Assinaturas eletrônicas corporativas: uma abordagem para reduzir a dependência da Infraestrutura de Chaves Públicas (ICP-Brasil)

Abstract

Handwritten signatures are gradually being replaced by electronic signatures, an essential process for companies and public agencies seeking greater agility and security in their documents. In Brazil, recognized electronic signatures are classified as simple, advanced, and qualified (digital signature), the latter being the most secure as it uses digital certificates from ICP-Brasil. However, the high cost of these certificates can be a barrier for many organizations. This work proposed a corporate electronic signature mechanism that reduces dependency on ICP-Brasil, while maintaining legal validity and ensuring that the private key remains under the exclusive responsibility of the signer. The developed solution integrates an API and a mobile application, allowing the generation of keys, issuance of corporate certificates, and secure storage of the private key. Tests showed that the system provides efficient performance, with satisfactory response times even for the most complex operations. The most demanding functionalities, such as download, upload, and PDF signing, yielded positive results while maintaining an acceptable user experience. Even in cases of higher processing times, the system operated within tolerable limits for users. In terms of contributions, the research offers a low-cost solution by eliminating the need for multiple expensive digital certificates. Instead of requiring companies to finance several certificates, they only need to pay for one issued by ICP-Brasil, ensuring secure and legally valid processes. This allows companies of different sizes to adopt corporate electronic signatures more affordably, facilitating the digitization of their processes and enhancing the security of business transactions.