Archivo de la categoría: Conformity Assessment Body

Adobe incorpora la lista de confianza de la Unión Europea


En el contexto de las firmas electrónicas, la lista de confianza de la Unión Europea (European Union Trusted List, EUTL) es una lista de enlaces que enganchan con las listas de confianza (Trust-Service Status list, TSL) de cada uno de los países miembro, lo que, en conjunto, significa que se construye una lista pública de más de 200 proveedores de servicios electrónicos de confianza (Trust Services Provider, TSP) que están específicamente evaluados y certificados para merecer los niveles más altos de confianza en base a la normativa europea de firma electrónica y servicios de confianza denominada eIDAS (Reglamento UE 910/2014).

Estos proveedores ofrecen identificaciones digitales basadas en certificados para las firmas electrónicas de las personas físicas, para los sellos electrónicos de  las personas jurídicas y para servicios de sellado de tiempo que se pueden usar para crear firmas electrónicas cualificadas (Qualified Electronic Signature, QES) basadas en tecnología de firma digital.

En eIDAS, y por tanto en todos los países de la Unión Europea, las firmas cualificadas son legal y automáticamente equivalentes a las firmas manuscritas y se reconocen automáticamente como válidas en las transacciones transfronterizas.

En cada estado miembro de la UE existe un organismo supervisor (Supervisory Body, SB) que supervisa a los proveedores en su propio país, y puede haber un organismo de acreditación (Accreditation Body, AB) que certifica a los organismos de evaluación (Conformity Assessment Body, CAB). Los CAB evalúan a los prestadores de servicios electrónicos de confianza (TSP) y emiten un informe de evaluación (Conformity Assessment Report, CAR) que los TSP envian a su SB. Cuando el SB comprueba el CAR, aprueba la inclusión del TSP en la TSL nacional, por lo que automáticamente está disponible desde la EUTL.

De esta forma, una vez que se ha aprobado un TSP en un país, sus servicios pueden ofrecerse en otros países de la UE con el mismo nivel de validez legal.

Adobe es el primer proveedor mundial que ofrece soporte integral en sus productos para la EUTL.  A continuación se recoge un resumen de los TSP incluidos en las listas de la EUTL. Las firmas realizadas con certificados expedidos por estos TSP se indican como válidas en los productos de Adobe, tanto para realizar firmas y sellos electrónicos como para comprobarlos.

Entre los productos de Adobe que han adoptado la EUTL están Adobe Acrobat Reader DCAdobe Acrobat DC, or Adobe Sign.

Recordemos  que con el producto gratuito  Adobe Acrobat Reader DC, además de poder visualizar documentos en formato PDF se pueden realizar en ellos firmas cualificadas con los certificados de los que disponga el usuario.

El uso de la EUTL se añade a la tradicional AATL (Adobe Approved Trusted List) que Adobe ya gestionaba históricamente.

Lista de Prestadores electrónicos de confianza cualificados, por paises

AT – Austria

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
A-Trust Gesellschaft für Sicherheitssysteme imelektronischen Datenverkehr GmbH
e-commerce monitoring GmbH
PrimeSign GmbH
Bundesamt für Eich- und Vermessungswesen*
Datakom Austria GmbH*

BE – Belgium

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Society for Worldwide Interbank Financial Telecommunication SCRL
Portima s.c.r.l. c.v.b.a.
Certipost n.v./s.a.
QuoVadis Trustlink BVBA
Zetes S.A./N.V.

BG – Bulgaria

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
BORICA – AD
InfoNotary PLC
Information Services Plc.
Evrotrust Technologies JSC
Bankservice PLC*
System for electronic payments Bulgaria/ SEP Bulgaria JSC*
Spektar JSC*

CZ – Czech Repubic

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
First certification authority, a.s.
The Czech Post, s.p.
eIdentity a.s.

DE – Germany

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Deutsche Rentenversicherung Bund
Deutsche Rentenversicherung Westfalen
Bundesagentur fuerArbeit
Bundesnotarkammer
Deutsche Rentenversicherung Rheinland
D-Trust GmbH
DGN Deutsches Gesundheitsnetz Service GmbH
Deutsche Telekom AG
Deutscher Sparkassen Verlag GmbH
medisign GmbH
exceet Secure Solutions GmbH
DATEV eG*
Deutsche Post Signtrust und DMDA GmbH*
TC TrustCenter GmbH*
exceet Secure Solutions AG*
Deutsche Post Com GmbH*

EE – Estonia

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
SK ID Solutions AS
GuardTime AS*

EL – Greece

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
HELLENIC PUBLIC ADMINISTRATION CERTIFICATION AUTHORITY
ADACOM ADVANCED INTERNET APPLICATIONS S.A.
ATHENS STOCK EXCHANGE S.A.
BYTE Computer S.A.
GREEK ACADEMIC NETWORK

ES – Spain

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
COLORIURIS, S.L
Banco Santander, S.A.
Dirección General de la Policía
Agencia Notarial de Certificación S.L. Unipersonal
Fábrica Nacional de Moneda y Timbre – Real Casa de la Moneda (FNMT-RCM)
Consorci Administració Oberta de Catalunya – CAOC
ANF AUTORIDAD DE CERTIFICACIÓN ASOCIACIÓN ANF AC
Consejo General de la Abogacía Española
Instituto Valenciano de Finanzas
AC Camerfirma, S.A
Colegion Oficial de Registradores de la Propiedad y Mercantiles de España
EDICOM CAPITAL, S.L.
Ziurtapen eta Zerbitzu Enpresa-Empresa de Certificación y Servicios, Izenpe, S.A.
Firmaprofesional, S.A.
Tesorería General de la Seguridad Social
Ministerio de Empleo y Seguridad Social
Consejo General de Colegios Oficiales de Médicos de España (CGCOM)
SIGNE S.A.
SISTEMAS INFORMATICOS ABIERTOS SOCIEDAD ANONIMA
UANATACA, S.A
VINTEGRIS S.L.
AULOCE,S.A.U
Autoridad de Gestión de la PKI del Ministerio de Defensa (AGPMD) y Director del CESTIC. Centro de Sistemas y Tecnologías de la Información y las Comunicaciones (CESTIC)*
Banco Español de Crédito, S.A*
HEALTHSIGN, S.L.*
BANCO DE ESPAÑA*
Colegio de Ingenieros de Caminos, Canales y Puertos*
Servicio de Salud de Castilla-La Mancha (SESCAM)*

FI – Finland

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Population Register Centre

FR – France

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Click and Trust
Caisse des dépôts
Yousign
Agence Nationale des Titres Sécurisés
CertEurope
Certinomis SA
ChamberSign France
Cryptolog International (Universign)
Dhimyotis
Ministère de la Justice
DocuSign France
Ordre National des Experts-Comptables
Imprimerie Nationale
Conseil Supérieur du Notariat
Le groupe La Poste
Almerys*

HR – Croatia

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Financijska agencija
Agencija za komercijalnu djelatnost d.o.o.
Zagrebačka banka dioničko društvo

HU – Hungary

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Magyar Telekom Public Limited Company
Microsec Micro Software Engineering & Consulting Private Company Limited by Shares
NETLOCK Informatics and Network Privacy services Limited Company
Digitoll Information Technology and Servicing Ltd.
NISZ National Infocommunications Services Company Limited by Shares

IE – Ireland

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Post.Trust Ltd
Adobe Systems Software Ireland Ltd.

IS – Iceland

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Cloud Signature Consortium TSP
Audkenni ehf.

IT – Italy

Trust Service Provider Qualified Certificates for eSignatures Qualified Certficates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Intesi Group S.p.A.
ICBPI S.p.A.
Banca d’Italia
InfoCert S.p.A.
Actalis S.p.A.
Aruba Posta Elettronica Certificata S.p.A.
CEDACRI S.p.A.
Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili
Ministero della Difesa
Consiglio Nazionale del Notariato
I.T. Telecom S.p.A.
In.Te.S.A. S.p.A.
Intesa Sanpaolo Bank S.p.A.
Postecom S.p.A.
Banca Intesa S.p.A.
Sanpaolo IMI S.p.A.
Cedacrinord S.p.A.
IT Telecom S.r.l.
Namirial S.p.A.
Lombardia Informatica S.p.A.
NEXI S.p.A.
Telecom Italia Trust Technologies S.r.l.
Zucchetti S.p.A.
SECETI S.p.A.
SIA S.p.A.
SSB S.p.A.
Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili
Lombardia Integrata S.p.A. Servizi Infotelematici per il Territorio
Trustitalia S.p.A.
Certicomm
Infocamere SC.p.A.
Saritel S.p.A.
Poste Italiane S.p.A
Lottomatica
BNL Multiservizi S.p.A.*
Centro Tecnico per la Rete Unitaria Pubblica Amministrazione*
Consiglio Nazionale Forense*
Esercito Italiano Comando C4 IEW*
Monte dei Paschi di Siena Bank S.p.A.*
Banca di Roma S.p.A.*
Centro nazionale per l’informatica nella pubblica amministrazione*
Enel.it S.p.A.*
Finital S.p.A.*
Sogei S.p.A.*

LI – Liechtenstein

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
FLZ-Anstalt
SwissSign AG
Liechtensteinische Post AG*

LI – Lithuania

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
State Enterprise Centre of Registers
UAB Skaitmeninio sertifikavimo centras
Identity Documents Personalisation Centre under the Ministry of the Interior
UAB BalTstamp
Residents Register Service under the Ministry of the Interior*

LU – Luxembourg

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
LuxTrust S.A.
SeMarket Certification Authority S.A.*

LV – Latvia

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Latvian State Radio and Television center

MT – Malta

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Malta Electronic Certification Services Ltd
ANF AC Malta Ltd

NL – Netherlands

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Agentschap Centraal Informatiepunt Beroepen Gezondheidszorg
Digidentity B.V.
ESG de Electronische Signatuur B.V.
KPN B.V.
KPN Corporate Market B.V.
Ministerie van Defensie
Ministerie van Infrastructuur en Milieu
QuoVadis Trustlink B.V.
Getronics Nederland B.V.*
Diginotar B.V.*
Getronics Nederland B.V.*

NO – Norway

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Buypass AS
Commfides Norge AS
Danske Bank
Bankenes ID-tjeneste AS
DNB Bank ASA
Nordea Bank Norge ASA
Eika Gruppen AS
SpareBank 1 Banksamarbeidet DA
Statoil ASA
ZebSign AS*
Handelsbanken NUF*
SEB Privatbanken ASA*
Skandiabanken AB NUF*

PL – Poland

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Unizeto Technologies S.A.
Polish Security Printing Works
Krajowa Izba Rozliczeniowa S.A.
ENIGMA Systemy Ochrony Informacji Sp.z o.o.
EuroCert Sp. z. o.o.
Asseco Data Systems S.A.
MobiCert Sp. z o.o.*
Safe Technologies S.A.*
TP Internet sp. z o.o.*

PT – Portugal

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
ECCE
Cartão de Cidadão
Justica
MULTICERT – Serviços de Certificação Electrónica S.A.
British Telecommunications plc
DigitalSign – Certificadora Digital
ECAR*

RO – Romania

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Trans Sped SRL
DigiSign S.A.
CERTSIGN S.A.
AlfaTrust Certification S.A.
CENTRUL DE CALCUL SA

SI – Slovenia

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Ministrstvo za javno upravo
Republika Slovenija
HALCOM D.D.
NLB d.d.
POŠTA SLOVENIJE d.o.o.
Ministry of Defence of Slovenia
EIUS d.o.o.

SK – Slovakia

Trust Service Provider Qualified Certificates for eSignatures Qualified Certficates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
National Security Authority SK
Disig a.s.
Ministry of Defence Slovak Republic
The First Slovak Certification Authority
First certification authority, a.s.

UK – United Kingdom

Trust Service Provider Qualified Certificates for eSignatures Qualified Certificates for eSeals Qualified Time Stamps Non-Qualified Time Stamps Cloud Signature Consortium TSP
Exostar UK Limited
Royal Bank of Scotland*

Notas:

* Estas entidades ya no prestan servicios de certificación o de sello de tiempo cualificados pero los documentos firmados o sellados con certificados válidos de estas entidades en el momento de la firma se siguen dando por buenos en el marco de las soluciones de Adobe.

La información en la que se basa este artículo procede de “What is EUTL?” en el sitio web de ayuda de Adobe.

Conformity Assessment Bodies


Accreditation is the last level of public control in the European conformity assessment system.
It is designed to ensure that conformity assessment bodies (e.g. laboratories, inspection or certification bodies) have the technical capacity to perform their duties.
Used in regulated sectors and voluntary areas, accreditation increases trust in conformity assessment. It reinforces the mutual recognition of products, services, systems, and bodies across the EU.

How does accreditation work?

Accreditation of conformity assessment bodies is based on harmonised standards defining competence criteria for:

  • the national accreditation body and each category of conformity assessment body (such as laboratories or certification bodies)
  • sector-specific requirements
  • guidance drawn up by regional and international organisations of accreditation bodies

Organisation of accreditation in the EU

Requirements for accreditation are set in Regulation 765/2008. The Regulation promotes a uniformly rigorous approach to accreditation across EU countries. This consensus is normally reflected in a CERTIF document on a specific topic. As a result, an accreditation certificate is enough to demonstrate the technical capacity of a conformity assessment body.

The main principles of accreditation are:

  • 1 accreditation body per EU country (it is possible, however, to use another country’s national accreditation body). In Spain this accreditation body is ENAC.
  • accreditation is a public sector activity and a not-for-profit activity
  • there is no competition between national accreditation bodies
  • stakeholders are represented
  • accreditation is the preferred means of demonstrating technical capacity of notified bodies in the regulated area

The European accreditation infrastructure

National accreditation bodies are members of the European co-operation for accreditation (EA) that cooperates with the Commission. EA’s tasks include:

  • setting up and managing a peer evaluation system of national accreditation bodies
  • providing technical assistance to the Commission in accreditation

To provide a framework for cooperation:

  • in 2009, the Commission, the European Free Trade Association (EFTA), EU countries and EA signed general cooperation guidelines to mark their political commitment to working together
  • in 2014, the Commission and EA signed a framework partnership agreement (3 MB) for the period 2014-2017. This framework partnership agreement allows financial support for EA in fulfilling its tasks under the Regulation and meeting the objectives set out in the guidelines

Report on the implementation of the Regulation for accreditation and market surveillance

The report gives an overview of how the accreditation provisions of Regulation (EC) No 765/2008 and CE marking were implemented between 2013 and 2017. It confirms that the accreditation infrastructure created by the Regulation has provided added value, not only for the Single Market but also for international trade. The Regulation has established a trustworthy and stable accreditation system that has wide support from industry and the conformity assessment community. It ensures that products meet the applicable requirements, removes barriers for conformity assessment bodies and helps entrepreneurial activities to flourish in Europe.