IMPORTANT: TO ENSURE THE BEST POSSIBLE RESULTS, NOTARIES ARE URGED TO READ THIS DOCUMENT CAREFULLY BEFORE COMPLETING AND EXECUTING THE SIGNER APPROVAL REQUEST FORM
Note: This notarial FAQ is oriented for use with the digisign utility and should not be considered the model for notarial procedures in all situations. It is posted in the repository because it provides useful information about the role of the notary with regard to VeriSign's public certification services.
Introduction
The Environment
Organizations and individuals have been moving from traditional paper-based methods of doing business and communicating information to computer-based methods, such as electronic commerce and electronic mail. This movement has created the challenge of finding new technical mechanisms and legal criteria for assuring that electronic documents will be at least as reliable and legally recognized as their paper counterparts. One aspect of this challenge is that the traditional mechanisms used to identify and authenticate documents (such as handwritten signatures on paper documents) are unavailable for authenticating computer-based records. A solution to this problem invokes the use of digital signatures. Each user generates certain numbers, including one called a public key which can be mathematically related to the signer-user's identity and is used to verify the signer-user's signature. A technical primer on digital signatures is included as Appendix 1 to this FAQ.
An American Notary is a ministerial officer of a particular U.S. jurisdiction whose function it is to administer oaths and take affidavits, to take acknowledgments of deeds and other instruments, and to perform other acts specified by law of the notary's jurisdiction. An American notary is not required to be a lawyer and the evidentiary value of a notarial certification varies among jurisdictions.
Notaries enter into this process to enhance the accuracy and trustworthiness of the "association" between the public key and the signer-user's identity. The notary confirms such an association by taking the acknowledgment of ("notarizing") the Digital ID Enrollment form, which facilitates the issuance of a Digital ID by VeriSign. The following figure shows the role of the notary in the sequence leading to the issuance of a Digital ID.
Figure: Role of the Notary in the Certificate Issuance Process
(Process goes from top to bottom)
Notaries attest to this association in their role as "trusted third-parties." They grant to the association the special legal status a notarization brings, enhancing the proof and enforceability of certain digitally signed records and bolstering both the real and perceived trustworthiness of the digital signature environment. Furthermore, the notarization is a one-time act that supports the later verification and proof of a potentially infinite number of digitally signed transactions created under the signer-user's Digital ID. In short, notarization efficiently provides significant and long-term benefits to the signer-user and enhances the viability of global electronic commerce.
About the FAQ
This compilation of frequently asked questions (FAQ) provides assistance to notaries regarding the proper completion and execution of the Digital ID Enrollment form. It seeks to balance notarial discretion with the need for uniformity in the Digital ID issuance process. It also represents the collective experience and knowledge of the VeriSign, Inc. ("VeriSign") staff and counsel. It has been rigorously reviewed by distinguished notaries and by lawyers in both common law countries (such as the United States and England) and civil law countries (such as France and Italy) worldwide. Moreover, it has been reviewed and endorsed by the International Union of Latin Notaries -- the world's most influential and prestigious notarial organization, as well as by various national notarial organizations.
A Notaire is a legal professional whose practice derives from the Romano-Germanic notarial tradition. Notaires are duly appointed officers, whose public office it is to draw up, attest to, or certify deeds and other documents, including conveyances of real and personal property and powers of attorney relating to real and personal property; to certify transactions relating to negotiable instruments; to incorporate, modify and dissolve limited liability companies; to prepare wills or other testamentary documents; to draft protests and other formal papers relating to occurrences on >voyages of ships and their navigation and the carriage of cargo.
This FAQ is a living document that will continue to evolve in response to notary and user questions, experiences and practices. Questions and comments are solicited for possible inclusion in updates of this FAQ.
Return to table of contents
Appendix 1 Digital Signature Technical Primer
Public key cryptography uses a key pair. Each key performs a one-way transformation upon the data. Each key is the inverse function of the other; what one does, only the other can undo. The public key is made publicly available by its owner, while the private key is kept secret. To send a private message, an author scrambles the message with the intended recipient's public key. Once so encrypted, the message can only be decoded with the recipient's private key. Inversely, the user can also scramble data using their private key; in other words, the keys work in either direction. This provides the basis for the "digital signature," for if the user can unscramble a message with someone's public key, the other user must have used their private key to scramble it in the first place. Since only the owner can utilize their own private key, the scrambled message becomes a kind of electronic signature -- a document that nobody else can produce.
A digital signature is created by running message text through a hashing algorithm. This yields a message digest. The message digest is then encrypted using the private key of the individual who is sending the message, turning it into a digital signature. The digital signature can only be decrypted by the public key of the same individual. The recipient of the message decrypts the digital signature and then recalculates the message digest. The value of this newly calculated message digest is compared to the value of the message digest found from the signature. If the two match, the message has not been tampered with. Since the public key of the sender was used to verify the signature, the text must have been signed with the private key known only by the sender. This entire authentication process will be incorporated into any security-aware application.
Users of digital signature technology typically attach their unique Public key to an outgoing document, so the recipient need not look up that Public key in a public key repository. But how can the recipient be assured that this Public key, or even one in a public directory, really belongs to the person which it indicates? Could not an intruder masquerade in the computer network as a legitimate user, literally sitting back and watching as others unwittingly send sensitive and secret documents to a false account created by the intruder?
The solution is the Digital ID-- a kind of digital "passport" or electronic ID. The Digital ID(which contains the user's public key) has itself been "digitally signed" by someone trusted to do so: a certification authority. The notary public supports the certification process by attesting to the identity of the key holder.
Return to table of contents
Appendix 2 Sample Signer Approval Request Form
