A type of hardware device that is used to create qualified electronic signatures (QES) that comply with the European Union's eIDAS (Electronic Identification and Trust Services) regulation. A QSCD is a secure device that meets specific technical requirements and has been certified by a qualified trust service provider (QTSP) in accordance with the eIDAS regulation.
Security Requirements
A QSCD must meet certain security requirements, including tamper-evident protection, secure key storage, and protection against unauthorized access.
- Tamper-evident protection: Ensures that any attempt to tamper with the device will be evident.
- Secure key storage: Safeguards the cryptographic keys used for signing.
- Protection against unauthorized access: Prevents unauthorized individuals from using the device.
Types of QSCDs
QSCDs can be hardware-based, such as smart cards or USB tokens, or software-based, such as secure signature creation software installed on a personal computer or mobile device.
- Hardware-based QSCDs: Include smart cards and USB tokens.
- Software-based QSCDs: Include secure signature creation software installed on personal computers or mobile devices.
Legal Effect
The use of a QSCD is mandatory for creating qualified electronic signatures that have the same legal effect as traditional handwritten signatures under eIDAS.
- Legal equivalence: Qualified electronic signatures created with a QSCD have the same legal effect as handwritten signatures.
- Highest level of assurance: Provides the strongest form of assurance about the identity of the signer and the integrity of the signed data.
Importance
The use of a QSCD provides an additional layer of security and assurance that the electronic signature was created by the identified signer and that the signed data has not been tampered with.
- Security layer: Adds an extra layer of security to the signing process.
- Assurance: Ensures that the electronic signature was created by the identified signer and that the signed data is intact.