Signature Creation and Validation Service
Motivation
Within eGovernment processes creating and validating digital signatures play an important role. Therefore eGov-Bus is providing adequate support for the creation and validation of signatures via a signature creation and validation web service. This service addresses following security requirement:
- Users, APG (advanced process generator), and Government applications want data to be signed, and may want data to be signed in a legally relevant way.
Description
The signature creation and validation service (SCVS) is based on modules of an Austrian eGovernment open source program and extends these basic modules by XAdES capabilities and CMS signature creation. These extensions are based on well-established standard like CMS ([RFC 3369]) and XMLDSIG signatures [XMLDSIG]. Furthermore XAdES signatures ([XADES]) and XAdES profile for eGovernment according to [XADESProfiles] are used.The following table lists the features of the signature creation service:
| Signature | Checks |
|---|---|
| CMS | Creates an CMS signature |
| XMLDSIG | Creates an XMLDSIG signature |
| XAdES-BES | Creates an XAdES-BES signature |
| XAdES-T | Creates an XAdES-T signature |
In the following table features of the signature validation service are listed. The validation process includes the whole signature validation and the generation of XAdES signatures according to [XADES]:
| Signature | Checks | Generator |
|---|---|---|
| CMS | Validation of a CMS signature | - |
| XMLDSIG | Validation of an XMLDSIG signature | - |
| XAdES-BES | Validation of an XAdES-BES | XAdES-T |
| XAdES-T | Validation of an XAdES-T | XAdES-T |
| XAdES-C | Validation of an XAdES-C | XAdES-X |
| XAdES-X | Validation of an XAdES-X | XAdES-X |
Downloads
Please note the open source license terms.
| Title | Version | Date | |
|---|---|---|---|
| Specification (Specification of the signature creation and validation service) |
1.0.0 | 2007-05-07 | |
| Documentation (Documentation including installation, configuration, usage, XSD schemas and WSDL file) |
1.1.0 | 2007-10-11 | |
| SCVS XSD Schemas and WSDL file (XSD Schemas and WSDL file for separate download) |
1.0.0 | 2007-05-07 | |
| SCVS Release | 1.1.0 | 2007-10-11 | |
| Source Code | 1.0.0 | 2007-09-03 | |
History
| Remark | Version | Date |
|---|---|---|
| SCVS Release V.1.0.0 | 1.0.0 |
2007-09-03 |
| Documentation V.1.0.0 (Documentation including installation, configuration, usage, XSD schemas and WSDL file) |
1.0.0 |
2007-09-03 |
SCVS Release V.0.9.0
Features of the Web service:
|
0.9.0 |
2007-07-16 |
References
- [RFC 3369] RFC 3369: Cryptographic Message Syntax (CMS), http://www.ietf.org/rfc/rfc3369.txt
- [XMLDSIG] XML-Signature Syntax and Processing. W3C Recommendation, http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
- [XADES] ETSI TS 101903: XML Advanced Electronic Signatures (XAdES), v1.3.2., http://webapp.etsi.org/action/PU/20060307/ts_101903v010302p.pdf
- [XADESProfiles] ETSI TS 102904: Electronic Signatures and Infrastructures; Profiles of XML Advanced Electronic Signatures based on TS 101 903 (XAdES), v1.1.1.


