Milestone Srl MA213-003 – DMA-80 EVO – User Manual
165
continuous period of controlled
system access, each signing
shall be executed using all of the
electronic signature
components.
(2) Be used only by their
genuine owners; and
(3) Be administered and
executed to ensure that
attempted use of an individual's
electronic signature by anyone
other than its genuine owner
requires collaboration of two or
more individuals.
(b) Electronic signatures based
upon biometrics shall be
designed to ensure that they
cannot be used by anyone other
than their genuine owners.
owner will require the collaboration of two or more
individuals.
This target can be achieved also through DMA software
thanks to the obligation of change the password at the first
access of a new account and to the periodic expiration
(configurable) of the passwords.
(b) N/A
Electronic signatures on the system are not based upon
biometrics
11.300
Persons who use electronic
signatures based upon use of
identification codes in
combination with passwords
shall employ controls to ensure
their security and integrity. Such
controls shall include:
(a) Maintaining the uniqueness
of each combined identification
code and password, such that
no two individuals have the
same combination of
identification code and
password.
(b) Ensuring that identification
code and password issuances
are periodically checked,
recalled, or revised (e.g., to
cover such events as password
aging).
(c) Following loss management
procedures to electronically
deauthorize lost, stolen, missing,
or otherwise potentially
compromised tokens, cards, and
other devices that bear or
generate identification code or
password information, and to
issue temporary or permanent
replacements using suitable,
rigorous controls.
(d) Use of transaction
safeguards to prevent
unauthorized use of passwords
and/or identification codes, and
to detect and report in an
(a) The system prevents the repeated use of the same
account name for different users.
Each user must identify himself by his own account name
and password.
The access to the software can be further secured by the
use of individual and electronically signed USB sticks.
(b) DMA software does not allow to set simultaneously
two accounts with the same name and it is possible to
define an expiration time for the passwords.
It is not possible to reuse an identical password
immediately after the expiration of the same.
Passwords must have a minimum length of 5 digits and
must be changed at the first access of a new account.
(c) The organization of the user is responsible for
implementing procedures for the management of accounts
and password also in case a person left the company or
changes his working position. Those procedures must
ensure security and integrity of the system also in case of
lost, stolen, missing, compromised hardware or software
access supports.
The DMA software allows Service and Administrator
accounts to the delete other existing accounts.
(d) After 3 consecutive failed unsuccessful attempts from
the same account, this is blocked. The release of a
blocked account can only be authorized with a
subsequent login from a superior level account or
automatically after 24 hours.
The organization of the user must guarantee that
unsuccessful access attempts causing locking of an
account or anyhow reported on the Trail file are monitored
and notified to the management.
To Next Page
