RE: [dss] Scope of electronic signature

["Nick Pope" <pope@secstan.com>]

John,

Currently, I believe the question with regards DSS is not whether the method
provides an Electronic Signature, but whether this method constitutes
Digital Signature.

DSS, by its name, and the mechanisms on which DSS builds (e.g. W3C XML
signatures and CMS) clearly relate to Digital Signatures.  Also, Statement
of Purpose of DSS clearly assumes that a digital signature involves use of
keyed mechanisms. Similarly, W3C signatures assume the use of keyed
signature algorithms.

Thus, I am not sure that an association between a hash and authentication in
a database can be considered to be a digital signature.  This, however, does
not necessarily stop it being an electronic signature.

However, this does not say that the DSS protocol would not be of use in
usage scenarios with hash and authenticated identity.  The DSS protocol
could be used to obtain a secure association of a hash and secure
authenticated identity which is protected by a digital signature.

Nick


> -----Original Message-----
> From: jmessing [mailto:jmessing@law-on-line.com]
> Sent: 22 September 2003 17:08
> To: dss@lists.oasis-open.org
> Subject: [dss] Scope of electronic signature
>
>
> The National Conference of U.S. State Court Judges has chosen the
> storage of simple hashes in a data base coupled with the storage
> of unspecified authentication methods to create a "signature" for
> electronic filing purposes. The database relationships create the
> logical association between the document and the signer. A
> resolution including this signature solution will most likely be
> proposed by one or more ABA sections to the House of Delegates at
> the mid-year meeting in San Antonio. I anticipate that the issue
> will dominate the meeting.
> I also anticipate that if the ABA adopts such a resolution, then
> the U.S. federal courts will follow. It is likely that other
> governmental agencies in the US will then follow the approach.
>
> The question arises whether this is a signature that should be
> considered within the scope of the work of the TC.
>
> John Messing
> American Bar Association representative to OASIS
>
>
> To unsubscribe from this mailing list (and be removed from the
> roster of the OASIS TC), go to
> http://www.oasis-open.org/apps/org/workgroup/dss/members/leave_wor
> kgroup.php.
>
>
>