How signing will work

This page describes the target model: what signing will be once the trust infrastructure is in service. Nothing below is open today. The principle fits in one sentence: the signer buys no hardware, installs no software, and signs from a phone or a browser.

What is this? How electronic signing will work once the service opens.

Who is it for? For anyone wondering how they will sign in the future.

What can I do here? See the steps, from enrolment to checking a document. See enrolment

A blank sheet of paper whose right edge breaks up into small square pieces that fade away.

Nothing to buy

The signer will have no USB token, no smart card and no card reader to obtain, and nothing to install on a computer. The physical carrier disappears from the journey: the hardware cryptographic module operated by YORYX TRUST takes its place.

No signing USB token to buy, to renew, or to replace when it is lost or broken.
No smart card and no reader, and therefore no dependency on one particular workstation.
No software, no browser extension and no driver to install: an up-to-date browser or the platform application is enough.

The signer's keys stay inside the module

In the target model, the signer's signature-creation data is generated inside the hardware cryptographic module operated by YORYX TRUST and never leaves it in the clear. It is copied onto no carrier, exported to no computer, and handed to no third party.

Article 8 of Law No. 43-20 governs exactly this point: generating or managing signature-creation data on behalf of the signer may be entrusted only to a trust service provider that has obtained approval. YORYX TRUST is preparing that approval; until it is granted, this service is not open.

One practical consequence: losing a phone loses no key. It revokes an authentication means, which the signer enrols again; the signature-creation data never left the module.

Prove your identity once, at enrolment

Enrolment will happen through the SELLO® platform, and never through this site: YORYX TRUST does not contract with end users and opens no account here.

The identity reference is the electronic national identity card (CNIE). The identity check may be carried out face to face or remotely, according to the arrangements the DGSSI référentiel admits. Article 33 of Law No. 43-20 makes verification of the certificate holder's identity a condition of approval.

Open item: the remote identity-verification arrangements the DGSSI référentiel admits still have to be confirmed with the national authority. No method is announced here, and no integration with the electronic national identity card exists today: it is described as a target.

Signing from a phone

Every signature will be authorised by an action only the signer can perform: from the application on the phone or from a browser session, after strong authentication. Without that action the module produces no signature.

This is what sole control means. The key is held by the provider, but it is operated only by the signer, for one specific document and at one specific moment. Strong authentication is therefore not a mere login: it is a component of the signing service itself.

This server-signing model is described by the standards CEN EN 419 241-1 and CEN EN 419 241-2, which the DGSSI Ref_QSCD référentiel counts among the texts applicable to signature-creation devices subject to approval.

These standards are working targets: no conformity is established today, and no third-party attestation is claimed.

Verifying without an account

Verifying a signature, a seal or a timestamp token will be public. Whoever receives a document will need no account, no software and no subscription to check who signed, when, and whether the document has been changed since.

This validation service is not open today, because no certificate is issued. It is one of the services YORYX TRUST is preparing for the SELLO® platform.

The three levels of electronic signature

Law No. 43-20 distinguishes three levels of electronic signature.

A simple electronic signature identifies the signatory and links the signature to the document; a court weighs its evidential value.

An advanced electronic signature adds a unique link to the signatory, sole control of the creation data, and detection of any later change to the document.

The qualified electronic signature, the only level that carries the presumption of reliability, is not yet offered by YORYX TRUST: it will be once the DGSSI has granted its approval.

Our regulatory status today

YORYX TRUST is preparing its declaration and its application for approval with the Direction Générale de la Sécurité des Systèmes d'Information (DGSSI) under Law No. 43-20 on trust services for electronic transactions. As of today, YORYX TRUST is neither declared nor approved.