RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded

["Nick Pope" <pope@secstan.com>]

I attach a revised version of the XML signature profile as discussed at
today's call.

Nick

> -----Original Message-----
> From: Nick Pope [mailto:pope@secstan.com]
> Sent: 08 November 2005 18:00
> To: John Messing
> Cc: legalxml-courtfiling@lists.oasis-open.org; jcabral@mtgmc.com
> Subject: RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature
> Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
>
>
> John,
>
> I recognise that other mechanisms may be used to provide the signature.
> However, I would expect it to be a part of the signing mechanisms
> to provide
> a means of identification.
>
> The W3C SignatureProterties provides the basis of the signing time use in
> the ETSI spec.  However, this is further refined in this spec to clarify
> that this is the Signing Time, and requires that this as a signed
> property.
>
> One further point the ETSI specification also defines support for
> different
> forms of multiple signatures: independent where each signature is
> independently applied to the signed data, and embedded where
> signatures are
> applied to signed data and previous signatures.
>
> Nick
>
> > -----Original Message-----
> > From: John Messing [mailto:jmessing@law-on-line.com]
> > Sent: 08 November 2005 16:19
> > To: Nick Pope
> > Cc: legalxml-courtfiling@lists.oasis-open.org; jcabral@mtgmc.com
> > Subject: RE: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature
> > Profile WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> >
> >
> > If ECF 3.0 is not at the point of adopting X-509 digital certificates as
> > a requirement, then it seems SignerName may serve a useful function.
> > Section 3.3 of the W3C xmldsig spec makes clear that more than
> > asymmetric signatures with digital certificates are supported when it
> > states : "The specification must permit arbitrary cryptographic
> > signature and message authentication algorithms, symmetric and
> > asymmetric authentication schemes, and key agreement methods. [Brown]"
> >
> > http://www.w3.org/TR/xmldsig-core/#sec-SignatureProperties does include
> > the date and time as a signature property.  "Additional information
> > items concerning the generation of the signature(s) can be placed in a
> > SignatureProperty element (i.e., date/time stamp or the serial number
> > of cryptographic hardware used in signature generation)."
> >
> > > -------- Original Message --------
> > > Subject: FW: [legalxml-courtfiling] Groups - ECF 3.0 XML Signature
> > > Profile WD
> (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> > > From: "Nick Pope" <pope@secstan.com>
> > > Date: Tue, November 08, 2005 7:11 am
> > > To: <legalxml-courtfiling@lists.oasis-open.org>, <jcabral@mtgmc.com>
> > >
> > > Apologies for the late submission but I have the following
> > comment on this signature profile.
> > >
> > > 1) SignedDate defined in this profile already exist as
> > SigningTime in the ETSI Specification TS 101 933
> > (http://pda.etsi.org/pda/home.asp?wki_id=D1D9dRmxtkBDBGEEDkxEm)
> > which has also been published as a W3C note
> > (http://www.w3.org/TR/XAdES/) for which electronic signature
> > implementations exist.  This element is specifically defined for
> > supporting the non-repudiation threat identified.
> > >
> > > This existing SigningTime element places the time within the
> > <SignedSignatureProperties> element within the existing
> > <ds:Object> element.  This approach specifically designed for
> > such extensions to signatures, to avoid the necessity to define
> > new signature types than defining a new type of signature.
> > >
> > > 2) It is strongly recommended that rather than definining a new
> > type of signature the same approach is taken with other signature
> > properties that may be considered necessary for court filing.
> > W3C, ETSI and OASIS DSS are adopting this approach as a means of
> > assigning new properties to XML Signatures.  Defining a new
> > SignatureType element for each variation of electronic signatures
> > will lead to fragmentation of solutions in this area.  I am happy
> > to assist the editor in completing the technical details.
> > >
> > > 3) It is not clear what the role of SignerName.  If X.509 based
> > signatures are to be employed then this is already given in the
> > signing certificates.  If the two names (X.509 certified name and
> > SignerName) exist which is to be taken to be the real name?  If
> > they are different abiguity will exist.
> > >
> > > Nick
> > >
> > > > -----Original Message-----
> > > > From: jcabral@mtgmc.com [mailto:jcabral@mtgmc.com]
> > > > Sent: 07 November 2005 05:52
> > > > To: legalxml-courtfiling@lists.oasis-open.org
> > > > Subject: [legalxml-courtfiling] Groups - ECF 3.0 XML
> Signature Profile
> > > > WD (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) uploaded
> > > >
> > > >
> > > > The document named ECF 3.0 XML Signature Profile WD
> > > > (legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc) has been
> > > > submitted by Mr.
> > > > James Cabral to the OASIS LegalXML Electronic Court Filing
> TC document
> > > > repository.
> > > >
> > > > Document Description:
> > > > This is a working draft of the XML Document Signature Profile
> > > >
> > > > View Document Details:
> > > > http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > > > document.php?document_id=15218
> > > >
> > > > Download Document:
> > > > http://www.oasis-open.org/apps/org/workgroup/legalxml-courtfiling/
> > > > download.php/15218/legalxmlcourtfiling-ecf-v3.0-xmlsig-spec-wd.doc
> > > >
> > > >
> > > > PLEASE NOTE:  If the above links do not work for you, your email
> > > > application
> > > > may be breaking the link into two pieces.  You may be able to
> > > > copy and paste
> > > > the entire link address into the address field of your web browser.
> > > >
> > > > -OASIS Open Administration
> > > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe from this mail list, you must leave the OASIS TC that
> > > generates this mail.  You may a link to this group and all your
> > TCs in OASIS
> > > at:
> > > https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your
> TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>
>
>

legalxmlcourtfiling-ecf-v3[1].0-xmlsig-spec-wd-nprev.doc