Analysis of the mobile-first model of qualified electronic signatures

Authors

DOI:

https://doi.org/10.18372/2225-5036.32.21657

Keywords:

qualified electronic signature, mobile-first, remote QSCD, eIDAS, trust services, Signature Activation Module, Hardware Security Module, post-quantum cryptography, EUDI Wallet

Abstract

The article provides a comprehensive analysis of the mobile-first qualified electronic signature (QES) model in the context of modern trust services. The regulatory framework of remote QSCD operation according to eIDAS and eIDAS 2 requirements, as well as the harmonization of Ukrainian legislation with the European regulatory framework, are examined. The technical architecture of mobile-first signing is analyzed, including SCAL2 mechanisms, Signature Activation Data (SAD), Signature Activation Module (SAM), Hardware Security Module (HSM), Trusted Execution Environment (TEE), and Secure Enclave technologies. The main implementation models of mobile-first QES are considered, including push-based, QR-based, federated architectures, and integration with the EUDI Wallet ecosystem. A systematic analysis of threats targeting mobile applications, secure execution environments, server infrastructure, and communication channels is conducted. Prospective research directions are identified, including post-quantum cryptography integration, threshold cryptography, zero-knowledge attestation mechanisms, and distributed ledger technologies for trust services and electronic archiving.

Downloads

Published

2026-08-21

How to Cite

Okhrimenko, A., Stokipnyi, O., & Kovtun, V. (2026). Analysis of the mobile-first model of qualified electronic signatures. Ukrainian Scientific Journal of Information Security, 32(2), 44–50. https://doi.org/10.18372/2225-5036.32.21657

Issue

Vol. 32 No. 2 (2026): Ukrainian Scientific Journal of Information Security

Section

Cybersecurity & Critical Information Infrastructure Protection (CIIP)

License

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License.

The scientific journal "Ukrainian Scientific Journal of Information Security" adheres to the principles of open science and provides free, free and permanent access to all published materials. The goal of the policy is to increase the visibility, citation and impact of the results of scientific research in the field of information security. The journal works according to the principles of Open Access and does not charge a fee for access to published articles.

All articles are published in Open Access under the Creative Commons Attribution 4.0 International (CC BY 4.0) license.

Copyright

Authors who publish their works in the journal “Ukrainian Scientific Journal of Information Security”:

  • retain the copyright to their publications;

  • grant the journal the right of first publication of the article;

  • agree to the distribution of their materials under the CC BY 4.0 license;

  • have the right to reuse, archive, and distribute their works (including in institutional and subject repositories), provided that proper reference is made to the original publication in the journal.