Trust & Security in the Cloud

Marcin Szulga

Trust Services R&D Director

Asseco Data Systems

3

• Established in Poland, in 1991

• Our companies are listed in Warsaw, Tel Aviv and on NASDAQ

Asseco Group – at a glance

Provider of

proprietary

software

and services

6th

largest software

vendor in

Europe

Provider of

IT infrastructure

and IT security

solutions

176mEUR EBIT in

2016

1,1mEUR market

capitalization

22 300 employees, in

over 30 countries

1,8bEUR sales

revenue in

2016

The largest

IT company

in CEE

Federation

of companies,

owned and/or

controlled by

Asseco Poland

4

C E R T U M

– Key Facts

Our offer – the most complete stack

5

6

Trust Services & Security – a journey

Cloud is the next step in evolution of Trust Services

New solutions for Trust Services

7

REST API

CustomerHSM

(Crypto Cards)

eIDAS

qualified

service

eSignature/eSealService

SimplySign

Signature API

Certum IdP

API

WebNotarius

Sig. Validation

API

NonQ Certs

Enrollment

API

Q Certs

Enrollment

API

Certum JAVA

API

WebBrowser

Signature

Component API

Certum APIs Portfolio

Common API Use Cases

E-Invoices, ReportsFinance

AgreementsSales

Orders, ProposalsProcurement

Holidays, HR Requests, Agreements (short-time)

HR

Taxes, Social Insurance, ReportsB2G

API

Enterprise application

Finance

Sales

Web application

Mobile Devices

HR

API

11

STEP 1: Enroll certificate on SimplySign service

STEP 2: Integrate with Certum IdP API to obtain Access Tokens

STEP 3: Integrate with SimplySign API for document or code signing

Certum SimplySign API

12

Asynchronous REST, JSON

Certum SimplySign API

Authentication

Authentication

Access Token

Access Token

Signature Call

Certum Auth API

ExternalAuth API

APICERTUM

GET /idp/oauth2.0/authorize

POST

/idp/oauth2.0/accessToken

CLIENT_ID, REDIRECT_URL

CLIENT_ID, SECTER_ID,

REDIRECT_URL, AUTH_CODE

Certum IdP Auth API

13

14

Certum SimplySign

High Level vs Low Level API

POST “Sign” Method (PaDES)High LevelAPI

GET/cardsGET

/cards/certificates

POST

/cards/certificates/signLow Level

API

15

CSC API

16

How to start?

It's easy!

Contact us:

partner@assecods.

pl

17

PKCS#11, CSP, KSP driver that emulates physical card and connects via API with SimplySign service.

SimplySignDesktop

If I don’t want to play

with API and M2M?

18

CodeSigning in the Cloud

Innovation on the global market!

High security solution in the Cloud –

faster and easier signing of code and applications.

CodeSigning in the Cloud

20

If you want to know more– visit us at

stand A07Certum

„Trust & Security in the Cloud”

Thank you.

21

Marcin SzulgaTrust Services R&D Director

mobile: (+48) 669 992 097skype: marcin_szulgae-mail: marcin.szulga@assecods.pl

The power of creation.

22

www.assecods.pl