Re: [ubl-security] UBL Profile for XML Digital Signatures and XAdESimplementation V.01]

[JAVEST by Roberto Cisternino <roberto@javest.com>]

Hello,
I reply about the use of IDs and URI to reference the signature.

Julián Inza ha scritto:

4AC54BA6.7090802@albalia.com" type="cite"> Dear friends,

I had the enclosed document ready from some time now but I could not find time to send it.

Now that I see the issue involves further discussions, I enclosed the merged document, so you can use it as a placeholder to include your suggestions...

In yellow colour are some points which I think should be further discussed.

Originally, reference to element <ds:Signature> in <cac:Signature> was done through  cac:DigitalSignatureAttachment/cac:ExternalReference/cbc:URI using  Id (unique identifier) of <ds:Signature>.

the problem here is the URI is not an ID.   Technically there was no value here, but it was like a convention.

4AC54BA6.7090802@albalia.com" type="cite">Now there are 2 references:

-          Through cac:Signature/cbc:ID using  Id (unique identifier) of <ds:Signature>

This makes more sense as we talk about IDs, but again it is more a convention.

4AC54BA6.7090802@albalia.com" type="cite">

-          Through cac:DigitalSignatureAttachment/cac:ExternalReference/cbc:URI using a  #xpointer to ds:Signature

This is technically correct and it seems to me a precise way to reference the signature.

4AC54BA6.7090802@albalia.com" type="cite">

Maybe we should select the simple way since using xpointer is more complex.

Maybe the whole xpointer is not easy but into this case the xpointer string is always the same.
The implementer is not constrained to use an xpointer engine, instead the xpath can be extracted and used directly.

4AC54BA6.7090802@albalia.com" type="cite">

Additionally, we would need the role of SignatureParty. That is who is signing the document: the issuer, the receiving party (self-invoicing, being a invoice), or a third party (for instance signature service provider).

Best regards,

Julian Inza Aldaz

Presidente
Albalia Interactiva, S.L.

: www.albalia.com : blog.inza.com
: julian.inza@albalia.com
: +34 91 388 0789 : +34 902 365 612

Please update your address book. Our new postal address is: C/ Mentrida, 6 - 28043 - Madrid (Spain).

Este mensaje de correo electrónico puede contener INFORMACIÓN CONFIDENCIAL propiedad de Albalia Interactiva. Si lo ha recibido por error, por favor haga caso omiso, elimínelo y notifíquelo al remitente. La información personal puede ser añadida a un fichero de relaciones (que puede incluir información de marketing) en Albalia Interactiva, donde usted puede ejercer sus derechos de acceso, rectificación y cancelación de sus datos al amparo de la Ley Orgánica 15/1999. Usted está autorizado a utilizar los datos personales del firmante de este mensaje siempre que haya una manera de ejercer los mencionados derechos por el remitente.

This e-mail message could contain CONFIDENTIAL INFORMATION property of Albalia Interactiva. If received by mistake, please ignore it, delete it and notify the sender. Your personal information can be added to a relationships file (that can include marketing information) at Albalia Interactiva where you can exercise your rights to access, rectify or cancel your data according spanish 15/1999 Organic Law. You are authorised to use personal data of the signer of this message as long as there is a way to exercise the mentioned rights by the sender.

-------- Mensaje original --------

Asunto:	[ubl-security] UBL Profile for XML Digital Signatures and XAdES implementation V.01
Fecha:	Tue, 1 Sep 2009 12:38:12 +0200 (CEST)
De:	Roberto Cisternino <roberto@javest.com>
Responder a:	roberto@javest.com
Para:	ubl-security@lists.oasis-open.org
CC:	tim.mcgrath@documentengineeringservices.com

 

Dear Julian,

as we didn't receive any feedback from you, we have done the attached

working draft which is enhancing the original Oriol proposal and is

opening the profile to a wider audience.

I would see this profile as the 2nd revision to your recent work.

Certenly by merging the two efforts we could reach a good specification.

Best Regards

Roberto

-- 

* JAVEST by Roberto Cisternino

*

* Document Engineering Services Ltd. - Alliance Member

* UBL Italian Localization SubCommittee (ITLSC), co-Chair

* UBL Online Community editorial board member (ubl.xml.org)

* Italian UBL Advisor

  Roberto Cisternino

  mobile: +39 328 2148123

  skype:  roberto.cisternino.ubl-itlsc

[UBL Technical Committee]

    http://www.oasis-open.org/committees/ubl

[UBL Online Community]

    http://ubl.xml.org

[UBL International Conferences]

    http://www.ublconference.org

[UBL Italian Localization Subcommittee]

    http://www.oasis-open.org/committees/ubl-itlsc

[Iniziativa divulgativa UBL Italia]

    http://www.ubl-italia.org

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 

Nessun virus nel messaggio in arrivo.
Controllato da AVG - www.avg.com 
Versione: 8.5.409 / Database dei virus: 270.13.115/2405 -  Data di rilascio: 09/30/09 10:35:00

  

--

JAVEST by Roberto Cisternino

* Document Engineering Services Ltd. - Alliance Member * UBL Italian Localization SubCommittee (ITLSC), co-Chair * UBL Online Community editorial board member (ubl.xml.org) * Italian UBL Advisor

Roberto Cisternino

mobile: +39 328 2148123
skype: roberto.cisternino.ubl-itlsc
[UBL Technical Committee]	http://www.oasis-open.org/committees/ubl
[UBL Online Community]	http://ubl.xml.org
[UBL International Conferences]	http://www.ublconference.org
[UBL Italian Localization Subcommittee]	http://www.oasis-open.org/committees/ubl-itlsc
[Iniziativa divulgativa UBL Italia]	http://www.ubl-italia.org

PPlease consider the environment before printing this email.