Identity Verification

ADACOM is a Registration Authority (RA) and its authorized employee, may conduct a review of Subscriber’s Identity documents, information and signature in the relevant Application Form. If the verification documents are correct, RA will approve the Certificate Application and proceed to the certificate issuance.

A Local Registration Authority (LRA) is an entity that performs the identification and validation of Subscribers and Subjects and the initial examination of their respective documents for the issuance, re-keying and revocation of Certificates. 

ADACOM may enter into a contractual relationship with one or more third parties, in order to outsource part of RA responsibilities, especially regarding the validation of the Subscriber. In this case, the third party constitutes a Local Registration Authority (LRA). LRA performs its responsibilities in full compliance with ADACOM CP/CPS, the respective Validation plans and the terms of the LRA Agreement signed between LRA and ADACOM.

The relationship between ADACOM, LRA and RA is described in the LRA’s agreement and includes, but not limited, the following:

• Full details of LRA’s authorized employees, that will perform LRA’s duties and activities
• LRA’s obligation to receive yearly training of LRA’s authorized employees from ADACOM regarding LRA’s duties and activities and to accept yearly audits by ADACOM regarding LRA operations and procedures
• LRA’s authorized employees’ obligation to use credentials issued by ADACOM RA to ensure secure communications between both parties
• LRA’s obligation to process Subscribers’ applications exclusively through LRA’s authorized employees Local Registration Authority is responsible for delivering the Qualified Signature Creation Device (QSCD) or authentication credentials in case of Remote Qualified Certificate to the Subscriber or Subject

Local Registration Authority passes all Subscriber’s applications or requests accompanied by the related documents to the Registration Authority for approval or rejection of Certificate issuance, rekeying or revocation.

ADACOM trains LRA’s authorized employees on validation process and security procedures, prior starting LRA’s related operations and performs yearly re-training thereafter.

ADACOM performs yearly audits to the LRA operations and procedures in order to ensure compliance with ADACOM CP/CPS, the Validation Plans and the LRA Agreement.

ADACOM has successfully audited and currently implements its Remote Identity Proofing Services.

These services comply with the eIDAS Regulation and Greek Ministerial Decree 27499 EX/2021 and allows the User to identify themselves remotely through an Automated video using their computer, tablet or smartphone, before the issuance of their Qualified Electronic Signature. Key characteristics:

• It is available 24x7
• No appointment is required as the process is fully automated
• The User's data are collected by an information system, without the presence of ADACOM’s agents and are checked later
• Good sound and video quality is required
• The process lasts for approximately 5 minutes
• ADACOM stores securely all data related to the identity verification
• If the automated video is unsuccessful multiple times, the User has the option to identify themselves by physical presence
• After the successful identity verification of the User, ADACOM’s Registration Authority will approve their request for the issuance of their Qualified Electronic Signature 

Remote Identity Proofing Benefits

• Verifying remotely an identity saves time and money over face-to-face identity verification processes
• Verification in minutes rather than days
• Highly secure cloud-based storage of credentials
• Seamless customer experience

For more information on ADACOM’s available identity verification methods, please see here