The State and its citizens.
Signatures in public service models: identity, single window and a State that both signs and relies.
When citizens complete a government procedure online, they rarely think about signatures. They think about logging in, filling out a form, submitting it and getting an answer. Yet each of those steps raises questions of identity, consent and proof that the State has to resolve. How it resolves them defines a country's model of digital public service, and the signature plays a more central role in that model than it might seem.
The State plays two roles
In digital services, the State acts in two different capacities, and it is important not to mix them up.
- The State that relies. It receives signatures and documents from citizens and businesses, and must decide when to accept them: what identity it requires, what type of signature, what evidence it keeps.
- The State that signs. It issues decisions, certificates, attestations and notifications. Its documents must be verifiable by anyone, inside and outside the country, for years.
Many States also play a third role: they provide the infrastructure itself, such as the national digital identity, the root certification authority or the signing platform that public agencies use.
Three service models
| Model | How it works | What it requires of the signature |
|---|---|---|
| Each agency on its own | Each office has its own portal, accounts and rules. | Citizens repeat identification at every agency, and signatures are not always recognized across agencies. |
| Single window | A common access point for many procedures, with a shared identity. | Common identity levels and a single signature policy for the whole State. |
| Proactive services | The State initiates the procedure when an event occurs, such as a birth, without the citizen having to request it. | Exchange of signed data between agencies and recorded consent from the citizen. |
Once and only once
One principle recurs in the digital government strategies of many countries: citizens should not have to provide the State with data or documents the State already holds. The European Union built this "once only" principle into the 2018 Single Digital Gateway Regulation, and countries such as Estonia had applied it even earlier through their platform for data exchange between agencies.
For this principle to work, the data traveling between agencies must be as provable as the paper it replaces. That is why messages between public systems are usually signed or bear the organization seal of the issuing agency, with their time and their log entry. The signature moves from the service counter to the exchange between machines, but it is still what gives the data its value.
Proportionality applies here too
Not every procedure needs the same signature. Checking the status of a case file may require only basic identification. Filing a sworn statement or an administrative appeal may require a high level signature. A good model publishes which level applies to each procedure and avoids two common mistakes: requiring the maximum for everything, which shuts out those who lack the means, and accepting the minimum for acts that deserved more.
Inclusion
A digital service that can only be used by people with a modern phone, connectivity and technical skills is not universal. The most mature models combine the digital channel with in person service points where a public servant helps the citizen or acts under the citizen's mandate, and they record that intervention as part of the evidence. Assisted signing, properly documented, is still signing.
- Is there a common signature and identity policy for the whole State?
- Can documents issued by the State be verified outside its systems?
- Are the data exchanged between agencies signed or bear an organization seal?
- Is there an assisted path for those who cannot sign on their own?
In digital public services, the State relies on signatures from others, signs its own acts, and often provides the infrastructure. Models are moving from isolated agencies to the single window and to proactive services, built on the principle of asking for data only once. All of this works if signatures, from people and from agencies alike, are proportionate, verifiable and inclusive.