The Wayback Machine - https://web.archive.org/web/20150403023817/https://portal.etsi.org/stfs/STF_HomePages/STF458/STF458.asp


Specialist Tasks Forces Procedures
Open Call for Experts


Active STFs (summary information)
STF full list
STF Term of Reference


STF statistics
STF docbox Restricted area (username/password required)



Specialist Task Force 458:
Signature Creation and Validation and
Trusted Service Providers (TSP) supporting eSignatures

 

Who we are:

Team Leader: Nick Pope,Thales, nick.pope@thales-esecurity.com  
Team Members:      Alexander Funk,  bremen online, af@bos-bremen.de  
  Andrea Caccia, Knowl. works / UNINFO, andrea.caccia@studiocaccia.com  
  Andrea R�ck, Cryptolog, andrea.rock@CRYPTOLOG.COM  
  Arne Tauber, Stiftung  / FTW, Arne.Tauber@iaik.tugraz.at  
  Arno Fiedler, Nimbus arno.fiedler@nimbus-berlin.com  
  Frank Leroy, Certinomis / CEN, franck.leroy@certinomis.fr  
  Ijaz Khan, GEMALTO, ijaz.khan@gemalto.com  
  Inigo Barreira, I3S / AENOR, inigo_barreira@hotmail.com  
  Jon Olnes, UniBridge / Norway auth jon.olnes@unibridge.no  
  Juan Carlos Cruellas, DAC-UPC, cruellas@ac.upc.edu  
  Leonard Rosenthol, Adobe (voluntary) lrosenth@adobe.com  
  Luigi Rizzo, InfoCert, luigi.rizzo@infocert.it  
  Moez Ben Mbarka, Cryptolog (voluntary), moez.benmbarka@cryptolog.com  
  Olivier Delos SEALED sprl, olivier.delos@sealed.be  
  Paloma LLaneza, LLaneza A+A / AENOR, pll@palomallaneza.com  
  Peter Lipp Stiftung / FTW, peter.lipp@iaik.tugraz.at  
  Stefan Santesson, 3xA Security AB, stefan@aaa-sec.com  
  Sylvie Lacroix,  SEALED sprl, sylvie.lacroix@sealed.be  

What we do:

The STF-458 is one of the three STFs (the other two are STF-457 and STF-459) under Phase 2 of EU Mandate/460 on standards for electronic signatures in support of EU Directive 1999/93 and potential  EU regulations which may replace the Directive .

This STF covers two areas for standardisation in support of electronic signatures:

Area 1: Signature creation and validation: This includes standards for procedures for signature creation and validation, advanced electronic signature formats (CAdES, XAdES, PAdES and ASiC), advanced electronic signatures in mobile environments, and signature policies.

Area 2: Trust Service Providers (TSP) supporting electronic signatures: This includes standards for policy requirements for TSP issuing certificates (qualified, general public key, TSL/SSL) TSP issuing time-stamps, certificate and time-stamp formats, and TSP conformity assessment.

For more details, see our Terms of Reference

Why we do it:

This activity will bring existing ETSI technical specifications up to date and issue them as European Norms to aid interoperability across Europe within in Global context and provide a basis for systems meeting the requirements of EU legislation.

How we do it:

The standards are to be developed out by members of the STF organised around the two areas.  The STF will consult with bodies representing stakeholders (e.g. FESA � Forum for European Supervisory Authorities for Electronic Signatures) as well as European projects and associations and international standards bodies.  Drafts of deliverable will be made available to all stakeholders for public review before submitting through the formal standardisation process.

Deliverables:

Below follows the list of deliverables to be produced by the STF-459, as per its Terms of Reference.

The deliverables of the STF in Area 1 are :

Deliverable

Title

EN 319 102

 

Title: Procedures for Signature Creation and Validation.

EN 319 122

 

Title: CMS Advanced Electronic Signature Formats (CAdES)

EN 319 132

 

Title: XML Advanced Electronic Signature Formats (XAdES)

EN 319 142

 

Title: PDF Advanced Electronic Signature Formats (PAdES)

 

EN 319 15

Title: Advanced Electronic Signatures in Mobile environments

 

EN 319 162

Title: Associated Signature Containers (ASiC)

EN 319 172

Title: Signature Policies

The deliverables of the STF in Area 2 are:

Deliverable

Title

EN 319 411-2

Annex

Policy and Security Requirements for Trust Service Providers Issuing Certificates; Part 2: Policy requirements for certification authorities issuing Qualified Certificates

An annex will be added to EN 319 411-2 to provide a check list for conformity assessment

EN 319 411-3

Annex

Title: Policy and Security Requirements for Trust Service Providers Issuing Certificates; Part 3: Policy requirements for certification authorities issuing public key certificates.

An annex will be added to EN 319 411-3 to provide a check list for conformity assessment

EN 319 411-4

Title: Policy and Security Requirements for Trust Service Providers Issuing Certificates; Part 4: Policy requirements for certification authorities issuing TLS/SSL Certificates

EN 319 411-5

Title: Policy and Security Requirements for Trust Service Providers  Issuing Certificates; Part 5: Policy requirements for certification authorities issuing attribute Certificates

EN 319 421

 

Title:  Policy and Security Requirements for Trust Service Providers  providing Time-Stamping Services; Part 2: Policy Requirements for TSPs providing Time-Stamping Services

EN 319 412
Part 1-5

Title: Profiles for Trust Service Providers issuing Certificates

Part 1: Overview

Part 2:  profile for certificates issued to natural persons

Part 3: Certificate profile for certificates issued to legal persons

Part 4: Profiles for SSL/TSL certificates  issued to organisation (Baseline & EV)

Part 5: Profile extension for qualified certificates

EN 319 422

Title: Profile for Trust Service Providers providing Time-Stamping Services

EN 319 403

General requirements and guidance for Conformity Assessment of Trust Service Providers Supporting Electronic Signatures

EN 319 413

Title: Conformity Assessment for Trust Service Providers  Issuing Certificates

En 319 423

Title: Conformity Assessment for Trust Service Providers providing Time-Stamping Services

 

Time plan:

The STF will produce drafts for public consultation over the period September to November 2013 with progression to European Norms over the period 2014 to 2015 .

How to contact us:

Lead: Nick Pope   nick.pope@thales-esecurity.com

 

This information is based upon STF working assumptions.
The views expressed do not necessarily represent the position of ETSI in this context.

Last updated: 2015-01-06 18:17:03