European watch-dog on Information and Communications Technologies (ICT) application standards, the European Telecommunications Standards Institute (ETSI), has published a multi-part standard to facilitate secure paperless business transactions throughout Europe, in compliance with European legislation.
The standard defines a series of profiles for Advanced Electronic Signatures (PAdES) for Portable Document Format (PDF) documents – that meet the requirements of the European Directive on a Community framework for electronic signatures (Directive 1999/93/EC).
ETSI, reputed for supporting European Commission Action Plan seeks to build on existing experience in this area and further improve the efficiency of cross-border use of electronic signatures.
A press statement from ETSI indicated that open technical standards provide an ideal means for ensuring the required interoperability such that, for example, a document created and signed in one Member State could be validated in another.
The standard also recognizes that digitally-signed documents may be used or archived for many years – even many decades. At any time in the future, in spite of technological and other advances, it must be possible to validate the document to confirm that the signature was valid at the time it was signed – a concept known as Long-Term Validation (LTV).
The new standard was developed by ETSI’s Electronic Signatures and Infrastructure (ESI) Technical Committee in collaboration with Product Document File (PDF) experts.
PDF is defined in a standard (ISO 32000-1) published by the International Organization for Standardization (ISO), so the ETSI activity included reviewing and documenting how ISO 32000-1 can satisfy the European Directive.
The statement endorsed by the Events & Communications officer at ETSI, Mr. Paul Reid, explained that this resulted in PAdES standard, which its technical specification (TS) 102 778, also introduces a number of adaptations and extensions to PDF to satisfy the directive’s requirements.
“ETSI plans to feed these European-specific elements back into ISO for inclusion in the next release of the PDF standard, ISO 32000-2,” he said.
PAdES, he explained, is complementary to two other Electronic Signature concepts also developed by ETSI’s ESI committee, both widely recognised within the European Union and suited for applications that do not involve human-readable documents: Cryptographic Message Syntax Advanced Electronic Signatures (CAdES) and XML Advanced Electronic Signatures (XAdES).
ITREALMS Online ... delivering news for ICT4D