AW: [dss-x] Verification Reports for Visual Signatures

["Huehnlein, Detlef" <Detlef.Huehnlein@secunet.com>]

Hallo Pim,  

> For a project I have a requirement that covers both the 
> verification report profile and the visual signature profile. 
> The project is an electronic archival system that archives 
> PDF documents. To support retrieving documents based on 
> signature information, we want to run a verification report 
> on PDF documents to retrieve any signatures in them, at the 
> stage of adding new documents to the archive. Ideally, both 
> profiles could work together, so the verification report 
> could provide a full report for documents with visual signatures.  
> 
> For PDF documents, the verification should report on the PDF 
> fields "Location" and "Reason".  In the verification report 
> schema, the Location could map to "SignatureProductionPlace". 
>  Is that a correct assumption?

yes, it would be natural to map PDF.Location to 
XAdES.SignatureProductionPlace. 

> Where would the value for the PDF signature "Reason" fit in 
> the verification report schema?  

The PDF.Reason element seems to be similar to the purpose
of the XAdES.CommitmentTypeIndication element, which is a
SignedDataObjectProperty
and hence we should think about mapping it to this place.
 
> In Ezer's draft Visual Signature profile, there is an added 
> element "SignatureReason" in 
> "VisualSignatureDisplayConfigType".  Should the verification 
> report profile reference the visual signature profile and 
> retrieve such elements from its schema? 


We should try to end up with a single structure, which should be 
as simple as possible to cover XAdES/XMLDSig, CAdES/CMS and PDF. 
Hence in this case I tend to prefer to use the
CommitmentTypeIndication-element
instead of including the PDF-specific SignatureReason-element. 
What do you think?

BR,
  Detlef
 
> 
> Pim
> 
> 
> -----Original Message-----
> From: Detlef.Huehnlein@secunet.com 
> [mailto:Detlef.Huehnlein@secunet.com]
> Sent: 05 May 2008 14:24
> To: dss-x@lists.oasis-open.org
> Subject: [dss-x] Groups - 1st working draft for 
> multi-signature verification reports profile 
> (2008_05_05_oasis-dss-profile-for-comprehensive-signature-veri
fication-repor
> t.doc) uploaded
> 
> Dear DSS-X-team,
> 
> I just uploaded the first working draft for the 
> multi-signature verification reports profile. 
> 
> I'm looking forward to interesting discussions via mail 
> and/or in our next telco. 
> 
> Best regards,
>   Detlef
> 
>  -- Detlef Huehnlein
> 
> The document named 1st working draft for multi-signature 
> verification reports profile 
> (2008_05_05_oasis-dss-profile-for-comprehensive-signature-veri
fication-repor
> t.doc)
> has been submitted by Detlef Huehnlein to the OASIS Digital 
> Signature Services eXtended (DSS-X) TC document repository.
> 
> Document Description:
> This document defines a protocol and processing profile of 
> the DSS Verifying Protocol specified in Section 4 of 
> [DSSCore], which allows to return individual signature 
> verification reports for each signature in a verification 
> request and include detailed information of the different 
> steps taken during verification. 
> 
> View Document Details:
> http://www.oasis-open.org/apps/org/workgroup/dss-x/document.ph
p?document_id=
> 28182
> 
> Download Document:  
> http://www.oasis-open.org/apps/org/workgroup/dss-x/download.ph
p/28182/2008_0
> 5_05_oasis-dss-profile-for-comprehensive-signature-verificatio
n-report.doc
> 
> 
> PLEASE NOTE:  If the above links do not work for you, your 
> email application may be breaking the link into two pieces.  
> You may be able to copy and paste the entire link address 
> into the address field of your web browser.
> 
> -OASIS Open Administration
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS 
> TC that generates this mail.  You may a link to this group 
> and all your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgr
oups.php 
> 
>