Digital signature in database application

we want to develop database application contains a digital signature technology.
In our research we see that digital signature depends on electronic form.
there is no electronic form or document in our application. we are using just the Oracle database and PSP.
is there any way to do it using Oracle Database .
(we can use java or PSP)
Thanks...

Again, without an explanation of the benefit or benefits you are trying to gain, it is really hard to to suggest an approach. "Digital signature" can mean a lot of different things to different people, depending on what you are trying to accomplish.
It could be as simple as adding a signature column to the table and having a BEFORE INSERT OR UPDATE trigger that called dbms_obfuscation_toolkit.md5 to generate an MD5 hash of the data. This wouldn't do anything to ensure that the data hadn't been modified, however, since the signature would simply be recalculated every time. It would, however, allow you to verify that the data didn't suffer a "bit hit" in transit after the signature was applied.
Depending on your goals, solutions can get significantly more complicated from there. How complicated, again, really depends on the particulars of your requirements. Particularly, I would be interested in what benefits you would want from a digital signature approach that you wouldn't get from auditing-- that would give me an idea of the level of complexity you would really need.
Technical people may not be able to decide things like this on our own, but it is our responsibility to let the business know what the most efficient approach to solving their business needs is. If you understand that the business needs to accomplish x, and they have suggested a less efficient way to accomplish that task, it is the technical team's responsibility to go back and explain the options. Business users, in my experience, are generally overjoyed when you come back and say that they can get the functionality they are after at half the cost with minimal development effort.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Similar Messages

Including digital signature in any application/transaction!

Hello,
i try to include the digital signature functionalty into a non predefined application. For example in co11n.
I read "700495" and the included implemetation guide!
Has somebody any further information to implement this functionality into an existing programm/ta?
Some further information about the interface DS_API in package DS would be helpful too!
I hope for help!
Thank You!

Again, without an explanation of the benefit or benefits you are trying to gain, it is really hard to to suggest an approach. "Digital signature" can mean a lot of different things to different people, depending on what you are trying to accomplish.
It could be as simple as adding a signature column to the table and having a BEFORE INSERT OR UPDATE trigger that called dbms_obfuscation_toolkit.md5 to generate an MD5 hash of the data. This wouldn't do anything to ensure that the data hadn't been modified, however, since the signature would simply be recalculated every time. It would, however, allow you to verify that the data didn't suffer a "bit hit" in transit after the signature was applied.
Depending on your goals, solutions can get significantly more complicated from there. How complicated, again, really depends on the particulars of your requirements. Particularly, I would be interested in what benefits you would want from a digital signature approach that you wouldn't get from auditing-- that would give me an idea of the level of complexity you would really need.
Technical people may not be able to decide things like this on our own, but it is our responsibility to let the business know what the most efficient approach to solving their business needs is. If you understand that the business needs to accomplish x, and they have suggested a less efficient way to accomplish that task, it is the technical team's responsibility to go back and explain the options. Business users, in my experience, are generally overjoyed when you come back and say that they can get the functionality they are after at half the cost with minimal development effort.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Regarding digital signature in adobe

hai everybody,
I am using a signature field in the pdf form in webdynpro.
When user enters the signature how can i get that digital signature in webdynpro application .In which format it will be returned .
Can u please suggest any help on this

Hi Madhavi,
Has your problem solved? It would be great help if you can share the solution.
I am opening a new thread, so that I can assign you points also for the help
With regards,
Amit

Free digital signature with Melrose over ?

Good afternoon everyone,
I was told that you could receive a free digital signature for an application if you downloaded the Melrose SDK.
Is this still the case or has that offer ended ?
Regards,
Colin

Hi Colin,
You can request a complimentary code signing certificate coupon from within the Melrose Portal. However you will have to submit an AIR app to the Melrose Portal after you have signed your application.
Thanks
Shikha

How to get verified digital signature for applets?

Hi All,
I run a small website with an applet ( [http://www.tozsdeasz.hu/grafikonrajzolo/inditas.html|http://www.tozsdeasz.hu/grafikonrajzolo/inditas.html] ). Visitors can load files into the applet, so the applet needs to ask for permission from the user to access files on the visitor's computer. When doing so an unfriendly window pops up telling that the digital signature of the application cannot be verified (you can see it for yourself by the link). Some users keep complaining about it fearing of the security risk.
What is the proper way of getting a properly signed applet? (how to get a verified digital signature?)
Please help me!
Best wishes:
Szabolcs Kelemen

Thanks for the links.
As far as I saw in the documents I need a "digital certification authority" to sign the jar.
Do you know any of these authorities that is free? The entire application does not worth much, I can't afford expensive certifications.
Best regards:
Szabolcs Kelemen

Regarding Adobe Digital Signature

Hi
I am using Digital Signature in my application.
I have two signature field in my form.
SignatureField1 will be signed by the First person and then he/she will send that form to the Second person to be signed in the SignatureField2.
The Second Person will open the form and how can he/she validate that signature in the SignatureField1 is signed by First Person Only.
Is there a way of providing Public key of First person to the Second Person for validating the Signature of the First Person.
Regards
Chandran

Hi Madhavi,
Has your problem solved? It would be great help if you can share the solution.
I am opening a new thread, so that I can assign you points also for the help
With regards,
Amit

How do I create a digital signature to use when filling out applications online?

The application is asking me to add or create a digital ID to sign and encrypt documents. The certificate that comes with your digital ID is sent to others so that they can verify your signature.
I have four options: Browse for an existing digital ID file
Configure a roaming ID for use on this computer
Create a self-signed digital ID for use with Acrobat
Look for newly inserted hardware tokens

Formscentral does not support forms with digital signature workflows. I suggest you see if our Echosign product meets your needs.

Restricting application of Digital Signatures

Hello,
I am trying to determine what options are available natively in Acrobat for restricting the type of certificate that is used for applying a digital signature. As far as I can tell, Acrobat, by default, seems to allow the use of any certificate which has the "Digital Signature" extension. This has the potential to create large problems in a regulated environment.
In my organization, our users receive multiple certificates for different applications. For instance, a user may have a certificate for VPN access, one for SMIME email and finally, one that is specifically for applying eSignatures. There is a more robust vetting process for obtaining an eSignature certificate, and it also prompts for a passphrase each time the private key is accessed. Each type of certificate comes from a separate CA.
We've configured the Trusted Identities in each user's Acrobat by deploying an addressbook file to them. We've only defined our eSignature CA as a trusted CA in Acrobat (along with some other universally trusted authorities). The result is that when a signature that has been applied using any other CA, Acrobat will not verify the signature. This is good, but it is not good enough since the dynamic images that come with Acrobat digital signatures do not appear on printed or flattened documents.
Basically, I'm trying to determine whether there is a way to configure Acrobat (natively, out-of-the-box) such that it will only allow application of digital signatures using certificates that are issued from a CA that is defined as a Trusted Identity.
Has anyone encountered this before?

Hi Mike,
The short answer is yes, you can restrict signing to a certain type of certificate. However, you do need to be able to edit each PDF file that needs to be signed.
To expand a bit, the process is know as applying a Seed Value. There are two different types of PDF files and they each have a different method of applying Seed Values. If the PDF is an XML template that was created using LiveCycle Designer, then you can apply the Seed Value to the signature field using the Designer software. On the other hand, if the PDF file is the more ubiquitous AcroForm (e.g. you converted a Word Doc to PDF), then you have to use JavaScript to apply the Seed Value.
Before I get into the specifies of applying a Seed Value, first here is what a Seed Value can do. Among other things, you can use Seed Value to restrict signing to:
a specific user's digital ID
digital IDs issued by a specific CA
a digital ID that has a specific key usage value (it sounds like this is what you are looking for)
If you need to use JavaScript you are doing to want to review the published JavaScript guide. You can find the guide online at http://livedocs.adobe.com/acrobat_sdk/9.1/Acrobat9_1_HTMLHelp/wwhelp/wwhimpl/js/html/wwhel p.htm?href=JS_API_AcroJSPreface.87.1.html#1515775&accessible=true and search search for Seed Value. More specifically, you are looking for the JavaScript call signatureSetSeedValue and the section (about half way down the page) CertificateSpecifier Object. At the bottom of the page are examples of how to set the certspec object.
If you are using LiveCycle Designer you need to display the Object pallet. Select the Window > Object menu item to get the Object pallet to display. Then, select the signature field that you want to apply the Seed Value to, select the Signature tab in the Object pallet, and then click the Settings button. This is the dialog you use to apply the Seed Value.
Good luck and let me know if you need more help,
Steve

What is Digital Signature, How to use it in web based applications?

I am new to digital signatures. Any body can help me how to create a digital signature and how to use it in web based applications. Do we need certificates to use digital signatures?

<link_farm_and_everything_else_removed_by_moderator>
Edited by: Julius Bussche on Sep 3, 2008 8:59 AM

MS Visual Basic for Applications will not apply digital signatures

When using Microsoft Visual Basic for Applications within any office application (Excel in this case), i cannot see the certificate store when creating digital certificates. It appears to be localised to the operating system but can't seem to find the issue.
To create the digital signature within Excel i normally go to Developer > Visual Basic > Tools > Digital Signature. When i select 'Choose', the certificates are not presented.
Has anyone experienced this?
Thanks in advance.

Hi,
As far as I know, If we want to use the digital signatures, we need to Digital Certificate for VBA Projects tool which a set of extra tools. I recommend we repair/reinstall the tool with a backup install CD.
Then, we may follow the below links to reset a digital signatures and add the digital signatures in the trust list(Location: File>Option>Trust center.) to test if it is helpful:
http://www.wiseowl.co.uk/blog/s240/digital_certificates_for_macros.htm
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
George Zhao
TechNet Community Support

Digital Signature Integration with Oracle Application

Hi
We have a requirement of taking the digital Signature online from the different users and embedding into the report.
This is required to avoid paper work of getting the signature and archiving those papers.
Instead , we need to do that online.
Please let me know how it can be done in Oracle Application
Thanks

Hi Hussein,
Thanks for the reply.
I will explain my requirement .
This needs to be implemented in Warehouse.
Requirement is
Whenever the goods are shipped from warehouse to Stores, a report of items are taken and it is signed by the driver who transports those items.
These are done by taking the printout manually and getting the signature manually.
Because of this archiving becomes very difficult.
We would like to get the drivers signature online and embed into the report.
Thanks

The application's digital signature cannot be verified.

Hello all,
My form config = Forms [32 Bit] Version 11.1.1.3.0 (Production)
I create the one jar file on JDeveloper 10.1.3.
When i run my application on Windows Xp, Windows server 2003 given prompt open after that my browser and form stuck. I am not able run my form.
The application's digital signature cannot be verified.
Some Operating system can easily run the application like Windows server 2008.
Please guide me what is main problem.
in linux system i got this message on jre console..
Java Plug-in 1.6.0_34
Using JRE version 1.6.0_34-b04 Java HotSpot(TM) Server VM
User home directory = /home/user
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
q:   hide console
r:   reload policy configuration
s:   dump system and deployment properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
Forms Session ID is formsapp.60
The proxy host is null, and the proxy port is 0.
Native HTTP implementation is being used for the connection.
The connection mode is HTTP.
Forms Applet version is 11.1.1.3
java.lang.ClassNotFoundException: demo3.demo3
at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at oracle.forms.handler.UICommon.instantiate(Unknown Source)
at oracle.forms.handler.UICommon.onCreate(Unknown Source)
at oracle.forms.handler.JavaContainer.onCreate(Unknown Source)
at oracle.forms.engine.Runform.onCreateHandler(Unknown Source)
at oracle.forms.engine.Runform.processMessage(Unknown Source)
at oracle.forms.engine.Runform.processSet(Unknown Source)
at oracle.forms.engine.Runform.onMessageReal(Unknown Source)
at oracle.forms.engine.Runform.onMessage(Unknown Source)
at oracle.forms.engine.Runform.sendInitialMessage(Unknown Source)
at oracle.forms.engine.Runform.startRunform(Unknown Source)
at oracle.forms.engine.Main.createRunform(Unknown Source)
at oracle.forms.engine.Main.start(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

When i check on Linux System I got this error :-
Java Plug-in 1.6.0_45
Using JRE version 1.6.0_45-b06 Java HotSpot(TM) Server VM
User home directory = /home/user
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
q:   hide console
r:   reload policy configuration
s:   dump system and deployment properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
Forms Session ID is formsapp.188
The proxy host is null, and the proxy port is 0.
Native HTTP implementation is being used for the connection.
The connection mode is HTTP.
Forms Applet version is 11.1.1.3
Forms Session ID is formsapp.189
The proxy host is null, and the proxy port is 0.
Native HTTP implementation is being used for the connection.
The connection mode is HTTP.
Forms Applet version is 11.1.1.3
Forms Session ID is formsapp.139
The proxy host is null, and the proxy port is 0.
Native HTTP implementation is being used for the connection.
The connection mode is HTTP.
Forms Applet version is 11.1.1.3
FRM-92091: unexpected fatal error in client-side Java code
Java Exception:
java.lang.NullPointerException
at demo3.demo3.getMacAddress(demo3.java:70)
at demo3.demo3.getProperty(demo3.java:43)
at oracle.forms.handler.UICommon.onGet(Unknown Source)
at oracle.forms.engine.Runform.onGetHandler(Unknown Source)
at oracle.forms.engine.Runform.processMessage(Unknown Source)
at oracle.forms.engine.Runform.processSet(Unknown Source)
at oracle.forms.engine.Runform.onMessageReal(Unknown Source)
at oracle.forms.engine.Runform.onMessage(Unknown Source)
at oracle.forms.engine.Runform.processEventEnd(Unknown Source)
at oracle.ewt.lwAWT.LWComponent.redispatchEvent(Unknown Source)
at oracle.ewt.lwAWT.LWComponent.processEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Window.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
at java.awt.EventQueue.access$400(Unknown Source)
at java.awt.EventQueue$2.run(Unknown Source)
at java.awt.EventQueue$2.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.AccessControlContext$1.doIntersectionPrivilege(Unknown Source)
at java.security.AccessControlContext$1.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.AccessControlContext$1.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)

What is the use of Digital Signature in export release build for AIR applications

hi Freinds..
what is the use of digital signature identity when we release build?

Well obviously it is an Ant build.
It looks to just compile/build a web application into a war so you can deploy it where you want to.
You don't need to edit it every time you are making a new page. It should work for any generic struts web application laid out in the fashion it expects.
Cheers,
evnafets

Digital Signature Setup for Fusion Applications Saas Customers

Hi,
I have been reading in the Fusion Middleware book and I see that we can define the Digital Signature, but it looks like it can be done only in SOA.
We have a customer that requires this information on how they can set it up in fusion applications and if it is supported for the SaaS customers ?
Regards,
Nag

Can you elaborate on what the requirement is ? Are you trying to integrate with services using message protection or ? if so you may find the following documentation useful:
Use Cases for Implementing Applications for Oracle Sales Cloud
Software as a Service (SaaS) Documentation (Doc ID 870963.5)
Jani Rautiainen
Fusion Applications Developer Relations
https://blogs.oracle.com/fadevrel/

Adobe Reader 9, Form Fields, Digital Signature

I have already posted this in Adobe Reader forum and had no replies... probably the wrong area...
We are a software company and we are developing a simple application, as follows:
Any number of pdf documents are provided by a third party (our customer / customers). Each form contains any number of fields and a digital signature field.
Our application must fill the fields with values obtained by a back-end database
Using Adobe Reader 9, our application must display each pdf document filled in step 2, for users to sign using a Topaz tablet.
The "blank", original pdf document can be easily completed by hand and signed using the Topaz tablet - thanks to the Adobe Reader plug-in.
Also, we can quite easily fill all the doument's fields using the popular iTextSharp libraries - we extract relevant data from our back-end database, we set the field values, and we display the document in Adobe Reader 9 (note that after filling the form, we have experimented with "flattened" and "non-flattened" documents....with the same results)...
Here we start having some problems:
As soon as the "filled" document is displayed in Adobe Reader, the message "This document enables Reader capabilities that are no longer enabled in this Reader version." is displayed. And the signature field is disabled and the Topaz plug-in is never invoked.
It seems that the simple task of programmatically filling the form with data.... disable the most important feature of the form (the signature line).
Unfortunately, my knowledge of the Adobe product line is somewhat limited....
After hours of research I think I understand why (even though I find the behavior incredibly strange and restrictive). I still would like, if possible, summary and clear information on what we (and/or the provider of the pdf forms) need to do to accomplish the goal of our application.
Thanks in advance for any suggestion.
Giorgio

jmo here
In context of your description, use of Acrobat Pro to "enable" PDFs for use by Adobe Reader appears to be contrary to the Acrobat EULA (if nothing else, the "500" limit for forms).
If that's the case then I suspect your only option would be LiveCycle ES.
Back down the Forum's timeline, someone mention $50K for a seat.
But LC ES has many variations (modules if you will) so the price point may be higher.
Basically, it is expensive (although worth the $$ to the IRS and other large entities).
Worth noting are the posts in this forum that allude to Adobe's legal actions taken against those who have, it seems, violated the Acrobat EULA.
If your client(s) are associated with a corporate entity they may be exposed to legal "road hazards"; but, that's speculative, eh?
Regardless, it does sort of appear that you may be on thin ice vis-a-vis "enable" of PDFs for use by Adobe Reader.
Be well...

Digital signature in database application

Similar Messages

Maybe you are looking for