Re: Security Issues regarding an e-forms routing/management system[Message Scanned]

[Harold A'Hole <madman () MYEASTSIDE COM>]

Ben,

The other posting was most likely correct.  If the docs are just for internal authorization, you can probably find that 
a secure login will be enough if you provide some sort of "I Agree" button that the person presses when they want to 
sign.  Some people will even have them re-enter a password, but that's just for people who are worried others will get 
access while the person is already logged in, a problem that has always existed.

For contract law, you will need to use something more robust.  These include various disclosures, the creation of 
digital signatures or other techniques to be able to prove that you have an original electronic version, and you need 
to ensure all parties involved get a copy of the signed electronic version.  This has more to do with standard contract 
law coupled with the U.S. E-Sign Act.

Yozons offers such technology, and they have several other education clients already.  You can easily use the process 
you have and/or integrate some new web-based forms for signing legally.  But if this is just for authorization within 
the school, then you don't really need a legal contract as much as a good sense that the authorized party has indeed 
authorized a form.  

Harry
  ----- Original Message ----- 
  From: Parker, Ben C 
  To: SECURITY () LISTSERV EDUCAUSE EDU 
  Sent: Tuesday, December 14, 2004 1:07 PM
  Subject: [SECURITY] Security Issues regarding an e-forms routing/management system[Message Scanned]


  All:

    Do any of your institutions use some sort of system to manage all the various forms that have to be filled out by 
multiple people on a daily basis?  Our main security concern is what qualifies as a valid e-signature.  Would something 
like authentication via LDAP to a secure website work, or do we have to add extra measures such as a pin number or 
another point of authentication.  If anyone can point me in the right direction or provide info on this type of thing, 
I would appreciate it.

   

   Also for those who have it, was it something designed in house or do you use a product created by a vendor and if so 
what?

   

  Thanks,

   Ben Parker

   Mount Union College

  ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found 
at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.