top of page
Een document stempelen

Electronic seal (QESeal)

Discover how you can use an electronic seal to ensure the origin and integrity of digital documents.

What is an electronic seal?

An electronic seal is used by legal entities (such as organizations and companies) to guarantee and verify the origin and integrity of digital documents (such as invoices and deeds).

 

What is are the differences between an electronic seal and an electronic signaturel?

Although the underlying technology and standards of electronic seals are very similar to those of an electronic signature, there are important differences between these two electronic trust services.

​

  • Purpose: Where digital signatures are intended to digitally sign legally valid documents, electronic seals are intended to guarantee the origin and integrity of digital documents.

  • Intended for: Electronic seals are intended for legal entities, electronic signatures for natural persons.

  • Verification of: With electronic signatures, the identity of the signatory is verified, with an electronic seal, the origin of the document.

​​

Which electronic seals do exist?

Similar to an electronic signature, the following three types of electronic seals exist.

​

1. Simple electronic seal (SESeal)

  • These are all types of electronic seals that do not meet the minimum requirements for advanced and qualified electronic seals and are therefore less reliable.

​​

2. Advanced electronic seal (AdESeal)

An advanced electronic seal meets the following security requirements set out in the eIDAS Regulation.

  • Unique link to the legal entity: The advanced electronic seal must be uniquely linked to the entity (legal entity) that creates the seal.

  • Identification of the legal entity: The seal must unambiguously identify the legal entity that created it.

  • Creation with seal creation data that the legal entity keeps under exclusive control: The seal must be generated with data (e.g. a private key) that are managed only by the legal entity and to which no unauthorised access is possible.

  • Protection against alteration: The seal must be generated by a means that ensures that alterations to the signed data can be detected.

​​

3. Qualified Electronic Seal (QESeal)

The qualified electronic seal offers the highest level of legal certainty. A qualified seal is equal to an advanced seal with the additional:

  • The seal is created with a Qualified Seal Creation Device (QSCD);

  • A qualified certificate for electronic seals issued by a QTSP.

​

What are the most important advantages of an electronic seal?

  • Increased trust: Electronic seals – especially qualified electronic seals – enable businesses, organizations, and government agencies to conduct and deliver electronic transactions and online services in a more secure and reliable manner. This, in turn, helps them build and maintain the trust of their customers and stakeholders.

  • Document origin assurance: Electronic seals are based on digital certificates issued by QTSPs. These certificates serve as proof that an electronic document was issued by a legal entity that created the seal.

  • Document integrity assurance: Advanced and qualified electronic seal providers use PKI technology to ensure that the sealed document has not been tampered with.

  • Legal effect: The eIDAS Regulation states that electronic seals may not be denied legal effect simply because they are in electronic form. Therefore, businesses can use electronic seals as evidence in legal proceedings.

  • Increased efficiency: Companies can use digital tools to automate electronic sealing of documents, improving efficiency and productivity.

  • Interoperability: Qualified electronic seals offer EU-wide recognition and increased interoperability.

What does the eIDAS trust service qualified electronic seal (QESeal) look like?

Technically, the trust service for electronic seals is the same as that of electronic signatures. The main difference is not substantially in the technology but in the way in which the identity of a legal entity versus a natural person is determined during identification. As for synthetic electronic signatures (QES), a functional electronic seal (QESeal) is the highest form of an electronic seal within the eIDAS Regulation, with strict requirements and a specific structure.

​

The basis of a qualified elekctronic seal (QESeal)

  • Linked to a legal person: A QESeal is unique to the legal creator of the seal and contains a digital certificate that confirms the identity of that legal person.

  • Authentication via a certificate: It requires a qualified certificate issued by a qualified trust service provider (TSP).

  • Use of a secure seal creation device (QSCD): This is a secure device that enables the creation and storage of the seal.

​​

The components of a qualified electronic (QESeal)

  • Digital Certificates: The qualified certificate contains the following information:

    • ​The name of the trust service provider.

    • ​The identity of the legal seal creator.

    • ​Validity of the certificate (start and expiration date).

    • ​A public key linked to the legal person being the seal creator.

  • Secure Signing Technology: When using a QESeal, cryptographic technology is applied, such as:

    • ​Asymmetric encryption: With a private and public key to secure the signature.

    • ​Hashing algorithms: To ensure the integrity of the document.

  • ​​Trust Service Provider (TSP): Only eIDAS qualified TSPs are allowed to issue certificates for a QESeal. These providers are regularly checked by supervisory authorities in the EU Member States.

​​

How the qualified electronic seal (QESeal) works in practice

  1. Identity verification: The legal person must first identify themselves via an officially recognized method.

  2. Certificate issuance: A qualified TSP issues a personal certificate to the user. This certificate contains all the necessary data to create a QESeal.

  3. Document sealing:

    • The seal creator uploads a PDF document to the application.

    • The application generates a hash value of the document at the time of sealing and presents it to the qualified seal creation device (QSCD).

    • The QSCD asks the seal creator to authenticate themselves.

    • Once the creator completes the authentication process, the QSCD creates the seal and the application embeds the seal into the document.

    • The qualified electronic certificate is also provided with the sealed data to enable identification of the seal creator and verification of the seal.

  4. Verification: A third party can verify the QESeal by checking the associated public key and the certificate. This guarantees:

    • The authenticity of the seal creator. 

    • That the document has not been modified after signing.

Which ETSI standards must the eIDAS trust service QESeal comply with?

The same ETSI standards that apply to the electronic signatures also apply to the electronic seal. Therefore also take a look at the page for electronic signatures on this website for an overview of all standards.

bottom of page