RE: [ubl-dev] UBL & XML DSIG

[Szabó Áron <aron@ik.bme.hu>]

Hi,

I think storing XML DSIG or XAdES electronic signature is not the matter of
UBL invoice message. We will use XAdES-A archive signature (see ETSI TS 101
903) to store eInvoices, where UBL inovice message would be the *input* to
signature-creation application. The whole message is encoded with base64,
and is embedded into an "enveloped signature" structure (as it is written in
XAdES standard). This method is used by most of applications to create a
XAdES signature to a document (see ETSI plugtests or W3C/IETF
interoperability tests). At the verification XAdES signature can be verified
on invoice, or if application at the other party can't support signature
creation/verification, then it simply takes out the base64 encoded invoice
message and decode it (and makes it visible in a browser). It works! :-)

Aron

---

Hi,

I'm designing an application that is supposed to store digital invoices. 
It will be a kind of invoices repository. UBL standard fullfits most of 
my requirements and as it's used by some ERPs, it would be my first 
choice to store and deliver invoices.

Problem comes up when I want to store a digital signature for the 
invoice in XML DSIG. I've seen other standards (i.e. xCBL) that supports 
XML DSIG signature inside invoice documents but I cannot find the way to 
do that with UBL.

Which is the best way to deal with UBL and XML-DSIG/XadES? Will it be 
supported in future?

Regards,
Jorge