Re: [spam] Re: [ubl-security] Questions regarding the XAdES Profile

["Roberto Cisternino" <roberto@javest.com>]

On paper world the CoO form layout was available at the Chambre of
Commerce and often filled up manually.
In this sense can be seen as an application as the Chambre will have to
endorse it if all the documentations are regular (they make also direct
verifications on the goods).

These are documents that could be requested:

- Customs declaration
- Invoice
- Bill of Lading

Sometimes (or just in some countries) the CoO is issued directly by the
exporter/manifacturer.

The CoO is not an application form but a precise trade document.

But it is true it can be used as a draft CoO (application) when pre filled
by the exporter/manifacturer and sent to the Chambre of Commerce for
endorsement and validation.
However the Chambre of Commerce is the real issuer into this case.

CoO "can" be used as application form but it isn't.

The UBL 2.0 specification is not clear enought about this so the two
different uses of the CoO are not well described.
Also UBL 2.0 uses the ApplicationResponse in the same process.

Here the bigger mistake is that the real response (acceptance) is the
signed CoO.

I would suggest to clearly assert the CoO can be used for:
- Application to obtain a CoO (pre-filled case)
- Signed CoO
- Pro-forma CoO
- Self-issued CoO (by the Exporter) without the endorsement of a Chambre
(some countries could allow this)

Cheers,

Roberto

> At 2010-08-26 16:49 -0400, Jon Bosak wrote:
>>Sorry if this is something that should be obvious to me, but I'm
>>not understanding the need for multiple signatures on UBL
>>CertificateOfOrigin.
>
> This sample from Roberto illustrates the multiple signatures on the one
> form:
>
>    http://www.export911.com/e911/export/docFormA.htm#docFormA
>
>>I thought our document was just the
>>*application* for a COO.  Did I get that wrong?
>
> Ah, that I don't know from the work done two years ago.  But looking
> today at the definitions of the document-level ABIE children, I see:
>
>    A document that describes the Certificate of Origin.
>    Unique Identifier of the Certificate Of Origin.
>    Date on which the Certificate Of Origin was issued.
>    Time at which the Certificate Of Origin was issued.
>    etc.
>
> The ASBIE child named CertificateOfOriginApplication appears to be
> describing the application that created the UBL CertificateOfOrigin
> instance ... I don't think that makes the CoO document itself the
> application ... it is just a record of the application details that
> were the genesis of the UBL document.
>
> The signature business objects in CoO are as follows:
>
>    cac:CertificateOfOriginApplication/cac:Signature
>    cac:IssuerEndorsement/cac:Signature
>    cac:EmbassyEndorsement/cac:Signature
>    cac:InsuranceEndorsement/cac:Signature
>
> Roberto, which of the above signatures would correspond to the "Form
> A" signatures in the example cited above from the page you gave us
> today?  Should we identify for the PRD1 feedback that there are
> missing signatures needed for CoO to be added for PRD2 based on this
> example?
>
> BTW, I just found that the signature business object is in
> cac:Certificate which is used in cac:Item which is used in exactly 50
> of our 60 documents.  So it isn't *only* the CoO which has the
> multiple signature group situation:  we'll need a separate signature
> group in the extension for every item certificate.  And they'll need
> to be able to be signed in an arbitrary order, which forces my hand
> regarding the digital signature transform expression.
>
> At least that is how I read it.
>
> . . . . . . . . . . . Ken
>
> --
> G. Ken Holman
> OASIS Individual Member
> Crane Softwrights Ltd.
> http://www.oasis-open.org
>
>


-- 
* JAVEST by Roberto Cisternino
*
* Document Engineering Services Ltd. - Alliance Member
* UBL Italian Localization SubCommittee (ITLSC), co-Chair
* UBL Online Community editorial board member (ubl.xml.org)
* Italian UBL Advisor

  Roberto Cisternino

  mobile: +39 328 2148123 begin_of_the_skype_highlighting              +39
328 2148123      end_of_the_skype_highlighting
  skype:  roberto.cisternino.ubl-itlsc

[UBL Technical Committee]
    http://www.oasis-open.org/committees/ubl

[UBL Online Community]
    http://ubl.xml.org

[UBL International Conferences]
    http://www.ublconference.org

[UBL Italian Localization Subcommittee]
    http://www.oasis-open.org/committees/ubl-itlsc

[Iniziativa divulgativa UBL Italia]
    http://www.ubl-italia.org