General

What is VIDA?

VIDA is a Rooted Certificate Authority (PSrE) licensed and certified by the Ministry of Communication and Informatics (Kominfo) to issue Digital Certificates and legally binding digital signatures to individuals and organizations whose identities have been validated by authoritative sources such as the Indonesian National Identity Database.

What is Certificate Authority(PSrE)?

A CA is a trusted organization under Kominfo that can issue Digital Certificates to verify individual identities, websites, devices, and more.

Does VIDA have legal validity?

The legal validity of digital signatures is regulated by Law No. 11/2018 and reinforced by Government Regulation (PP) No. 71/2019. Digital signatures are issued and implemented by CA authorized by Kominfo, thus having legal validity according to the laws of the Republic of Indonesia.

What is the current VIDA for Enterprise application products?

One of VIDA's solutions is digital signatures. VIDA provides biometric verification and authentication to strengthen user identity security.

Is a digital signature equivalent to a wet signature?

A certified digital signature is equivalent to wet signature. All electronic letters or documents in transactions that occur without face-to-face meetings must use digital signatures. 

What is a Digital Certificate?

A Digital Certificate has a configuration that can be linked to verified personal data during registration. This certificate also creates passwords and digital information. The Public Key Infrastructure (PKI) makes sharing information and data online secure for its users.

How do I obtain a Digital Certificate?

Users can obtain a Digital Certificate after completing the identity verification process, which includes uploading a photo of their ID card, biometric verification, and matching personal data. After completing this process, VIDA will verify the user's identity and issue the Digital Certificate.

Is VIDA's digital signature secure?

VIDA has obtained ISO 27001 and Webtrust certifications to ensure compliance with international security standards. VIDA also uses biometric authentication to authenticate certificate users and prevent them from using unauthorized digital certificates.

Is there a relationship between digital signatures and digital identities?

To perform a digital signature, users must first verify their identity digitally. In other words, a digital signature is a form of digital identity that can be validated.

What is the evidence of the authenticity of a digital signature?

A digital signature has three main functions: 

• Authentication: Ensuring the authenticity of the signer's identity. 
• Integrity: Ensuring that the document is not altered in any way. 
• Non-repudiation: The signer cannot deny the contents of the signed document.

How can I ensure the authenticity of a digital signature?

Go to the tte.kominfo.go.id website and select the PDF Verification menu. Upload the desired document and wait for the verification process to complete. Information will appear indicating whether the document DOES NOT CONTAIN or CONTAINS a digital signature. If it contains a digital signature, the document will display a digital certificate.

My Digital Certificate's active period is only 30 minutes from the time of issuance. Is this certificate still valid?

In the VIDA Certificate Practice Statement (CPS) in section 6.3.2 Operational Certificates and Usage Periods for Key Pairs, it is stated that VIDA issues certificates and key pairs for owners in three active period categories: Maximum two years, one year, and 30 30-minute. In terms of compliance and validity, the active period of the Digital Certificate for 30 minutes is accommodated and can be used by the owner.

How do I issue and use a Digital Certificate with a 30-minute active period?

The type of certificate with a 30-minute active period is only provided for digital signature services through host-to-host system integration (H2H) via VIDA's Application Programming Interface (API). The issuance and use of the certificate in the signing process occur in a single transaction session request-response. Input data on the API request includes the signer's identity and the PDF file to be signed, as well as some other digital signature attributes. This type of certificate with a 30-minute active period can only be used for a single signing process (one-time signing).

Are there specific types of documents that can use a Digital Certificate with a 30-minute active period?

VIDA limits the use of Digital Certificates to documents that do not involve high-risk transactions, such as account opening forms, privacy consents, and T&C consents.

When can a digital platform use VIDA's H2H digital signature API service?

A digital platform can use VIDA's H2H digital signature API service when the signer interacts with the platform and has given consent to the signing process. This can be during registration/onboarding or any other interaction where the digital platform requests the signer to authenticate. 

Does a digital signature remain valid after the active period of the Digital Certificate used has expired?

A digital signature on a document remains valid even after the certificate's active period has expired as long as the content of the signed document does not change. To ensure confidence in the validity of a digital signature when the certificate's active period has ended, VIDA utilizes Long-Term Validation (LTV) mechanisms.

How can I use digital signatures for my company?

Visit https://vida.id/sales for more information about VIDA Sign for Enterprise.

Technical

What kind of integration if we want to integrate with VIDA?

VIDA serves multi-platform integration: web integration, mobile SDK, and API. For more detailed information, please get in touch with our team at www.vida.id/sales.

Does VIDA use Face Recognition technology?

VIDA implements a global top-ranked and powerful Face Recognition technology to deliver our clients an instant identity verification process.

How good is VIDA's Face Recognition technology?

VIDA uses one of the best facial recognition technologies in the world, which is included in the top 3 AI for face recognition by NIST. Our face recognition accuracy is 99.8%. We also implement silent liveness detection to our face recognition technology to eliminate online identity verification fraud.

What is liveness detection?

Liveness Detection is a process performed to detect a presentation attack in the VIDA identity verification process solution. VIDA liveness detection is a Biometric AI technology to help you detect and recognize if a real and live person provides the biometric data. Liveness Detection protects users and businesses from online identity fraud.