AW: [dss-x] Signature Quality Level definitions?

[<detlef.huehnlein@ecsec.de>]

Hi Andreas,

the signature quality levels (from a European perspective) are IMHO buried in Art. 3 of the eIDAS-Regulation (see https://www.eid.as/home/#article3),
where I see at least the following 13 cases:

- electronic signature (Art. 3 (10))
- advanced electronic signature (Art. 3 (11)) (i.e. without qualified certificate and without QSCD) 
- advanced electronic signature based on a qualified certificate for electronic signature (Art. 3 (11) and Art. 3 (15))
- advanced electronic signature based on a qualified certificate for electronic seals (Art. 3 (11) and Art. 3 (30)) // ... this level may seem odd, but is very useful in practice 
- advanced electronic signature created using a qualified signature creation device (Art. 3 (11) and Art. 3 (23))
- advanced electronic signature based on a qualified electronic seal (Art. 3 (11) and Art. 3 (27))// ... as above, but with QSCD (Art. 3 (32))
- qualified electronic signature (Art. 3 (12)) (i.e. with both qualified certificate for electronic signature and QSCD)
... and mutatis mutandis, almost the same again for seals, i.e. 
- electronic seal (Art. 3 (25))
- advanced electronic seal (Art. 3 (26))
- advanced electronic seal based on a qualified certificate for electronic seals (Art. 3 (26) and Art. 3 (30))
- advanced electronic seal based on a qualified seal creation device (Art. 3 (26) and Art. 3 (32))
- qualified electronic seal (Art. 3 (27))

Maybe it makes sense to define the element as anyURI in the core, state that the corresponding values 
are defined in profiles and define the URIs for the cases above in the AdES-profile.

BR,
 dh

-----Ursprüngliche Nachricht-----
Von: dss-x@lists.oasis-open.org <dss-x@lists.oasis-open.org> Im Auftrag von Andreas Kuehne
Gesendet: Dienstag, 1. Mai 2018 13:30
An: dss-x@lists.oasis-open.org
Betreff: [dss-x] Signature Quality Level definitions?

Hi all,


as agreed yesterday I moved te SignatureQualityLevel component from the AdES profile to the core. But I do struggle to find a definition of valid value for it. There is detailed work done on certificate quality but I couldn't find similar stuff on signatures.

Can anybody share a pointer?


Thanks in advance,


Andreas

--
Andreas Kühne
phone: +49 177 293 24 97
mailto: kuehne@trustable.de

Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612

Director Andreas Kühne

Company UK Company No: 5218868 Registered in England and Wales 


---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php