Europe agrees digital signature standards

European telecoms ministers have agreed on a common framework for electronic signatures which are used for public procurement and by the public sector.

At a directive meeting in Luxembourg yesterday the ministers addressed European Commission guidelines on public-key encryption policies and the role of certification service providers.

At the last council meeting in November 1998 ministers failed to agree on the type of identification technology that should be used. But in yesterday's meeting the council decided to support what is currently the most recognised security device - public-key encryption - with the intention of keeping an open mind to future technical developments. They also agreed to develop a legal framework for electronic signatures and certain certification services.

Joachim Kubosch, spokesman for European commissioner, Martin Bangemann, said it is important that the ministers have decided to take a neutral approach to future technologies and services capable of authenticating data. "If the conditions are too strict it would hamper technical development," he said.

Dave Birch, consultant at ecommerce consultancy Hyperion, believes the agreement is a step forward for electronic security issues. "It's good that the [European] Parliament will accept the directive put forward by the EC - it also means they're backing no mandatory key escrow."

The directive is yet to be formally adopted but once it has been passed by the European Parliament, individual member states will be give 18 months to integrate it into national law.