Real-Time Signature Validation

This operation performs a time-based signature validation on a real-time signature. Signature validation is performed within the current time window.

For this operation to succeed, the following administrative tasks should be performed in OneSpan Authentication Server:

1. Register the client application.
2. Define/assign a real-time signature validation policy to this client application.
3. Define users and assign authenticators supporting time-based transaction authentication.

At a minimum, the authSignature command requires the following set of signature field attributes in order to perform signature validation:

• SIGNFLD_COMPONENT_TYPE
• SIGNFLD_USERID
• SIGNFLD_SIGNATURE

A client application with component type SOAP Signature Client will typically send the following SOAP command to perform a real-time signature validation operation for user test1:

<soapenv:Envelope
xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:sig="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Signature">
  <soapenv:Header/>
  <soapenv:Body>
    <sig:authSignature>
      <attributeSet>
        <attributes>
          <valuexsi:type="xsd:string">SOAP Signature Client</value>
          <attributeID>SIGNFLD_COMPONENT_TYPE</attributeID>
        </attributes>
        <attributes>
          <valuexsi:type="xsd:string">11111</value>
          <attributeID>SIGNFLD_DATA_FIELD_1</attributeID>
        </attributes>
        <attributes>
          <valuexsi:type="xsd:string">11111</value>
          <attributeID>SIGNFLD_DATA_FIELD_2</attributeID>
        </attributes>
        <attributes>
          <valuexsi:type="xsd:string">11111</value>
          <attributeID>SIGNFLD_DATA_FIELD_3</attributeID>
        </attributes>
        <attributes>
          <valuexsi:type="xsd:string">test1</value>
          <attributeID>SIGNFLD_USERID</attributeID>
        </attributes>
        <attributes>
          <valuexsi:type="xsd:string">523523</value>
          <attributeID>SIGNFLD_SIGNATURE</attributeID>
        </attributes>
      </attributeSet>
    </sig:authSignature>
  </soapenv:Body>
</soapenv:Envelope>

If the transaction authentication is successful, OneSpan Authentication Server will return the verified datetime in the SOAP response if the following conditions are met:

1. The used authenticator must have the time base algorithm enabled for the signature application. This can be verified in the application details of the respective authenticator in the OneSpan Authentication Server Administration Web Interface.
2. For the policy used, the Online Signature mode must be enabled (i.e. not set to Disabled) in the DP Control Parameters tab of the effective policy.

This information will be specified by the SIGNFLD_VERIFIED_DATETIME signature attribute in the resultattribute element.