Simple to use Secure web based forms - encryption and digital signing of forms and their attachments.  

FormsAssurity ensures that personal information entered in an online form is kept private in transit and storage and that information received can be linked to a
specific customer.

A low cost, time saving alternative to weak SSL and VPN solutions that only do half the job !

FormsAssurity simply integrates into your existing systems.


Open Standards
Based on OpenPGP (PGP, GnuPGP, etc.) and PKI standards it provides complete integration with existing systems and ensures you are not locked into any proprietary and incompatible technology.


Operating Systems supported for client (user PCs)
Windows 95, 98, ME, NT, 2000, XP
Sun's JRE v1.4.2 or above must be installed


Server Requirements (minimum spec)
Any type of OS supported on the server since no processing of web forms takes place here.  Secured forms are uploaded to the server just like any other file.


Encryption Algorithm
AES.  Key strength 256 bit  (FIPS Pub 197)


Digital Signature Algorithms
RSA.  Key strength 2048 bit
DH/DSS.  Key strength 2048/1024 bit
Supports any key length for imported keys - a minimum RSA key length of 1024 bits is required for encrypting files


Hashing Algorithms
SHA-1.  Key strength 160 bit
MD5 128 bit is supported for imported keys


Digital Certificate formats supported
.P7B (PKCS#7)
.PEM
.CER (DER & Base 64)
.P12  (PKCS#12)
.PFX
X.509 v2
X.509 v3
.ASC (OpenPGP RFC 2440)
.PKR (PGP public keyring)

FormsAssurity supports any Certificate Authorities (CAs) that export their certificates in any of these formats - Verisign, DST, Microsoft, etc.  The majority of CAs offer .P12 format.

You can generate keys and certificates in the free reader software that are based on the X.509 standard and the OpenPGP RFC 2440 standard


Form File Formats supported
.HTML


FREE Reader Software
Is provided for administrators who want to generate a free encryption and digital signature key pair and for users who need to generate keys in order to digitally sign forms (assuming they don't already have them).  Alternatively administers and users can use keys/certificates issued by a Certificate Authority and/or OpenPGP application.


Security features
An automatic integrity check is performed on each form when it is loaded into the user's browser so the user knows if it has been tampered with.

Encryption of information takes place in memory and nothing is left on the client computer.

Recipient email addresses are taken from information contained in the public keys and cannot be changed (so the web form cannot be encrypted for someone else and sent to a different email address).  

Plus the latest US Government strength encryption and Open Standards ensuring a bullet and future proof solution for your web based information.