InfoCert Qualified Electronic Signature

Openapi is the only platform that allows more than 15 different types of digital signatures to be requested via API, including signatures with physical devices (e.g. USB and smart cards), qualified electronic signatures, devices with or without CNSs, and video recognition identification possibilities.

On Openapi it is also possible to choose between different Certification Authorities such as InfoCert or Aruba, without minimum purchase commitment or obligations to specific brands.

With the API Digital Signature, other types of signatures such as simple electronic signature (with OTP) and qualified signature can be requested.

InfoCert Qualified Electronic Signature

The Qualified Electronic Signature is the InfoCert digital signature that does not require any physical device to be used.

With this Qualified Electronic Signature it is possible to digitally sign any IT document (e.g. financial statements and company deeds, invoices, notifications, forms for registration in public registers, contracts) by connecting the device to any desktop or notebook. It has legal value throughout Europe, lasts for 3 years and can be renewed for a further 3 years before expiry by following the dedicated procedure.

Request Signature List and Code

As mentioned above, Openapi offers a wide range of digital signatures. To check all the devices available via the API Digital Signature, and their respective prices, it is necessary to make an API request to the endpoint GET/prodotti.

GET https://ws.firmadigitale.com/prodotti

Response Signature List and Code

The response offers the complete list of all available signatures with name, type (e.g. InfoCert or Aruba), code and price. This list does not include electronic signatures not belonging to the Digital Signature type (e.g. Simple Electronic Signature), for which there are dedicated endpoints. For some products, it will also be indicated whether it is a 'blank' signature, in which case no signature certificates will be issued.

The list below is only an example and not exhaustive of the available products:

{
"data": [
{
"nome": "Firma Digitale Remota Infocert",
"tipo": "Infocert",
"codice_prodotto": "FIRREM",
"prezzo": 25.70
},
{
"nome": "Firma Digitale Remota Infocert Con Videoriconoscimento",
"tipo": "Infocert",
"codice_prodotto": "FIRREM_V",
"prezzo": 25.70
},
{
"nome": "Firma Digitale Remota Infocert Vergine   ",
"tipo": "Infocert",
"codice_prodotto": "RINFIRREM",
"prezzo": 19.70
},
{
"nome": "Rinnovo Firma Remota",
"tipo": "Infocert",
"codice_prodotto": "RINFIRREM",
"prezzo": 19.70
}


.....


],


"success": true,


"message": "",


"error": null


}

In the case of the Remote digital signature, there will be more than one code depending on the presence of the Video Recognition option.

The code allows you to request the device.

Request Qualified Electronic Signature

To proceed with the device request, a request must be made to the endpoint POST/richiesta/{codice_prodotto}. In our case, we chose InfoCert Qualified Electronic Signature and the product code is FIRREM.

POST https://ws.firmadigitale.com/richiesta/FIRREM

In the payload of the request, a set of information about the applicant must be passed. These data depend on the type of device selected, in the case of Qualified Electronic Signature they are:

Below is an example of a payload for a Qualified Electronic Signature request

{
  "data":{
  "assistenza": true,
  "urgenza": true,
  "spedizione": "veloce",
  "anagrafica": {
    "nome": "alberto",
    "cognome": "neri",
    "email": "[email protected]",
    "cellulare": "349xxxxx18",
    "codice_fiscale": "vnxxxxxxxl1x7d",
    "data_nascita": "28/12/2000",
    "sesso": "M",
    "comune_nascita": "terni",
    "provincia_nascita": "terni",
    "nazione_nascita": "terni",
    "indirizzo_residenza": "via rossi 2",
    "comune_residenza": "terni",
    "provincia_residenza": "terni",
    "cap_residenza": "05100",
    "nazione_residenza": "italia",
    "destinatario": "alberto neri",
    "indirizzo_spedizione": "via rossi 2",
    "comune_spedizione": "terni",
    "provincia_spedizione": "terni",
    "cap_spedizione": "05100",
    "tipo_documento": "patente",
    "numero_documento": "123456",
    "soggetto_emittente": "mctc",
    "data_emissione": "05/11/1990",
    "data_scadenza": "12/12/2020"
  },
  "callback": {
    "url": "https://dev.ws.firmadigitale.com/test.php",
    "method": "JSON",
    "field": "data"
  }
}

If you wish to request the InfoCert Qualified Electronic Signature with video recognition, simply set the parameter video recognition as ‘true’ during the request phase. This request can also be made later, with a dedicated ‘VIDEORIC’ code.

At this stage, one or more options can also be selected for Qualified Electronic Signatures (without video recognition):

We suggest you set up a callback to stay updated on the status change of the request.

Response Qualified Electronic Signature

The response contains all the information and the id of the request, e.g. in our case it will be 5f7ef1e83a716836d3152662. The request id is indispensable because it allows us to check the status of the request, download and possibly send the signature registration form.

The form can be downloaded via the endpoint GET/richiesta/{id}/modulo.

Request Completion

In order for the certificate to be issued, it is necessary for the requester to complete the identification process.

This can be done in various ways. In the case the applicant

The video recognition option simplifies this process by automating the entire identification process through a simple call with an operator, which can be done from any device

You can check the status of signature processing at any time via the endpoint GET/richiesta/{id}.

In the response, when the status has changed to "evaso" (="processed), it will be possible to access the envelope number. The signature activation data (Emergency Code, PIN, PUK) will instead be, according to regulations, sent directly to the applicant's email via virtual envelope (PDF) by the InfoCert Certification Authority.

In addition, 'Virgin' Smart Cards can also be requested via the API Digital Signature. This is for example the case for RAO customers who can issue signature certificates themselves and only need to purchase batches of devices.

InfoCert Qualified Electronic Signature via API is ideal for companies and organisations that wish to offer their customers a secure and certified signature, which can be used by the individual with his or her own credentials to sign any digital document, without having to use a physical device.

Do you have questions about the types of digital signature devices or how to apply and activate them? Do not hesitate to contact us: one of our consultants will be at your disposal to provide you with all the information and clarifications you need!