1、 ETSI TS 119 162-1 V1.0.1 (2015-08) Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC); Part 1: Building blocks and ASiC baseline containers floppy3TECHNICAL SPECIFICATION ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)2 Reference RTS/ESI-0019162-1-TS Keywords ASiC, e-co
2、mmerce, electronic signature, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The pres
3、ent document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETS
4、I. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that t
5、he document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http:/portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: https:/port
6、al.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modifi
7、ed without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2015. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the benefit of
8、 its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)3 Contents Intellectual Property Rights 5g3
9、Foreword . 5g3Modal verbs terminology 5g3Introduction 5g31 Scope 7g32 References 7g32.1 Normative references . 7g32.2 Informative references 8g33 Definitions and abbreviations . 9g33.1 Definitions 9g33.2 Abbreviations . 9g34 General Syntax . 9g34.1 Description of main features of Associated Signatur
10、e Containers . 9g34.1.1 Basic container structure . 9g34.1.2 Container types . 10g34.2 General requirements . 11g34.3 Associated Signature Container Simple (ASiC-S) . 11g34.3.1 Introduction. 11g34.3.2 General Requirements for ASiC-S 11g34.3.3 Detailed format for ASiC-S 11g34.3.3.1 Media type identif
11、ication 11g34.3.3.2 Contents of the container 12g34.3.4 Long term validity of ASiC-S . 13g34.4 Associated Signature Container Extended (ASiC-E) . 15g34.4.1 Introduction. 15g34.4.2 General Requirements of ASiC-E . 16g34.4.3 Detailed format for ASiC-E with XAdES . 16g34.4.3.1 Media type identification
12、 16g34.4.3.2 Contents of Container . 16g34.4.3.3 ASiC-E with XAdES example (informative) 17g34.4.3.4 XAdES use in ASiC-E with XAdES . 18g34.4.4 Detailed format for ASiC-E with CAdES - time assertions 18g34.4.4.1 Media type identification 18g34.4.4.2 Contents of Container . 19g34.4.5 Long term validi
13、ty of ASiC-E. 21g35 ASiC Baseline containers . 21g35.1 ASiC Levels . 21g35.2 General requirements . 22g35.2.1 Algorithm requirements 22g35.2.2 Notation for requirements . 22g35.3 Requirements for ASiC baseline containers . 23g35.3.1 ASiC conformance 23g35.3.2 Requirements for ASiC-S . 24g35.3.2.1 Ge
14、neral requirements for ASiC-S . 24g35.3.2.2 Requirements for ASiC-S with CAdES signature . 24g35.3.2.3 Requirements for ASiC-S with XAdES signature . 24g35.3.3 Requirements for ASiC-E with XAdES signature 25g3Annex A (normative): ASiC metadata specification, data naming and referencing 26g3A.1 The m
15、imetype file 26g3A.2 Media type registrations . 26g3A.3 ASiC XML Schema . 27g3ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)4 A.4 ASiCManifest element . 27g3A.4.1 Semantics . 27g3A.4.2 Syntax . 28g3A.5 XAdESSignatures element . 29g3A.5.1 Semantics . 29g3A.5.2 Syntax . 29g3A.6 Naming and referencing data wi
16、thin ASiC 29g3A.7 ASiCArchiveManifest file content and rules . 30g3Annex B (informative): ASiC Examples . 32g3B.1 Examples of ASiC-S 32g3B.1.1 PDF document Associated with CAdES Signature 32g3B.1.2 Simple document time stamp . 32g3B.1.3 Signature of a ZIP file with an ASiC-S container 32g3B.2 Exampl
17、e of ASiC-E with XAdES 32g3B.3 Example of ASiC-E with CAdES and time-stamp token . 33g3History 35g3ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)5 Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these
18、 essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest u
19、pdates are available on the ETSI Web server (http:/ipr.etsi.org). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web ser
20、ver) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (TS) has been produced by ETSI Technical Committee Electronic Signatures and Infrastructures (ESI). The present document is part 1 of a multi-part deliverable specifying Associated Sign
21、ature Containers (ASiC), as identified below: Part 1: “Building blocks and ASiC baseline containers“; Part 2: “Additional ASiC containers“. Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to b
22、e interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. Introduction When signing data, the resultant signature needs to be associated with the
23、 data to which it applies. This can be achieved either by creating a data set which combines the signature and the data that was signed (e.g. by enveloping the data with the signature or including a signature element in the data set) or placing the (detached) signature in a separate resource and hav
24、e some external means for associating the signature with the data to which it applies. While there are some advantages to the use of detached signatures, most significantly their non-modification of the original data objects, there remains a risk that the signature becomes separated from the data to
25、 which it applies and so losing the association. Therefore, many application systems have developed their own technique for combining a detached signature with the signed object in some form of container so that they can be more easily distributed and guarantee that the correct signature and any rel
26、evant metadata is used when validating. The same requirements apply to associate time assertions (i.e. time-stamp tokens or evidence records) to their associated data. The present document defines a standardized use of container types to establish a common way for associating files containing data o
27、bjects with files containing digital signatures and/or time-assertions. Using a common container form and associated information will facilitate data interchange and interoperability among various signing and validation services. Whilst ZIP 5 provides a basic container structure that can associate f
28、iles containing data objects (file objects) and the signature(s) that apply to them, there is a recognized need for additional structure and metadata about the association, for example to link a particular signature with the file object to which it is applied. Other formats have already been specifi
29、ed for the use of ZIP based structures to bind together a number of file objects with related metadata. This includes OCF 4 which was originally designed for use by eBooks but has been adopted as the basis for other containers, for example ODF 6. The present document builds on this work specifically
30、 addressing the requirements of associating a digital signature with any type of data, independent of the needs of any particular document or data type. ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)6 The present document is intended to cover containers including digital signatures and time-assertions supp
31、orted by PKI and public key certificates, and aims to meet the general requirements of the international community to provide trust and confidence in electronic transactions, including, amongst other, applicable requirements from Regulation (EU) No 910/2014 i.3. The present document is part of a rat
32、ionalized framework of standards (see ETSI TR 119 000 i.9). ETSI TR 119 100 i.1 provides guidance on how to use the present document within the aforementioned framework. ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)7 1 Scope The present document specifies Associated Signature Containers (ASiC) which bind
33、together into one single digital container based on ZIP 5 either detached digital signatures or time-assertions, with a number of file objects (e.g. documents, XML structured data, spreadsheet, multimedia content) to which they apply. The present document specifies general purpose ASiC containers bu
34、ilding blocks and a limited set of baseline containers. ASiC supports the following signature and time assertion formats: CAdES digital signatures (ETSI TS 119 122-1 1 and ETSI TS 119 122-2 11); XAdES digital signatures (ETSI TS 119 132-1 2 and ETSI TS 119 132-2 12); IETF RFC 3161 3 and updated by I
35、ETF RFC 5816 13 time-stamp tokens; and IETF RFC 4998 8 or IETF RFC 6283 9 evidence records. NOTE: No restriction is placed on time assertions eventually used within CAdES/XAdES. The building blocks defined in the present document support additional features not supported by the aforementioned format
36、s, such as time-stamping and CAdES signing of multiple content and XAdES parallel signatures, that can be used in other contexts. The present document defines baseline containers which provide the basic features necessary for a wide range of business and governmental use cases for electronic procedu
37、res and communications to be applicable to a wide range of communities when there is a clear need for interoperability. The present document defines four levels of ASiC baseline containres addressing incremental requirements to maintain the validity of the containers over the long term, suitably pro
38、filed for reducing the optionality as much as possible, in a way that a certain level always addresses all the requirements addressed at levels that are below it. ASiC containers specified in the two parts of this multipart deliverable aim at supporting containers in different regulatory frameworks.
39、 The present document does not address the identification of the validation policy to be used for verifying a container that contains time-stamp assertions. 2 References 2.1 Normative references References are either specific (identified by date of publication and/or edition number or version number
40、) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. Referenced documents which are not found to be publicly available in the expected location might be found at http
41、:/docbox.etsi.org/Reference. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are necessary for the application of the present document. 1 ETSI TS 119 122-1: “Electronic Signat
42、ures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures“. 2 ETSI TS 119 132-1: “Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 1: Building blocks and XAdES baseline signatures“. 3 IETF RFC 3161: “Internet X.509
43、Public Key Infrastructure Time-Stamp Protocol (TSP)“. ETSI ETSI TS 119 162-1 V1.0.1 (2015-08)8 4 ISO/IEC TS 30135 (all parts): “Information technology - Digital publishing - EPUB3“. NOTE: Available at http:/idpf.org/epub/30/spec/epub30-ocf.html. 5 PKWARE “.ZIP Application Note“. NOTE 1: If available
44、 in time a reference to ISO/IEC 21320-1 (now under development) will possibly be added. NOTE 2: Available at http:/ 6 OASIS: “Open Document Format for Office Applications (OpenDocument) Version 1.2; Part 3: Packages“ 29 September 2011. 7 IETF RFC 3986: “Uniform Resource Identifier (URI): Generic Syn
45、tax“. 8 IETF RFC 4998: “Evidence Record Syntax (ERS)“. 9 IETF RFC 6283: “Extensible Markup Language Evidence Record Syntax (XMLERS)“. 10 IETF RFC 1951: “DEFLATE Compressed Data Format Specification version 1.3“. 11 ETSI TS 119 122-2: “Electronic Signatures and Infrastructures (ESI); CAdES digital si
46、gnatures; Part 2: Extended CAdES signatures“. 12 ETSI TS 119 132-2: “Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 2: Extended XAdES signatures“. 13 IETF RFC 5816: “ESSCertIDv2 Update for RFC 3161“. 14 W3C recommendation: “XML Signature Syntax and Processing“. 2.2 I
47、nformative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendme
48、nts) applies. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particula
49、r subject area. i.1 ETSI TR 119 100: “Electronic Signatures and Infrastructures (ESI); Business Driven Guidance for Signature Creation and Validation“. i.2 ISO 15489-1: “Information and documentation - Records management - Part 1: General“. i.3 Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 199
