Re: [ubl-dev] Digital Signatures

["David RR Webber" <david@drrw.info>]

Patrick / Giovanni,

But I still see that as a separate delivery step beyond the InfoPath
frontend - and then you can package the Signature block into
the transmission.

Just because you are using ftp of POST delivery - does not
mean you cannot use the ebXML Enveloping structure!!!

So - take the InfoPath UBL output, add the digital signature,
package as a ebXML message - ftp or POST to partner.

Voila!

DW

----- Original Message ----- 
From: "Giovanni Roldan" <groldan@gennassis.com>
To: "'Patrick Yee'" <kcyee@cecid.hku.hk>; "'David RR Webber'"
<david@drrw.info>
Cc: <ubl-dev@lists.oasis-open.org>
Sent: Monday, December 20, 2004 7:59 AM
Subject: RE: [ubl-dev] Digital Signatures


>
> Yes Patrick, that is the point.
>
> Saludos,
>
> Giovanni Roldan C.
> GENNASSIS
>
>
> -----Mensaje original-----
> De: Patrick Yee [mailto:kcyee@cecid.hku.hk]
> Enviado el: domingo, 19 de diciembre de 2004 23:30
> Para: David RR Webber
> CC: Giovanni Roldan; ubl-dev@lists.oasis-open.org
> Asunto: Re: [ubl-dev] Digital Signatures
>
> Tim and David,
>
> Thanks. But I think Giovanni has a point here. Actually (not only
> theorectically) UBL can be used on many transport protocols. Some
> supports doing digital signature on the protocol level (like ebMS, WSS,
> etc.), but some doesn't. Let's imagine a case where we want to create a
> UBL instance and then send it to a partner using HTTP Post method, or
> upload it to my partner's FTP server. We may still digitally sign the
> UBL instance. These cases, together with the InfoPath application
> mentioned by Giovanni suggest: can we have a normative position for
> placing the digital signature?
>
> Regards,- Patirck
>
>
>
>
> David RR Webber wrote:
>
> >Giovanni,
> >
> >Since Infopath is a forms product - it is hard to certify the user
> >online with their own digital signature.  I presume you are using
> >SSL in any case for session security.
> >
> >You really will need a separate step that does the digital
> >signature.
> >
> >E.g.
> >
> >1) User completes Infopath form - and clicks "Confirm"
> >2) Form creates UBL XML and sends to server -
> >    server now responses to user -
> >      "Dispatch Transaction" and digitally sign form.
> >3) User confirms this - server then packages
> >     ebXML transaction and sends it with signature
> >     to downstream government system.
> >4) You can use the free Hermes ebMS for this -
> >     see http://www.freebXML.org
> >
> >5) You a user registers their account with your system,
> >     then you will need to assign a certificate for them and
> >     keep track of those.  Again - I can suggest you use
> >     the Registry available from 4) and the certificate store
> >     that it provides - as a service.   You may also want
> >     to look at the Integration project here:
> >        http://www.ebxmlbook.com/interop  and the
> >    Java source code there for more ideas.
> >
> >Enjoy, DW
> >
> >----- Original Message ----- 
> >From: "Giovanni Roldan" <groldan@gennassis.com>
> >To: <ubl-dev@lists.oasis-open.org>
> >Sent: Friday, December 17, 2004 4:58 PM
> >Subject: [ubl-dev] Digital Signatures
> >
> >
> >
> >
> >>1.- Is there available schemas in the UBL definition to digitally sing
UBL
> >>documents? (I can't see the tags and namespaces for digital signature in
> >>schemas)
> >>
> >>2.- Is there any way to include or to import digital signature
definitions
> >>in UBL shemas?
> >>
> >>
> >>These questions raise because I'm trying to use Microsoft Infopath 2003,
> >>
> >>
> >and
> >
> >
> >>I need to use the digital signature feature that comes with this product
> >>
> >>
> >but
> >
> >
> >>I can't, the product documentation indicate:  "You cannot enable digital
> >>signatures for a form that was designed based on an XML Schema  that
does
> >>not have a digital signature namespace"
> >>
> >>
> >>I'm working for a government project (in Ecuador- South America) so it's
> >>very important to support digital signatures using the UBL standard and
> >>obviously the security feature of MS InfoPath.
> >>
> >>
> >>Saludos,
> >>
> >>Giovanni Roldan C.
> >>GENNASSIS
> >>www.gennassis.com
> >>
> >>Quito
> >>Ecuador.
> >>
> >>-----Mensaje original-----
> >>De: Stephen Green [mailto:stephen_green@bristol-city.gov.uk]
> >>Enviado el: viernes, 17 de diciembre de 2004 7:53
> >>Para: ubl-dev@lists.oasis-open.org
> >>Asunto: Re: [ubl-dev] Tools for database support for UBL?
> >>
> >>Many thanks to all who replied to my question about
> >>tools and techniques for supporting database integration
> >>with UBL and UBL-based Schemas and instances.
> >>
> >>It will take a while to ponder all the shared information :-)
> >>
> >>Tim's response makes me wonder whether some of the
> >>extra information from the conceptual model which might
> >>be necessary to properly create table relationships could
> >>be provided in a form more accessible to a code/SQL
> >>generator.
> >>
> >>If anyone has any further information on how to infer
> >>(perhaps automatably) the relationships from the xsd
> >>or spreadsheets which are machine-readable then I'd
> >>love to hear it.
> >>
> >>Also if anyone has any solutions for a .NET developer
> >>to use I'd love to hear of them.
> >>
> >>Again, thanks to everyone.
> >>
> >>All the best
> >>
> >>Stephen Green
> >>
> >>
> >>
> >>
> >>
> >>
> >
> >
> >
> >
>
>
>