SignBox is delivered with SignBox Optimizer, a server system that exposes an HTTP RESTful API. Business applications use this API to request electronic signatures for large numbers of documents.
SignBox Optimizer performs the most computationally expensive parts of the signature process. This reduces data traffic on the local network and makes use of cryptographic hardware acceleration when available. Documents to be signed are processed in the customer business layer and are never sent to Uanataca services; only a hash of the document is transmitted. For high-performance environments, SignBox can be coupled with a pool of SignBox Optimizer instances.
The system supports several electronic signature formats, including timestamping and long-term validation. Signatures are performed at the Uanataca Trusted Service Center, where signing keys are stored in a QSCD (Qualified Signature Creation Device).
A SignBox deployment includes the following logical components:
Business application The customer system that prepares documents, generates hashes, and invokes the SignBox API.
SignBox Optimizer The runtime environment that exposes the REST API and manages signing operations. It acts as the gateway between the customer layer and Uanataca Services.
Uanataca Trusted Service Center The infrastructure where HSM (Hardware Security Module), OCSP, and TSA services operate. Signing keys are securely stored and managed in the HSM.
Documents are processed entirely by the business application.
Only a cryptographic hash of the document is sent to SignBox. The original document is never transmitted to Uanataca systems. The API sends hashes to the HSM and receives signed hashes in return over HTTPS TLS 1.2/1.3.
This model reduces data transfer, improves performance, and ensures that document content remains under customer control.
All electronic signatures are generated using private keys stored in a QSCD (Qualified Signature Creation Device) within the Uanataca HSM.
This guarantees compliance with applicable electronic signature regulations and ensures the integrity and security of the signing process.