TS 101 903 - etsi.org

1 ETSI TS 101 903 (2009-06)Technical Specification XML Advanced Electronic Signatures (XAdES) ETSI ETSI TS 101 903 (2009-06)2 Reference RTS/ESI-000060 Keywords e-commerce, electronic signature, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistr e la Sous-Pr fecture de Grasse (06) N 7803/88 Important notice Individual copies of the present document can be downloaded from: The present document may be made available in more than one electronic version or in print.

2 In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at If you find errors in the present document, please send your comment to one of the following services: Copyright Notification No part may be reproduced except as authorized by written permission.

3 The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2009. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTM, TIPHONTM, the TIPHON logo and the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members. 3 GPPTM is a Trade Mark of ETSI registered for the benefit of its Members and of the 3 GPP Organizational Partners. LTE is a Trade Mark of ETSI currently being registered for the benefit of its Members and of the 3 GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association.

4 ETSI ETSI TS 101 903 (2009-06)3 Contents Intellectual Property Rights .. 6 Foreword .. 6 Introduction .. 6 Editorial conventions .. 7 1 Scope .. 8 2 References .. 9 Normative references .. 9 Informative references .. 10 3 Definitions and abbreviations .. 10 Definitions .. 10 Abbreviations .. 11 4 Overview .. 11 Major Parties .. 11 Signatures policies.

5 12 Signature properties and signature forms .. 12 Electronic signature forms .. 14 Basic electronic signature (XAdES-BES) .. 14 Explicit policy electronic signatures (XAdES-EPES) .. 17 Electronic signature formats with validation data .. 18 Electronic signature with time (XAdES-T) .. 18 Electronic signature with complete validation data references (XAdES-C) .. 19 Validation process .. 21 Arbitration .. 21 5 XML namespaces for the present document .. 22 Namespace for elements specified in .. 22 Namespace for new elements defined in.

6 23 6 Syntax overview .. 23 Technical criteria .. 23 The QualifyingProperties element .. 24 The SignedProperties element .. 24 The UnsignedProperties 25 The SignedSignatureProperties element .. 25 The SignedDataObjectProperties element .. 26 The UnsignedSignatureProperties element .. 26 The UnsignedDataObjectProperties element .. 27 Incorporating qualifying properties into an XML signature.

7 27 Signing properties .. 28 The QualifyingPropertiesReference element .. 28 7 Qualifying properties syntax .. 28 Auxiliary syntax .. 29 The AnyType data type .. 29 The ObjectIdentifierType data type .. 29 The EncapsulatedPKIDataType data type .. 30 Types for time-stamp tokens management .. 31 Time-stamp properties in XAdES .. 31 The GenericTimeStampType data type .. 31 The XAdESTimeStampType data type.

8 33 Include mechanism .. 33 The OtherTimeStampType data type .. 34 Properties for XAdES-BES and XAdES-EPES forms .. 35 ETSI ETSI TS 101 903 (2009-06)4 The SigningTime element .. 35 The SigningCertificate 35 The SignaturePolicyIdentifier element .. 36 Signature Policy qualifiers .. 38 Countersignatures .. 38 Countersignature identifier in Type attribute of ds:Reference .. 38 Enveloped countersignatures: the CounterSignature element.

9 39 The DataObjectFormat element .. 40 The CommitmentTypeIndication element .. 41 The SignatureProductionPlace element .. 42 The SignerRole element .. 43 The AllDataObjectsTimeStamp element .. 44 The IndividualDataObjectsTimeStamp element .. 44 The SignatureTimeStamp element .. 45 Properties for references to validation data .. 45 The CompleteCertificateRefs element.

10 46 The CompleteRevocationRefs element .. 46 The AttributeCertificateRefs element .. 48 The AttributeRevocationRefs element .. 49 Time-stamps on references to validation data .. 49 The SigAndRefsTimeStamp element .. 49 Not distributed case .. 50 Distributed case .. 50 The RefsOnlyTimeStamp element .. 51 Not distributed case .. 51 Distributed case.