15-Day Committee Specification Draft Public Review Request for DSS Extension for Local Signature Computation Version 1.0

Submitted on Monday, October 6, 2014 - 15:49
Submitted by user:
Submitted values are:

Submitter's Name: Stefan Drees
TC Name: OASIS Digital Signature Services eXtended (DSS-X) TC
TC Email Address: dss-x@lists.oasis-open.org
Work Product Title: DSS Extension for Local Signature Computation Version 1.0
Committee Specification Draft ##: 02
CSD URI: TBD
Additional Resources:
https://lists.oasis-open.org/archives/dss-x-comment/201409/msg00000.html
Approval Link:
https://www.oasis-open.org/committees/download.php/53474/csprd02.zip
Previous Public Review Announcement:
https://lists.oasis-open.org/archives/tc-announce/201402/msg00004.html
Abstract:
The core OASIS Digital Signature Service webservice [DSSCore] supports the
creation of signatures on behalf of applications and / or users by utilizing
server-based signature keys.

This Local Signature Computation profile extends the core functionality such
that end users can bring (use) their own (secure) signature-creation device.
Examples of such devices are smartcards or usb-tokens but also smartphones,
mobile phones, tablets, pc's or laptops with privately held signature keys.

Three solutions are presented to support the varying capabilities of
applications and different use cases.

The first solution is useful for web-applications where web browsers can
access
the (secure) signature-creation device that is available at the desktop (e.g.
a
smartcard connected via USB).

The second solution is useful for applications that can access the (secure)
signature- creation device themselve, for instance desktop applications or
smartphone apps.

The third solution is useful for any application where the (secure)
signature-creation device can only be accessed via a separate channel, for
instance a mobile device, through a third-party.

TC Description:
The DSS-X TC is developing new profiles of the existing OASIS Digital
Signature
Services core protocol "Digital Signature Service Core Protocols, Elements,
and
Bindings Version 1.0" and is maintaining this specification and its existing
profiles. If at a later date it becomes clear that a new version of DSS is
necessary then this may be produced by the TC.

DSS-X is also working on promotion of the standard and the creation of
material
helping dissemination. In general terms, the TC has the goal to facilitate
the
processing of digital signatures and time stamps in a client server
environment.

The DSS-X TC is a member of the IDtrust Member Section.

Notification List:
Notes:

The results of this submission may be viewed at:
http://tools.oasis-open.org/issues/browse/TCADMIN