Secure digital signing of a document

A computer-implemented method for orchestrating digital signing of a document using embedded cryptographic verification of a signing location, the method being conducted at a signing application executing on a computing device associated with a user and comprising:

• requesting data elements from a signing orchestrator for identifying the user initiating a signing request;
• receiving a hash of a payload including the data elements and data associated with the document, and a document identifier, wherein the signing orchestrator receives signed data elements, including a location data element and a biometric data element associated with the user, obtained from a user device configured to sign the data elements with an attestation key and verifies the authenticity of the signed data elements using a system attestation certificate and compares the biometric data element to user data stored in a user record;
• prompting the user for a passcode associated with a secure module;
• and
• transmitting the user passcode and the hash of the payload to the secure module configured to verify the user passcode and perform signing of the hash.

A system for orchestrating digital signing of a document using embedded cryptographic verification of a signing location including a signing orchestrator, the signing orchestrator having a memory for storing computer-readable program code and a processor for executing the computer-readable program code, the signing orchestrator comprising:

• a data request receiving component for receiving a request for data elements from a signing application and, in response to receiving the request, initiating obtaining of the data elements;
• a data element receiving component for receiving signed data elements, including a location data element and a biometric data element associated with a user, the data elements having been obtained from a user device configured to sign the data elements with an attestation key;
• an authenticity verifying component for verifying the authenticity of the signed data elements using a system attestation certificate and comparing the biometric data element to user data stored in a user record;
• a payload generating component for, in response to verifying the signed data elements, generating a payload including the location data element, the biometric data element and data associated with the document;
• a hash algorithm performing component for performing a hash algorithm on the payload to calculate a hash of the payload;
• and
• a hash transmitting component for transmitting the hash of the payload and a document identifier to the signing application for signing of the document.