Remote signing

Remote signing means the signature is created on a server managed by a QTSP instead of on a card or token held by the user. The private keys live in a certified HSM (a remote QSCD); the user authorises each signature from their own device with strong authentication.

The standards behind this (CEN EN 419 241, ETSI TS 119 431/432) require sole control: only the signer can activate their key. Remote signing makes a QES as easy as a mobile app - no hardware for the user - and is the model Cleverbase uses (with the CSC API for integrations).

Frequently asked questions
Qualified signature creation device (QSCD) Hardware security module (HSM) Sole control Qualified electronic signature (QES) Cloud Signature Consortium API (CSC API) Strong authentication
Back to glossary