![Draft ETSI EN 301 489-50 V2.2...2002/02/02 · 4G IMT-advanced ETSI TS 137 104 [21] ETSI TS 137 141 [12] ETSI TS 137 114 [31] ETSI TS 137 145-1 [13] ETSI TS 137 145-2 [14] WMAN (OFDMA)](https://static.fdocuments.net/doc/165x107/60e0dd64bbf8f11159724729/draft-etsi-en-301-489-50-v22-20020202-4g-imt-advanced-etsi-ts-137-104.jpg)
Long Term Storage For Electronically Signed Documents · ETSI TS 101.733 ETSI TS 101.903 XadES XML...
18
Transcript of Long Term Storage For Electronically Signed Documents · ETSI TS 101.733 ETSI TS 101.903 XadES XML...
Agenda
– Legal Framework
– Difficulties when preserving digitally signed Documents
– Secure METS
– System MailTresor
– Business Case - Electronic Billing
Legal Framework
– digitally signed documents may have equal value to traditionally signed paper-documents
– legislation obligate businesses and citizens to store documents over many years, often even decades – Future use for control and account purposes– Evidential reasons– Protects interests of third persons
-> you have to preserve your digital documents by providing:• Authenticity• Integrity• Verifiability and Validity of the digital signature
• Readability
Difficulties when preserving digitally signed documents
Problem - Electronic Signatures
– revoked certificates
– revocation information is no longer available
– algorithm used has been broken
– key-length is too small
ETSI TS 101.733
ETSI TS 101.903 XadES
XML Advanced Electronic Signatures (XadES)ETSI TS 101 903
– Defines a format for advanced electronic signatures that remain valid over long periods of time
– Compliant with the European Directive
Difficulties when preserving digitally signed Documents
The Document itself:– The document format itself is no longer
readable by the current software
METS -
Metadata Encoding & Transmission Standard
– enables long term preservation of documents
– extensibility
– open standard
– Open Archival Information System (OAIS) Reference Model compliant
METS
METS - Metadata Encoding & Transmission Standard
Encodes different types of meta data of digital objects
• descriptive meta data• administrative meta data• structural meta data• …
S/METS – Secure METS
METSETSI TS 101.903 XadES + = S/METS
DOCUMENT
XadES
[DMD (EMAIL) -> Header, Sender, Recipient, Type.. ][AMD (EMAIL) -> File size, Rights..]
[DMD (XaDES) -> Creator, Date, Source, Type… ][AMD (XaDES) -> File size, Rights..]
[FILE -> EMAIL -> XadES
[DIV ->S/METS -> EMAIL -> Header-> Body …>Signature
-> XadES
S/METS
System MailTresor
Digitally Signed Document
Storage System
SMTP HTTPS
Delivery/NotificationSystem
Long term preservation of digitally signed emails
– most used document type
– digital signature already “integrated”
Delivery/Notification System– TicketMail
– ProveMail
1. Advanced Signature Generator
AdvancedSignatureGenerator TSA
CA
ES Time StampCertificateRevocation
Data
XadESXadESDoc
2. Metadata Generator
AdvancedSignatureGenerator TSA
CA
• a set of descriptive, administrative and structural metadata is generated
• Metadata, Document, XadESform a submission information package (SIP)
MetadataGenerator
XaDESDoc
SIP
3. Storage Module
AdvancedSignatureGenerator TSA
CA • Responsible of storing the SIP in a digital preservation system
MetadataGenerator
XadESDoc
SIPStorageModule(OAIS)
Business Case – Electronic Billing
Advantages:– Lower cost
– higher efficiency
– faster transactions
– process takes place in the same medium
Legal Requirements:
Invoices with deductible value added tax have the status of an official document:
– Integrity
– Authenticity
– Preservation (ex. Austria 7 Years)
S/Mime EnhancementServer
MailTresorServer
€€€Your Customers
TicketMail
€
Confirm & DeliverDocument
eBilling – System Overview
1. Generate your invoices -> SMTP
S/Mime EnhancementServer
MailTresorServer
€€€Your Customers
TicketMail
€
Confirm & DeliverDocument
eBilling – System Overview
2. S/Mime Enhancement Server signs your invoices
S/Mime EnhancementServer
MailTresorServer
€€€Your Customers
TicketMail
€
Confirm & DeliverDocument
eBilling – System Overview
3. MailTresorpreserves the signed document (email)
S/Mime EnhancementServer
MailTresorServer
€€€Your Customers
TicketMail
€
Confirm & DeliverDocument
eBilling – System Overview
4. MailTresor takes care that the documents are delivered
Finally
– Legislator obligates you to store your digitally signed documents over long periods of time
– You have to preserve:– the signature– the document itself
– Solution: Secure METS (XadES & METS)
Links:
– System MailTresor / eBilling – http://www.xicrypt.com
– XadES – http://www.etsi.org
– METS – http://www.loc.gov/mets
– OAIS – http://ssdoo.gsfc.nasa.gov/nost/isoas/overview.html
Georg Lindsberger
XiCrypt Technologies GmbH
8046 Graz, Hub 109
Austria/EUROPE
http://www.xicrypt.com
Contact
![Verzia 4.1 návrh… · [16] ETSI TS 101 903 XML Advanced Electronic Signatures (XAdES) [17] RFC 6960 X.509 PKI Online Certificate Status Protocol 7- 2013 [18] Vykonávacie rozhodnutie](https://static.fdocuments.net/doc/165x107/5f89f717310349341b76f85b/verzia-41-nvrh-16-etsi-ts-101-903-xml-advanced-electronic-signatures-xades.jpg)
