Electronic signatures age along with the technologies they rely on, and verifying them years later is not guaranteed. The lecture explained why long-term preservation is crucial, what common approaches exist, and what innovation the technological partnership of Archimetes and Software 602 brings to the Slovak market.
Why digital signatures need maintenance
On paper, durability and signature verification are intuitive and have been known for centuries, whereas with electronic documents everything relies on algorithms, keys, and certificates. These components become outdated over time, certificate issuers cease to exist, and the original services may no longer be available. Long-term preservation therefore adds evidence and timestamps so that it is possible to verify the validity of the document even in 15 or 20 years, regardless of the original provider.
The argument is not only lawsuits, but also the Act on Registries and Archives, which requires storing the data needed to verify the signature together with the electronic record. Common signing applications often create only the baseline T profile, which does not meet these requirements. What is needed is the archival baseline LTA profile, and the informatization ministry recommends keeping documents in a verifiable form, for example through a qualified trust service under eIDAS.
What previous solutions offered
Registries typically connected to the MDURZ module from NASES, which, however, limits both the length of storage and file size. The long-term signature is not stored there directly in the document, but in an integrity signature—a hash tree. Verification over the long term is thus tied to this system, and its future roadmap is also in question.
Operators also send out notifications when a certification authority ceases operations and recommend converting signatures into archival form. The FAQs on Slovensko.sk likewise state that the integrity signature has its limits. An alternative is to build your own archive at the registry, but such software does not obtain qualified status automatically and requires separate effort and infrastructure.
„Smart“ preservation as a service
The new solution presented by Archimetes and Software 602 is provided as a service with an integration component, with documents remaining with the customer. The provider is a qualified provider of a preservation service, which is not a given on the market. Integration takes place via a connector and is built on four web service methods, so deployment is relatively fast.
The solution is already integrated into two Slovak records management systems and is running in routine operation in the borough of Petržalka. In the Czech Republic it is in use across public administration and smaller municipalities, together with other services under eIDAS. For organizations, this means the ability to verify signatures over the long term without being tied to the lifecycle of the original certificates and systems.