[osis-core] XML Signature [<signature> in <work>]

Todd Tillinghast osis-core@bibletechnologieswg.org
Fri, 17 Oct 2003 11:54:03 -0600


Patrick,

I am thinking of a signature that is within the document but nicely
placed within the <work> element.

Exactly the same signature that is held within the "this" <work> element
could be used in a <work> element used with a reference to specify and
ensure a specific document.  This would add the features of an XML
signature to the set Dublin Core elements.  

The downside is that a reference to kjv:Esth.1.1 that uses a signature
would only be valid to the exact document that was signed.  Thus an OSIS
document of only the book of Esther was available, it would not be a
match if the signature for all 66 books.  However, using XPath within a
signature a signature for only the book of Esther could be created and
used.

More on this after the release of 2.0.

Todd

> Todd,
> 
> Definitely a post 2.0 issue but a couple of quick points:
> 
> 1. Signing XML documents (as you know) does not require an element
> inside the document, so I am not sure of the need for the new element.
> 
> 2. I think your proposal conflates two purposes for signing: A. This
is
> the XML document I issued, and 2. This document is the same as some
> other document. Not sure of the benefits from #2.
> 
> Will be out for a few minutes and will then start calling to see what
we
> have left to iron out.
> 
> Hope you are having a great day!
> 
> Patrick
> 
> Todd Tillinghast wrote:
> > Patrick and Steve,
> >
> > It occurs to me that an valuable feature to add to the <work>
element
> > would be a <signature> element that would contain a "digital
signature"
> > of the work.  Basically a digest of the text.
> >
> > The value would be that if a referencing document included the
> > <signature> element, a matching document would have to have a
matching
> > <signature> element.  The presumption would be that the digest in
the
> > <signature> would be a digest of the document (probably qualified by
an
> > XPath expression).
> >
> > This would also give us the opportunity to provide a non-intrusive
> > mechanism for signing OSIS content.
> >
> > The proposal would be to add an element <signature> to <work> whose
> > mixed="false" children are instance of elements defined by the w3c
XML
> > Signature specification.
> >
> > At this late date, I don't think this can make it into OSIS 2.0 but
> > might be a nice addition for a minor release after the January
meeting.
> >
> > Thoughts?
> >
> > Todd
> >
> > _______________________________________________
> > osis-core mailing list
> > osis-core@bibletechnologieswg.org
> > http://www.bibletechnologieswg.org/mailman/listinfo/osis-core
> >
> 
> 
> --
> Patrick Durusau
> Director of Research and Development
> Society of Biblical Literature
> Patrick.Durusau@sbl-site.org
> Chair, V1 - Text Processing: Office and Publishing Systems Interface
> Co-Editor, ISO 13250, Topic Maps -- Reference Model
> 
> Topic Maps: Human, not artificial, intelligence at work!
> 
> 
> _______________________________________________
> osis-core mailing list
> osis-core@bibletechnologieswg.org
> http://www.bibletechnologieswg.org/mailman/listinfo/osis-core