Securosys SAM (Signature Activation Module)

The EU’s eIDAS regulations specify the requirements to generate a QES – a Qualified Electronic Signature. Any electronic signature meeting these requirements is by law considered equivalent to a physical 'wet ink' signature. Qualified Trust Service Providers (QTSPs) provide a scalable and convenient remote signing service, enabling customers to digitally sign documents and data in full compliance with the rigorous demands of these regulations.

Under eIDAS rules QTSPs cannot simply deploy a traditional Hardware Security Module (HSM). Conventional HSM designs do not support the principle of ‘sole control’ – they are unable to apply an individual access control policy to all protected keys or enforce strong authentication for usage of those keys. It is for this reason that a Signature Activation Module (SAM) component is included within the regulations to provide this missing functionality, enabling strong authentication of all end users within the QTSP’s system. The combination of an HSM and SAM is referred to as a Qualified Signature Creation Device (QSCD) in eIDAS terminology.