2

We are developing a Web Application for manage dental clinics. The app can generate PDF files through the PHP backend (for example invoices, quotes etc.).

Each of those PDF file needs to be digitally signed by both the app user (the clinician) and the patient. The sign we are looking for is the Legally Signature European Standard (which requires biometrical parameters or a certificate issued by a trusted provider such as Infocert (but we are not 100% sure how to then use such certificate)).

On average, in our country, each patient signs 5-10 documents and because of this we ruled out third party services such as Docusign, Pandadoc, Eversign.. because the average cost of those api services would be excessive for our needs (and country economy).

Another solution we did think about is to use the signature pads (such as Wacom's) that are capable to collect biometrical parameters, but we have no idea how to integrate such devices with our Javascript frontend (assuming it is even possible to interface those devices through the web browser).

Assuming our backend displays the PDF already generated to the client, what would it be the best approach to apply a digital signature to it through the client (which would then send back the signed PDF to the server for storage) ? Is there a way to interact with signature pads devices through the browser (to extract the biometrical parameters together with the visual signature) ?

Thanks

7
  • Do clients have a touch pad or touch screen on their devices? Is this something meant to be a "point of sale" solution, or remote solution? – Greg Burghardt Sep 7 '20 at 16:36
  • 1
    Wacom-style tablets just act as a fancy mouse, so there shouldn't be any special JavaScript concerns. You'd just want a fullscreen canvas area where they can sign. Perhaps the image of the signature could then be added to the PDF server-side? However, the issue is more whether such approaches would be legally compliant, less so whether the tech can be implemented easily. – amon Sep 7 '20 at 18:54
  • @Greg Burghardt Clients connect to the web application hosted on our website through a browser. They have their own tablet or signature pad. Documents are signed by the patients in person. – Nite Sep 7 '20 at 18:58
  • @amon According to what we know, Wacom's also collect biometrical parameters on the signature (such as pressure), which are required to have a legally compliant signature. The simple graphical signature would not be enough (we already have a JS system implemented to caputure the simple signature) – Nite Sep 7 '20 at 19:03
  • @Nite The Pointer Events API supports pressure, and even has broad cross-platform support. Might depend on the operating system though, I'd have more faith on Windows than on Linux-based terminals. – amon Sep 7 '20 at 19:08
0

For web application, to access user's Certificate store (or Digital Signature in USB Token or Smartcard through Certificate store), from modern browsers, which no more supports java applest or activeX, using Browser extension is the solution.

One such free browser extension is Signer.Digital. Working can be checked at https://web.signer.digital. Links to extension, sample project, libs etc is also available.

You may use any server side pdf library with this extension to add signature to pdf.

For PHP, if more choices of native pdf library is not available, you may also run java library on Tomcat in Javabridge and proxy it from Apache.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.