What does an electronic signature look like on a USB flash drive. What is an electronic signature - in simple language for newcomers to the world of the digital economy. What is an electronic signature

Can be used when it comes to reinforced unqualified signatures.

Views EDS with the highest degree of protection are recorded exclusively on dedicated USB devices. Their release is provided in all valid points of the certificate.

Consider the options for flash drives that are most often used for storage means of cryptographic protection of information:

• Unprotected USB flash drive. Unsuitable for storage confidential information due to open access to it by third parties.
• USB flash drive with built-in encryption function. The device restricts, but does not completely prevent, unauthorized access to keys. The danger arises at the time of transfer EDS to the computer when signing the document.
• (token) with a built-in crypto processor. More suitable option for storage EDS... Contains two levels of information protection that are used at the time of recording EDS and referring to it during the signing process. Signature recorded on such a storage medium cannot be illegally altered, but the likelihood of its theft at the time of transfer to the computer software remains.
• USB device with embedded shaping EDS... This type flash drives is a kind of minicomputer - the document to be signed is submitted to the "input" of the device and is signed already inside it. Such a token is maximally protected from unauthorized access, since signature is not extracted from it. loading signatures no external devices are required to use it.

How to write an EDS to a USB flash drive from another storage medium? Use the capabilities of the special program CryptoPRO CSP.

Here's a quick guide to rewriting a certificate:

• A clean USB stick for EDS and carrier signatures.
• The CryptoPRO CSP program is launched.
• In the opened menu of the program, select the "Service" tab, then press the button " Copy».
• The path to the certificate is specified EDS in the "Overview" tab of the menu, the selection is confirmed by pressing the "OK" button.
• If the system asks for a password, you must enter it. By default, the number sequence is 12345678.
• Assigned a name to the new copy signatures and pressing the "Finish" button completes the preparation for copying.
• In the dialog box that opens, a new flash drive is selected and after clicking the "OK" button, the password for the copy is entered EDS... You can keep the old password to avoid confusion with access codes or choose a new combination of characters.

How to transfer an EDS from a USB flash drive to a USB flash drive? By simply copying the certificate folder and pasting it onto a new medium. Take precautions when carrying EDS to a new device!

Using a USB flash drive as an electronic key

The key is the most accessible method of protecting your computer from unauthorized access. A USB device is the modern equivalent of a dongle. How to make an electronic key from a USB flash drive?

One of the ways is to use the PAM module, the task of which is to test each inserted into the computer. flash drives for the correspondence of the information put into the system and, depending on the result of the check, open the entrance to the system or block it.

Electronic key flash drive works as follows: every successful login to the system, the information stored in its backup part is overwritten.

The next time you try to log in, the system will compare the credentials flash drives- its serial number, brand, manufacturer and data from the backup part of the USB device.

The module is configured as follows:

• The libpam_usb.so library and the utilities necessary to control the module are installed.
• A USB flash drive is inserted into the USB port - a future key. With the help of a special command, the module collects all information about flash drive and recording service information on it for subsequent identification of the user.
• Enter the command attaching the name flash drives to a specific account.
• The system starts checking the correctness of the data entered into the system.
• The pam_usb module is given the right to manage the system until the key is used. In case of failure to find a suitable flash drives, the system may ask you to enter a username and password, or, according to the settings, block the entrance to it.

Usage flash drives as a key does not provide for the placement of logins and passwords on it, means of cryptographic protection of information.

Select EDS

Such a key, besides convenience storage provides the user with the following benefits:

• No need to memorize a large amount of information.
• Possibility to use flash drives as a means storage information.
• Providing fast login.
• Console auto-protection. When removed from the USB port flash drives work on the computer is automatically blocked.

Often people who use electronic digital signatures for their needs need to copy the CryptoPro certificate to a USB flash drive. In this lesson, we will look at various options for performing this procedure.

By and large, the procedure for copying a certificate to a USB drive can be organized in two groups of ways: using the internal tools of the operating system and using the functions of the CryptoPro CSP program. Next, we'll take a closer look at both options.

Method 1: CryptoPro CSP

First of all, we will consider a copy method using the CryptoPro CSP application itself. All actions will be described using the example of the Windows 7 operating system, but in general the presented algorithm can be used for other operating systems of the Windows family.

The main condition under which a container with a key can be copied is the need for it to be marked as exported when it is created on the CryptoPro website. Otherwise, the transfer will fail.

1. Before starting the manipulations, connect the USB flash drive to the computer and go to "Control Panel" systems.



2. Open the section "System and safety".



3. In the specified directory, find the item "CryptoPro CSP" and click on it.



4. A small window will open where you want to move to the section "Service".



5. Then press the button "Copy ...".



6. The window for copying the container will be displayed, where you need to click on the button "Overview…".



7. The container selection window will open. Highlight the name of the one from the list, the certificate from which you want to copy to the USB-drive, and press "OK".



8. Then the authentication window will be displayed, where in the field "Enter password" it is required to enter a key expression with which the selected container is password protected. After filling in the specified field, click "OK".



9. After that, there is a return to the main window for copying the container of the private key. Note that in the key container name field, the expression will automatically be added to the original name "- Copy"... But if you want, you can change the name to any other, although this is not necessary. Then click on the button "Ready".



10. Next, a window for selecting a new key medium will open. In the list provided, select the drive with the letter corresponding to the desired flash drive. After that press "OK".



11. In the displayed authentication window, you will need to enter the same arbitrary password for the container twice. It can either match the key expression of the source, or be completely new. There are no restrictions on this. After entering press "OK".



12. After that, an information window will be displayed with a message that the container with the key has been successfully copied to the selected medium, that is, in this case, to the USB flash drive.

Method 2: Windows Tools

You can also transfer the CryptoPro certificate to a USB flash drive exclusively using the Windows operating system by simply copying it through "Conductor"... This method is only suitable when the header.key file contains a public certificate. Moreover, as a rule, its weight is at least 1 Kb.

As in the previous method, descriptions will be given on the example of actions in the Windows 7 operating system, but in general they will be suitable for other OSs of this line.

At first glance, transferring a CryptoPro certificate to a USB flash drive through the operating system tools is much easier and more intuitive than actions through CryptoPro CSP. But it should be noted that this method is only suitable when copying a public certificate. Otherwise, you will have to use the program for this purpose.

As a rule, the digital signature is recorded on a USB-stick. However, if you need to install an EDS from a USB flash drive to a computer, that is, copy the EDS to a computer, find out in this article how to quickly and easily do this.

Copy EDS to computer

Of course, it is not always convenient to carry a USB flash drive with you all the time. It can either become unusable, or it simply may not be at hand at the right time. In this case, a method will come to the rescue, in which we copy the EDS certificate to the computer itself, which later will make it possible to do without a USB drive.

To copy EDS to computer please follow further instructions:

Insert the USB-drive with EDS into the computer and run the program CryptoPro CSP, go to the tab Service and press Copy ....

In the window that opens, select the key container, for this click the button Overview.

In the opened list of key user containers, select a container and click OK.

After selecting a container, its name will appear in the line Key container name... In the next window, just click Further.

In the next step, you need to specify information about the new container, for which enter Certificate name (come up with any name for the key certificate). Then press the button Ready.

For a newly created container, it is possible to set a new password. If you want to set a password, enter it twice in the appropriate fields. If you do not plan to use a password, leave the fields blank and click OK.

So, we have selected an object for copying, indicated the location of the certificate. Now you need to install this certificate.

In the tab Service click View certificates in a container ...

By pressing the button Overview, in the window that opens, if you paid attention, another key container appeared. Select the newly created container and click OK.

After selecting a new container, click Further.

In the window that opens, the certificate for viewing will be indicated. Click on Install.

As a result, after the actions you have taken, a message will appear about the successful installation of the certificate. Click on OK.

Ready. EDS is installed on the computer.

Document flow in electronic form is introduced into various fields of activity. The core of this system is EDS... It is considered a complete replacement for the handwritten signatures, confirms the author document and allows you to make sure that the file has not been changed after signing.

Owners who use this attribute for the first time are interested in the question “ how to use EDS "? For the ES to work, it is necessary to install a specialized tool for protecting information in cryptographic mode (CIPF) on a personal computer. It is a module responsible for secure data encryption. Only if it is available, you can sign any document, as well as protect against unauthorized hacking by unauthorized persons.

If you want the software to start working, you need to purchase a license for it, which is issued by a certification authority. If it is absent, you can install any third-party crypto-provider that complies with GOST. The most common are CryptoPro and VipNet.

If you are afraid that you will not be able to cope with the setup yourself, you can contact the CA manager for help. For those who don't know how to use EDS from a flash drive, and in general, for the first time I encountered such signature, it is important to know that the ES issued by one CIPF will not affect others. If you plan to use several different systems at once on one PC, you should tell the issuing and installation specialist about this. electronic signature.

To sign any document the owner is required to have EDS key, which is known only to him. It is recommended to familiarize yourself and clarify in advance how to use the electronic key and how to store it properly. It is best to record it on a special medium. If an ordinary flash drive falls into the hands of an intruder, he can easily put his signature on document... Electronic key you can contain:

• On a specialized token carrier that has good protection and works only when the correct PIN is entered.
• In the cloud located on the server of the certification authority. This allows you to sign digital documents at any time and in any place convenient for you, where there is an Internet.

If you already know how to use digital signature and your EDS ready to start performing her functional duties, register it with the CA and attach a special certificate.

All items related to electronic signature, including the certificate, are issued by the CA. Each is stored on a special token carrier that protects them. When any cryptographic operation is performed, the cryptovider, in order to gain access to the key EDS closed type, refers to an electronic medium. On the website of the certification center, you can see the information of interest and find out in detail how to use an electronic signature.

Select signature

There are 2 types of documents:

• Electronic documentation in a specialized format that allows you to embed an EDS inside the document.
• Informal documentation that does not have a tool for embedding an EDS.

Once you understand how to use EDS, you should figure out if you can embed it inside the file itself. In some cases, special settings are required, but more often a simple version of this program is enough. When using Microsoft Word, most factors depend on the version of the product itself. In programs until 2007 EDS v document is created without auxiliary add-ons, but in versions created a little later, a special CryptoPro Office Signature plugin is required. When it comes to signing PDF files, it's worth noting the importance of using Adobe Acrobat. With her help in document can be embedded EDS.

Electronic signature many use them to work on the electronic trading platform. To do this, you should perform accreditation by attaching photocopies of the necessary documents signed by the electronic signature, and find out, how to use the electronic signature key... When participating in this type of auction, all actions must be confirmed electronic signature, since all information is stored on the servers of the ETP.

The person who received document electronic format, can verify the authenticity of the file with EDS. This can be done only if there is an open key the sender. As a result of the check, a special software module allows you to determine whether the signature document and open electronic key.

The relevance of the use of such signatures increases every year. Only a few details concerning the scope of its application change, while all other elements remain the same. All you need is to study in detail, how to use electronic digital signature.

When migrating electronic reporting to another computer or reinstalling encryption software, you need to copy the electronic signatures. In the step-by-step instructions, we show how to correctly copy electronic signatures through the ViPNet CSP program.

Step-by-step instructions on how to copy an EDS certificate

Step 1. Open the VipNet program

Most likely you will not find the shortcut on your desktop. Follow four steps to open the program:

1. Go to the menu "Start"
2. Open the item "All programs"
3. Find the folder with the name ViPNet
4. Click on the icon with the name ViPNet CSP

The encryption program VipNet will open.

Step 2. Open the electronic signature for copying

In the left part of the window that opens, go to the tab "Containers". A list of electronic signatures that are on your computer will appear.

Select the electronic signature to copy from the list. Click on the button "Copy".

Step 3. Choose where to copy the electronic signature

The system will offer to select the directory where the signature will be copied. Click on the button "Overview".

In the window "Browse folders" indicate the place of copying the electronic signature. Then press "OK".

Attention! The directory where signatures are copied should not be named infotecs or containers, if further you plan to completely remove ViPNet CSP.

Step 4. Copy the electronic signature

In some cases, the system will ask for an electronic signature password. Enter it and click "OK".

Electronic signature copied.