ImageVerifierCode 换一换
格式:PDF , 页数:57 ,大小:1.02MB ,
资源ID:734998      下载积分:10000 积分
快捷下载
登录下载
邮箱/手机:
温馨提示:
如需开发票,请勿充值!快捷下载时,用户名和密码都是您填写的邮箱或者手机号,方便查询和重复下载(系统自动生成)。
如填写123,账号就是123,密码也是123。
特别说明:
请自助下载,系统不会自动发送文件的哦; 如果您已付费,想二次下载,请登录后访问:我的下载记录
支付方式: 支付宝扫码支付 微信扫码支付   
注意:如需开发票,请勿充值!
验证码:   换一换

加入VIP,免费下载
 

温馨提示:由于个人手机设置不同,如果发现不能下载,请复制以下地址【http://www.mydoc123.com/d-734998.html】到电脑端继续下载(重复下载不扣费)。

已注册用户请登录:
账号:
密码:
验证码:   换一换
  忘记密码?
三方登录: 微信登录  

下载须知

1: 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007和PDF阅读器。
2: 试题试卷类文档,如果标题没有明确说明有答案则都视为没有答案,请知晓。
3: 文件的所有权益归上传用户所有。
4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
5. 本站仅提供交流平台,并不能对任何下载内容负责。
6. 下载文件中如有侵权或不适当内容,请与我们联系,我们立即纠正。
7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。

版权提示 | 免责声明

本文(ETSI SR 019 510-2017 Electronic Signatures and Infrastructures (ESI) Scoping study and framework for standardization of long-term data preservation services including preservation .pdf)为本站会员(fuellot230)主动上传,麦多课文库仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对上载内容本身不做任何修改或编辑。 若此文所含内容侵犯了您的版权或隐私,请立即通知麦多课文库(发送邮件至master@mydoc123.com或直接QQ联系客服),我们立即给予删除!

ETSI SR 019 510-2017 Electronic Signatures and Infrastructures (ESI) Scoping study and framework for standardization of long-term data preservation services including preservation .pdf

1、 ETSI SR 019 510 V1.1.1 (2017-05) Electronic Signatures and Infrastructures (ESI); Scoping study and framework for standardization of long-term data preservation services, including preservation of/with digital signatures SPECIAL REPORT ETSI ETSI SR 019 510 V1.1.1 (2017-05) 2 Reference DSR/ESI-00195

2、10 Keywords electronic preservation, electronic signature, security, trusted services ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de

3、Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified

4、 without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users

5、 of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors in the present document, please send y

6、our comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of

7、 ETSI. The content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2017. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI l

8、ogo are Trade Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. oneM2M logo is protected for the benefit of its Members GSM and the GSM logo are Trade Marks registered and

9、 owned by the GSM Association. ETSI ETSI SR 019 510 V1.1.1 (2017-05) 3 Contents Intellectual Property Rights 6g3Foreword . 6g3Modal verbs terminology 6g3Introduction 6g31 Scope 8g32 References 8g32.1 Normative references . 8g32.2 Informative references 8g33 Definitions and abbreviations . 13g33.1 De

10、finitions 13g33.2 Abbreviations . 15g34 Basic models for long-term data preservation services 15g34.1 General terms . 15g34.2 Preservation with storage . 17g34.3 Preservation without storage 18g34.4 Validation . 18g34.5 Elements to be considered in preservation, monitoring 19g34.5.1 Monitoring the s

11、trength of hash functions and cryptographic algorithms 19g34.5.2 Monitoring the revocation status of certificates 20g34.6 Consideration of different policies . 20g34.6.1 Signature creation policy 20g34.6.2 Signature augmentation policy . 21g34.6.3 Signature validation policy . 21g34.7 Basic preserva

12、tion techniques 21g34.7.1 Time-stamps . 21g34.7.2 AdES digital signatures 21g34.7.3 ERS . 22g34.7.4 Other techniques . 22g34.7.5 Advantages and disadvantages of the different methods 22g34.8 (Long-term) Preservation Policy (LTPP) . 23g35 Examples of different preservation schemes 24g35.1 Long-term p

13、reservation of POC via Evidence Records without storage 24g35.2 Long-term preservation of POC via Evidence Records with storage . 24g35.3 Long-term preservation of AdES digital signatures using augmentation of the signature without storage 25g35.4 Long-term preservation of AdES digital signatures us

14、ing augmentation of the signature with storage . 25g35.4.1 General approach 25g35.4.2 Special case using time-stamps with a long lifespan 26g35.5 Long-term AdES preservation with storage based on a validation report 26g35.6 Qualified electronic signature/seal relying on long-term availability of val

15、idation data 26g36 Proposal of framework of standards for data preservation . 27g36.1 General . 27g36.2 Policy Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (

16、https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, e

17、ssential to the present document. The standard (or standards) extracts (ISO 14721:2012: “Space data and information transfer systems - Open archival information system (OAIS) - Reference model“, ISO 14533-1:2014: “Processes, data elements and documents in commerce, industry and administration - Long

18、 term signature profiles - Part 1: Long term signature profiles for CMS Advanced Electronic Signatures (CAdES)“, ISO 14533-2:2012: “Processes, data elements and documents in commerce, industry and administration - Long term signature profiles - Part 2: Long term signature profiles for XML Advanced E

19、lectronic Signatures (XAdES)“) are replicated with AFNORs consent. Only the complete and original text as released by AFNOR Editions - accessible on the website www.boutique.afnor.org - has normative value. Foreword This Special Report (SR) has been produced by ETSI Technical Committee Electronic Si

20、gnatures and Infrastructures (ESI). Modal verbs terminology In the present document “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ an

21、d “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. Introduction On the one hand, digital signatures as well as time-stamps based on cryptographic mechanisms are increasingly used in our everyday life. On the other hand it is well known, that the strength and suita

22、bility of cryptographic mechanisms is a function of time and one needs to apply suitable preservation mechanisms, which are able to maintain the validity status of a signed object over long periods of time, which may involve the application of different storage technologies and cryptographic algorit

23、hms. The need for long-term preservation is acknowledged amongst others in the Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market i.1, as can be seen in recital (

24、61): “This Regulation should ensure the long-term preservation of information, in order to ensure the legal validity of electronic signatures and electronic seals over extended periods of time and guarantee that they can be validated irrespective of future technological changes.“ Furthermore Article

25、 34 of the Regulation (EU) No 910/2014 i.1 states that “a qualified preservation service for qualified electronic signatures may only be provided by a qualified trust service provider that uses procedures and technologies capable of extending the trustworthiness of the qualified electronic signature

26、 beyond the technological validity period“ and that “the Commission may, by means of implementing acts, establish reference numbers of standards for the qualified preservation service for qualified electronic signatures.“ ETSI ETSI SR 019 510 V1.1.1 (2017-05) 7 The present document provides an overv

27、iew of preservation mechanisms which can be used to preserve the validity status of digital signatures or to preserve objects using digital signature techniques. It may be used to support all kinds of preservation services including for example qualified preservation service for qualified electronic

28、 signatures according to Article 34 of the Regulation (EU) No 910/2014 i.1, and mutatis mutandis for qualified preservation service for qualified electronic seals according to Article 40 of this regulation. ETSI ETSI SR 019 510 V1.1.1 (2017-05) 8 1 Scope The present document provides a scoping study

29、 for long-term data preservation (including preservation of/with digital signatures). The present document aims at supporting preservation services in different regulatory frameworks. NOTE 1: Specifically, but not exclusively, the preservation service addressed in the present document aims at suppor

30、ting qualified preservation service for qualified electronic signatures or seals as per Regulation (EU) No 910/2014 i.1. NOTE 2: Specifically, but not exclusively, digital signatures in the present document cover electronic signatures, advanced electronic signatures, qualified electronic signatures,

31、 electronic seals, advanced electronic seals, and qualified electronic seals as per Regulation (EU) No 910/2014 i.1. The present document covers two main cases: 1) The preservation of the validity status of the digital signatures (using time-stamps, Evidence Records, etc.) and of the associated sign

32、ed data NOTE 3: A qualified preservation service for qualified electronic signatures or seals as per Regulation (EU) No 910/2014 i.1 for which the status of the technical validity needs to be preserved, is covered in this case. This special report cannot say anything about the legal validity of a si

33、gnature. NOTE 4: The validity of a signature means the status of the signature that will not change over time, e.g. if a signature was valid (TOTAL_PASSED according to ETSI EN 319 102-1 i.9) or invalid (TOTAL_FAILED and in certain cases for INDETERMINATE according to ETSI EN 319 102-1 i.9). The long

34、-term preservation of the validity status includes the preservation of the bits of: square4 the documents being signed; and/or square4 other digital objects like certificates, OCSPs, Time-Stamp Tokens, etc. 2) Preservation of the integrity of bits of digital objects, whether they are signed or not,

35、using digital signature techniques (digital signatures, time-stamp tokens, Evidence Records, etc.) NOTE 5: In this case, if the main object to be preserved is a signature, it is treated in the same way as any other file. NOTE 6: The preservation of the integrity of bits of digital object not using d

36、igital signature techniques is not in the scope of the present document. In addition, the present document provides an inventory of existing standards and selected legal frameworks on the topic of preservation services. The present document provides as well a proposal for a framework of standards. 2

37、 References 2.1 Normative references Normative references are not applicable in the present document. 2.2 Informative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version

38、 applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long-term validity. ETSI ETSI SR 019 510 V1.1.1 (2017-05) 9 T

39、he following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area. i.1 Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust serv

40、ices for electronic transactions in the internal market and repealing Directive 1999/93/EC. OJ L 257, 28.8.2014, p. 73-114. i.2 ETSI TS 101 533-1: “Electronic Signatures and Infrastructures (ESI); Data Preservation Systems Security; Part 1: Requirements for Implementation and Management“. i.3 ETSI T

41、R 101 533-2: “Electronic Signatures and Infrastructures (ESI); Data Preservation Systems Security; Part 2: Guidelines for Assessors“. i.4 ETSI TS 101 733 (V2.2.1): “Electronic Signatures and Infrastructures (ESI); CMS Advanced Electronic Signatures (CAdES)“. i.5 ETSI TS 101 903: “Electronic Signatur

42、es and Infrastructures (ESI); XML Advanced Electronic Signatures (XAdES)“. i.6 ETSI TS 102 573: “Electronic Signatures and Infrastructures (ESI); Policy requirements for trust service providers signing and/or storing data objects“. i.7 ETSI TR 119 001: “Electronic Signatures and Infrastructures (ESI

43、); The framework for standardization of signatures; Definitions and abbreviations“. i.8 ETSI TS 119 312: “Electronic Signatures and Infrastructures (ESI); Cryptographic Suites“. i.9 ETSI EN 319 102-1: “Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Di

44、gital Signatures; Part 1: Creation and Validation“. i.10 ETSI EN 319 122-1: “Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures“. i.11 ETSI EN 319 122-2: “Electronic Signatures and Infrastructures (ESI); CAdES digital sign

45、atures; Part 2: Extended CAdES signatures“. i.12 ETSI TS 119 122-3: “Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 3: Incorporation of Evidence Record Syntax (ERS) mechanisms in CAdES“. i.13 ETSI EN 319 132-1: “Electronic Signatures and Infrastructures (ESI); XAdES

46、digital signatures; Part 1: Building blocks and XAdES baseline signatures“. i.14 ETSI EN 319 132-2: “Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 2: Extended XAdES signatures“. i.15 ETSI EN 319 142-1: “Electronic Signatures and Infrastructures (ESI); PAdES digital

47、signatures; Part 1: Building blocks and PAdES baseline signatures“. i.16 ETSI EN 319 142-2: “Electronic Signatures and Infrastructures (ESI); PAdES digital signatures; Part 2: Additional PAdES signatures profiles“. i.17 ETSI EN 319 162-1: “Electronic Signatures and Infrastructures (ESI); Associated

48、Signature Containers (ASiC); Part 1: Building blocks and ASiC Baseline containers“. i.18 ETSI EN 319 162-2: “Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC); Part 2: Additional ASiC containers“. i.19 ETSI TS 119 172-1: “Electronic Signatures and Infrastructure

49、s (ESI); Signature policies; Part 1: Building blocks and table of contents for human readable signature policy documents“. i.20 ETSI TS 119 172-4: “Electronic Signatures and Infrastructures (ESI); Signature policies; Part 4: Signature validation policy for European qualified electronic signatures/seals using trusted lists“. i.21 ETSI EN 319 401: “Electronic Signatures and Infrastructures (ESI); General Policy Requirements for Trust Service Providers“. ETSI ETSI SR 019 510 V1.1.1 (2017-05) 10 i.22 ETSI EN 319 40

copyright@ 2008-2019 麦多课文库(www.mydoc123.com)网站版权所有
备案/许可证编号:苏ICP备17064731号-1