Digital and advanced electronic signature: the security function, especially in electronic commerce

¹ John Velentzas, Professor (University of Western Macedonia, ivelentzas@uowm.gr)
² George Kiriakoulis, PhD student (University of Western Macedonia, kiriakoulisgeorgios@gmail.com
³ Georgia Broni, Assistant Professor (University of Western Macedonia, gbroni@uowm.gr)
⁴ Nick Kartalis, Professor (University of Western Macedonia, kartalisdn@gmail.com)
⁵ George Panou, Assistant Professor (University of Western Macedonia, georgepanou@hotmail.com)
⁶ George Fragulis, Professor (University of Western Macedonia, ivelentzas@uowm.gr)

Abstract

The purpose of Directive 1999/93 / EC on the Community framework for electronic signatures is to facilitate the use of electronic signatures. Digital signatures are incredibly important as they prevent fraud in e-commerce transactions. A legal framework for electronic signatures is established to ensure the smooth functioning of the internal market. This article aims to interpret the European framework for digital signatures.

Member States shall at least ensure that, when issuing a certificate, the certification body is liable for any damage caused to any entity or natural or legal person reasonably based on the certificate:

(a) the accuracy, at the time of issue, of all the information contained in the recognized certificate.

(b) ensure that, at the time of issue of the certificate, the signatories identified on the recognized certificate were the holders of the signature-creation data corresponding to the signature verification data referred to or specified in the certificate;

Member States shall at least ensure that the certified provider is liable for any damage caused to any entity or natural person who reasonably relies on the certificate, unless the certifying provider proves that it did not act negligently.

Member States shall ensure that a certified service provider may indicate in a recognized certificate restrictions on the use of that certificate.

Member States shall ensure that a certification-service-provider may indicate on the recognized certificate the limits on the amount of transactions for which the certificate may be used. For all of the above, the certification service provider is not liable for damages resulting from exceeding these limits.