Electronic Signatures and Records Act (ESRA) Guidelines

Office of Management and Budget (OMB), Appendix II to OMB Circular No. A-130
Implementation of the Government Paperwork Elimination Act
Office of Management and Budget (OMB), Guidance on Implementing the Electronic Signatures in
Global and National Commerce Act
Property Records Industry Association (PRIA) has background documents and standards that have
been incorporated by reference into the ESRA regulation relating to electronic recording of real
property instruments. There are two non-technical documents to explain e-recording
How To Get Ready for eRecording – Recorders,
http://www.pria.us/i4a/doclibrary/getfile.cfm?doc_id=45.
How To Get Ready for eRecording – Submitters,
http://www.pria.us/i4a/doclibrary/getfile.cfm?doc_id=46.
The technical documents and standards that ITS has expressly incorporated by reference into the
regulation are collectively known as the "PRIA Guidelines" which are available via the PRIA
website and consist of the following:
PRIA Request Version 2.4.2, August 2007;
PRIA Response Version 2.4.2, August 2007;
Document Version 2.4.1, October 2007;
Notary Version 2.4.1, October 2007; and
eRecording XML Implementation Guide for Version 2.4.1, Revision 2, March 2007.
4. Resources on the Security of E-signatures Created by Cryptographic Technologies
Some e-signature technologies are based on cryptographic techniques like public key
infrastructure (PKI).. The federal government has developed a set of technical standards and
guidelines on the security of cryptographic systems and system components that are relevant to
the security of e-signatures created by such systems. Governmental entities that use
cryptographic systems for creating e-signatures are referred to the following federal resources.
http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf defines security requirements
covering 11 areas related to the design and implementation of a crypto-module including the
cryptographic keys used to create and authenticate e-signatures. Within most areas, a cryptomodule
receives a security level rating (from1 to 4, 1 being the lowest rating). Cryptographic
keys used for signing should meet at least a 3 security level rating.
NYS-G04-001
Page 42 of 43