature If a signature is being requested, that signature must take place in OneSpan.
  • Stamp If an approval stamp/dynamic stamp/pdf review stamp is requested, this stamp is built into in all pdf creator applications, and all stamps from all pdf creators are acceptable. Stamps must include the individual’s name, and the date & time must be embedded within the stamp. The individual may use pdf stamps, non-OneSpan pdf signatures or even OneSpan signatures as long the minimum components of Name, Date and Time are included in the applied stamp.
  • Name In some cases, a typed name is acceptable. A signature or stamp may also be applied, as they meet the minimum requirement of supplying a name in the required field.

It is prudent that all users are directing themselves to the MDOT forms repository to ensure they are using the most current form in all scenarios.

Tranistion to OneSpan – Frequently Asked Signature Questions

Please see below for instructions on some of MDOT’s forms:

  • Inspectors Daily Report - IDR
Please note guidance listed in Construction Manual Inspector’s Daily Report. Note that the text stating (Signature) is legacy text associated with FieldManager and will not/can not be removed. A pdf review stamp is the mandatory approval action for this document. Transition to AASHTOWare Project will negate the need for this instruction as the Department moves away from FieldManager.
  • Form 1302 FED - Subcontract form
Contractor signatures may be of any legal signature type. Complete and return a copy of the cover page and pay item page(s) to the Engineer prior to any subcontract work beginning.
  • Form 0501 – Materials Source List
All signature fields have been removed from this form. Document does not require signature in OneSpan and instead simply requires typed name of Engineering and Contractor staff reviewing and providing information for this form.
  • Pay Estimates
Previous guidance required electronic signatures on all pay estimates. Dynamic PDF stamps noting the approver’s name, date and time are now acceptable to be used to document pay estimate approval. See revised guidance in the Construction Manual for Construction Pay Estimate Approvals. Transition to AASHTOWare Project will negate the need for this instruction as the Department moves away from FieldManager.
  • Form 1100A – Extension of Contract Time – Request Number
All signature fields have been removed from this form. Document does not require signature in OneSpan and instead simply requires typed name of Engineering staff reviewing and approving the Extension of Time request. Note that Site Supervisor/Foreman/Contractor provided designee must be copied on this final document to ensure mutual understanding of items that will be paid or unpaid as a part of any perspective time extension.
  • Form 1165 – Notice of Non-Compliance with Contract Requirements
Form 1165 must be signed as two distinct processes: The Non-Compliance portion, and the Resume Work Portion. Two layouts are necessary in OneSpan to achieve one completed form. The steps necessary for completion of this form can be found here: 1165 Signature Process
  • Form 0582B - Moisture and Density Determination
The signature field has been replaced with an “Approval Stamp”.


Email this Page

[top of page]