ETSI TS 101 733 V1.3.1 (2002-02) Technical Specification Electronic signature formats 2 ETSI TS 101 733 V1.3.1 (2002-02) Reference RTS/SEC-004009 Keywords IP, electronic signature, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice Individual copies of the present document can be downloaded from: http://www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://portal.etsi.org/tb/status/status.asp If you find errors in the present document, send your comment to: [email protected] Copyright Notification No part may be reproduced except as authorized by written permission. The copyright and the foregoing restriction extend to reproduction in all media. © European Telecommunications Standards Institute 2002. All rights reserved. ETSI 3 ETSI TS 101 733 V1.3.1 (2002-02) Contents Intellectual Property Rights................................................................................................................................7 Foreword.............................................................................................................................................................7 Introduction ........................................................................................................................................................7 1 Scope ........................................................................................................................................................8 2 References ................................................................................................................................................9 3 Definitions and abbreviations.................................................................................................................10 3.1 Definitions........................................................................................................................................................10 3.2 Abbreviations ...................................................................................................................................................11 4 Overview ................................................................................................................................................11 4.1 Major parties....................................................................................................................................................11 4.2 Electronic signatures and validation data .........................................................................................................12 4.3 Forms of validation data...................................................................................................................................13 4.4 Extended forms of validation data....................................................................................................................15 4.5 Archive validation data....................................................................................................................................16 4.6 Arbitration ........................................................................................................................................................17 4.7 Validation process ............................................................................................................................................17 4.8 Example validation sequence ...........................................................................................................................18 4.9 Additional optional features .............................................................................................................................21 5 General description.................................................................................................................................21 5.1 The signature policy .........................................................................................................................................21 5.2 Signed information...........................................................................................................................................22 5.3 Components of an electronic signature ............................................................................................................22 5.3.1 Reference to the signature policy................................................................................................................22 5.3.2 Commitment type indication.......................................................................................................................23 5.3.3 Certificate identifier from the signer...........................................................................................................23 5.3.4 Role attributes.............................................................................................................................................24 5.3.4.1 Claimed role..........................................................................................................................................24 5.3.4.2 Certified role.........................................................................................................................................24 5.3.5 Signer location............................................................................................................................................24 5.3.6 Signing time................................................................................................................................................24 5.4 Components of validation data.........................................................................................................................25 5.4.1 Revocation status information ....................................................................................................................25 5.4.2 CRl information..........................................................................................................................................25 5.4.3 OCSP information ......................................................................................................................................26 5.4.4 Certification path........................................................................................................................................26 5.4.5 Timestamping for long life of signature .....................................................................................................26 5.4.6 Timestamping for long life of signature before CA key compromises.......................................................27 5.4.6.1 Timestamping the ES with complete validation data ............................................................................27 5.4.6.2 Timestamping certificates and revocation information references........................................................28 5.4.7 Timestamping for long life of signature .....................................................................................................28 5.4.8 Reference to additional data........................................................................................................................29 5.4.9 Timestamping for mutual recognition.........................................................................................................29 5.4.10 TSA key compromise .................................................................................................................................29 5.5 Multiple signatures...........................................................................................................................................30 6 Signature policy and signature validation policy ...................................................................................30 6.1 Identification of signature policy......................................................................................................................31 6.2 General signature policy information...............................................................................................................32 6.3 Recognized commitment types.........................................................................................................................32 6.4 Rules for use of certification authorities...........................................................................................................33 6.4.1 Trust points .................................................................................................................................................33 6.4.2 Certification path........................................................................................................................................33 6.5 Rules for the