Überspringen und weiter zum Hauptinhalt
Blog
Startseite/

QES-Rechtssicherheit in Deutschland

Zusammenfassung4 Min. Lesezeit

Auf der sicheren Seite mit qualifizierten elektronischen Signatur

Inhaltsverzeichnis

Rein optisch erscheint sie wie eine gewöhnliche elektronische Signatur, aber technisch passiert hier eine ganze Menge – die qualifizierte elektronische Signatur (QES) ist die sicherste Art, elektronisch zu unterzeichnen. Durch die Fernsignatur mit Hilfe qualifizierter Vertrauensdiensteanbietern werden alle Sicherheitsstandards erfüllt, um die QES auch in Sektoren rechtsgültig einsetzen zu können, die bei Verträgen und Genehmigungen die Schriftform verlangen. Erfahren Sie mehr – in unserem Leitfaden zur Rechtssicherheit der QES.

Was ist die QES?

Die QES ist die höchste Stufe der elektronischen Signatur gemäß der eIDAS-Verordnung (Electronic Identification Authentication and Trust Services). Sie ist eine besondere Form der digitalen Signatur, die höchsten rechtlichen Anforderungen entspricht und der handschriftlichen Unterschrift gleichgestellt ist.

Die QES unterscheidet sich von der einfachen und der fortgeschrittenen elektronischen Signatur (FES) durch ihre höhere Sicherheitsstufe. Während eine einfache elektronische Signatur lediglich aus einer elektronischen Kennzeichnung besteht und die fortgeschrittene elektronische Signatur (FES) zusätzliche Sicherheitsmerkmale wie die eindeutige Zuordnung des Unterzeichners bietet, stellt die QES die höchste Form der elektronischen Signatur dar. Sie kombiniert die Vorteile der fortgeschrittenen elektronischen Signatur mit den zusätzlichen Anforderungen einer Zertifizierung, die von qualifizierten Vertrauensdiensteanbietern ausgestellt wird.

Warum ist die QES rechtssicher?

Die QES ist per Gesetz rechtssicher und erfüllt die strengen Anforderungen der eIDAS-Verordnung. Sie verwendet kryptografische Methoden, um die Integrität und Authentizität eines Dokuments zu gewährleisten. Der Einsatz eines privaten Schlüssels, der sicher in einer qualifizierten elektronischen Signaturerstellungseinheit gespeichert ist, verhindert Manipulationen. Auf diese Art wird garantiert, dass die Signatur eindeutig dem Unterzeichner zugeordnet werden kann. Dadurch hat ein unterzeichnetes Dokument dieselbe rechtliche Gültigkeit wie eine handschriftliche Signatur.

Worauf muss man achten, damit die QES rechtssicher ist?

Die folgenden Kriterien müssen für die Rechtssicherheit einer QES erfüllt sein:

  • Verwendung eines qualifizierten Zertifikats für elektronische Signaturen: Das Zertifikat muss von einer anerkannten Vertrauensstelle ausgestellt werden.

  • Sichere Signaturerstellungseinheit: Der private Schlüssel des Unterzeichners muss sicher gespeichert und verwendet werden, z.B. durch eine Smartcard oder ein Hardware-Sicherheitsmodul (HSM).

  • Integrität des Dokuments: Das Dokument muss in seiner ursprünglichen Form erhalten bleiben und darf nach der Signatur nicht verändert werden.

In welchen Fällen ist eine QES notwendig und warum?

Generell ist die qualifizierte elektronische Signatur immer dann erforderlich, wenn Dokumente die Schriftform verlangen. Daraus ergeben sich einige rechtlich relevante Szenarien. Beispiele sind:

  • Verträge mit hohem Haftungsrisiko: Bei Geschäften mit erheblichem finanziellen oder rechtlichen Risiko bietet die QES zusätzliche Sicherheit.

  • Behördliche Dokumente: Viele staatliche Stellen verlangen die QES für die elektronische Einreichung von Formularen und Anträgen.

  • Bankgeschäfte: Für bestimmte Banktransaktionen ist eine QES notwendig, um die Identität des Unterzeichners zu bestätigen und Betrug zu verhindern.

Unterzeichnen Sie rechtsgültig mit der QES – und Docusign eSignature

Hinter der qualifizierten elektronischen Signatur (QES) steckt eine wichtige Technologie zur Sicherstellung der Rechtssicherheit bei elektronischen Transaktionen. Die QES gewährleistet die höchste Sicherheitsstufe und ist somit der handschriftlichen Unterschrift gleichgestellt. In Situationen mit hohem Haftungsrisiko oder gesetzlichen Anforderungen ist die QES daher unverzichtbar – und eine zeitsparende und rechtswirksame Möglichkeit, Dokumente elektronisch zu unterzeichnen.

Kontaktieren Sie uns, um mehr über Docusign zu erfahren oder gleich loszulegen!Sprechen Sie mit unseren Experten

Ähnliche Beiträge

  • Einblicke für Führungskräfte

    Was macht ein Contract Manager

    Author Tobias S.
    Tobias S.
    You may notice when on Docusign’s website that a green padlock sits in front of the URL at the top of your browser. This is a visual cue that our website is secure thanks to SSL certificates, and it’s one that savvy consumers look for when doing business online. SSL certificates play an important role at Docusign, and they should be a part of your data privacy efforts too. Find out more about what they are, what they do, and how you can obtain them, with our SSL FAQs, below. What is an SSL Certificate? SSL stands for Secure Sockets Layer, and SSL certificates are also known as digital certificates. An SSL certificate creates a secure link between a website and a visitor's browser. It ensures that all data passed between the two remains private and secure. There are three types of SSL certificate: Extended Validation (EV SSL), Organisation Validated (OV SSL) and Domain Validated (DV SSL). There are also what is known as wildcard certificates, used to extend SSL encryption to subdomains. Why do companies need an SSL Certificate? SSL certificates establish trust between you and your customer. To obtain an SSL Certificate, the purchasing company's identity must be authenticated. With this safeguard in place, customers know that your business is not only legitimate but that it's safe to do business with you online. If you want to accept credit card information on your website, for example, then you will need to comply with Payment Card Industry (PCI) standards. One of the PCI requirements is using an SSL certificate. SSL certificates also help to prevent you and your customers from suffering a phishing attack. Phishing emails aim to impersonate your website for criminal gain. As the sender cannot receive their own SSL certificate, it makes it far more difficult for them to impersonate your website and easier for them to be caught out. As a result of SSL encryption, hackers and identity thieves are prevented from stealing private and sensitive information such as addresses, social media logins and credit card numbers. Only the intended recipient will be able to understand the information being sent. What should I look for in an SSL certificate provider? The cost of a solution can often be a deciding factor when choosing any tech solution, but when the security of your data it at risk, you shouldn’t necessarily go with the cheapest option. With that in mind, these are the top factors to consider over price alone: Compatibility: The provider should have a high trust pedigree in as many commonly used operating systems, web browsers, apps and devices as possible. Scalability: The provider should also be able to handle volumes that grow with your company, as you may end up needing thousands of certificates per second to be issued. Flexibility: The leading providers offer flexible purchasing terms. Pay-as-you-go, for example, allows you to order certificates when you see fit, regardless of amount. Bulk balance models also allow you to load money into your account. Platform: Your solution needs to be easy to use, support a variety of workflows and has a dynamic portal. Support: It's important to evaluate the services and support offerings available to help you succeed. Is an account manager on-hand, online support offered, communities to ask questions, and educational resources enabling you to self-serve? Where can I find Docusign's certificates? Docusign's digital certificates provide higher levels of identity authentication and document transaction security. Digital certificates cryptography uses Public Key Infrastructure (PKI) technology to issue certificates based on X.509 standards to represent the digital identity of a signer. The latest SSL certificate is always available for download from the Docusign Trust Site. Do I need to update my Docusign SSL certificate? If you do not have a custom SSL integration then no action is needed. Docusign’s SSL (secure sockets layer) certificate used for our DEMO, NA1, NA2, NA3 and EU environments occasionally expires (every 2 years). When the SSL certificate is set to expire a new SSL certificate will be used. That means If you have custom API, Connect, or any other system integration that depends on Docusign’s SSL certificate then contact your IT department's network administrator to update the certificate to ensure seamless functionality.

Was macht ein Contract Manager

Author Tobias S.
Tobias S.
You may notice when on Docusign’s website that a green padlock sits in front of the URL at the top of your browser. This is a visual cue that our website is secure thanks to SSL certificates, and it’s one that savvy consumers look for when doing business online. SSL certificates play an important role at Docusign, and they should be a part of your data privacy efforts too. Find out more about what they are, what they do, and how you can obtain them, with our SSL FAQs, below. What is an SSL Certificate? SSL stands for Secure Sockets Layer, and SSL certificates are also known as digital certificates. An SSL certificate creates a secure link between a website and a visitor's browser. It ensures that all data passed between the two remains private and secure. There are three types of SSL certificate: Extended Validation (EV SSL), Organisation Validated (OV SSL) and Domain Validated (DV SSL). There are also what is known as wildcard certificates, used to extend SSL encryption to subdomains. Why do companies need an SSL Certificate? SSL certificates establish trust between you and your customer. To obtain an SSL Certificate, the purchasing company's identity must be authenticated. With this safeguard in place, customers know that your business is not only legitimate but that it's safe to do business with you online. If you want to accept credit card information on your website, for example, then you will need to comply with Payment Card Industry (PCI) standards. One of the PCI requirements is using an SSL certificate. SSL certificates also help to prevent you and your customers from suffering a phishing attack. Phishing emails aim to impersonate your website for criminal gain. As the sender cannot receive their own SSL certificate, it makes it far more difficult for them to impersonate your website and easier for them to be caught out. As a result of SSL encryption, hackers and identity thieves are prevented from stealing private and sensitive information such as addresses, social media logins and credit card numbers. Only the intended recipient will be able to understand the information being sent. What should I look for in an SSL certificate provider? The cost of a solution can often be a deciding factor when choosing any tech solution, but when the security of your data it at risk, you shouldn’t necessarily go with the cheapest option. With that in mind, these are the top factors to consider over price alone: Compatibility: The provider should have a high trust pedigree in as many commonly used operating systems, web browsers, apps and devices as possible. Scalability: The provider should also be able to handle volumes that grow with your company, as you may end up needing thousands of certificates per second to be issued. Flexibility: The leading providers offer flexible purchasing terms. Pay-as-you-go, for example, allows you to order certificates when you see fit, regardless of amount. Bulk balance models also allow you to load money into your account. Platform: Your solution needs to be easy to use, support a variety of workflows and has a dynamic portal. Support: It's important to evaluate the services and support offerings available to help you succeed. Is an account manager on-hand, online support offered, communities to ask questions, and educational resources enabling you to self-serve? Where can I find Docusign's certificates? Docusign's digital certificates provide higher levels of identity authentication and document transaction security. Digital certificates cryptography uses Public Key Infrastructure (PKI) technology to issue certificates based on X.509 standards to represent the digital identity of a signer. The latest SSL certificate is always available for download from the Docusign Trust Site. Do I need to update my Docusign SSL certificate? If you do not have a custom SSL integration then no action is needed. Docusign’s SSL (secure sockets layer) certificate used for our DEMO, NA1, NA2, NA3 and EU environments occasionally expires (every 2 years). When the SSL certificate is set to expire a new SSL certificate will be used. That means If you have custom API, Connect, or any other system integration that depends on Docusign’s SSL certificate then contact your IT department's network administrator to update the certificate to ensure seamless functionality.

Entdecken Sie die Neuheiten von Docusign IAM oder starten Sie kostenlos mit eSignature

Entdecken Sie Docusign IAMTesten Sie eSignature kostenlos
Person smiling while presenting