Verteilte Elektronische Unterschriften (VEU)

With the exception of EBICS in France, users can have four different permission levels:

• T - Transport permission only (download and upload, but no execution of payments).
• E - User can sign a document independently without another user.
• A - User can sign a document with another user of level A or B.
• B - User can sign a document with another user of level A.

As long as required signatures are missing, an uploaded order is stored in the Electronic Distributed Signature (EDS) queue. From there, other users can sign or cancel the order with the EBICS order types HVE and HVS. Once all required signatures have been obtained, payments are executed. It is not necessary to sign an order with the same EBICS library. The user can use any EBICS application that supports distributed signatures.

If you do not want to use distributed signatures at all, you have to use a user with permission E. In this case, uploaded documents are processed immediately. PyFintech offers the option of assigning two passwords: The first one is required to download files (e.g. account statements) and the second is additionally required to sign uploaded documents (credit transfers, direct debits, etc.). With this approach, you are able to store the first password permanently to automate downloads and secure uploads with the second password, which should never be stored.

However, the most secure implementation is to spread the signature process over separate systems. For example, your main application uploads orders with permission T. These orders are then signed by authorized users (E, A+A or A+B) on their smartphones. The desired workflow is entirely up to you. We recommend the App BankingVEU (Android, iOS) which is available in the languages English, French and German.

In France, there are only the permissions T and TS. Here, uploaded orders with permission T are finally authorized via online banking. Users with permission TS must sign the uploaded document externally via 3SKey instead.