Blockchain private permissioned

BVBA
03-23-05Juni 2011
page 1 • TSDT
TSDT-Trusted secure digital trans-actioning
(blockchain private)
Presented by Jan Biets

BLOCKCHAIN, Private & Permissioned Juni 2011
BVBA
page 2 • TSDT
“Forview”
introduction
– Introduction: why do we need a trustworthy system?
– Overview of TSDT, the elements;
– Compliant with international standards
– Typical situation
• Business cases to apply ‘secure trans-actioning’

BVBA
page 3 • TSDT
Intro
• The author adherents:
– in general ‘closed environment’, also known as “permissioned
blockchain”, and ‘private blockchain”, trust authority, or company
network, and other ‘membership’ or ‘society’ -based
environments, with very strong identification, access and
authorisation management
– In general ‘non-repudiation’ is definitely not easy to constitute in
a contemporary world. Trustworthy partners (authorities) are
required to establish a reliable (read: ’trustworthy’) and generally
accepted business trans-actioning system;
Admittance: face-2-face identification, class 3, 4 or even 5

BVBA
NON-REPUDIATION
irrefutable
unwiderlegbar
ONWEERLEGBAAR
neizpodbitno
Non-repudio
necessarie
kieltämätön
反駁できない
确凿
अखंडनीय
неопровержимый
irrefutável
inconfutabile
‫قابل‬‫انکار‬‫نیست‬
obestridliga
nepobitan
uigendrivelige
‫ל‬ ַ‫בא‬ ַ‫פייטא‬ ַ‫ירא‬
Why ?

BVBA
NON-REPUDIATION
TSA
TTP
XADES-XL
C
A
LTANS
SSCD
PKI
RA
PROCESS
POLICY
CRL
OCSP
XADES-A
OID
HSM
European
LAW
ERS
VAS
XML TA
A
ETSITS102023
ETSITS101903
IAM
TSDT
How?

BVBA
page 6 • TSDT
TSA
E-SIGN
CA - PKI
ERS
Management
LAW
Policy
Security
Business
Process
User
interface
components
IAM

BVBA
page 7 • TSDT
TSDT
operations
other
modules
documentedmanaged
law &
standards
constellation

BVBA
page 8 • TSDT
TSDT - other elements
• Business Case
– Why, what, how (justification)
• Risk assessment
– What are the risks “what if not”
• Business Process Flow
– Define the streams of the document flows
• DMS
– Choice ‘commercial’ product, or open source
– User interface (GUI)
Abbreviations:
DMS - Document Management System,
GUI – Graphic User Interface

BVBA
page 9 • TSDT
TSDT - pre requisites
• CA – PKI and RA: strong identification and access
management
• Xades XL, electronic signature
– ETSI TS 101 903 XML advanced electronic
signatures
– ETSI TS 101 703 Electronic Signature Formats
(CMS)
– XAdES Long-Term Signature Format Profile v1.0
– Basic electronic signature (XAdES-BES)
– Explicit policy based electronic signature (XAdES-
EPES)
– Electronic signature with Time (XAdES-T)
– Electronic signature with Complete Validation Data
Reference (XAdES-C)
• TSA, timestamp authority
– ETSI TS 101 861 Time stamping profile
– ETSI TS 102 023 Policy requirements for time
stamping authorities

BVBA
Applicable standards
•IAM : identification and access
management, by means of:
– RA – registration authority, both based on ,
and full compliancy with ETSI TS 101 456
V1.4.1 (2006-01)
– Technical Specification Electronic Signatures
and Infrastructures (ESI);
– Policy requirements for certification authorities
issuing qualified certificates, and
– ETSI_TS_101 862_Qualified_certificate_profile
– Policy based on ETSI TS 101 456

BVBA
• Electronic signature:
– To enable the use of digital signature, the programme decided to realise Xades
XL signature (ETSI TS 101 903 V1.3.2 (2006-03)
– Technical Specification XML Advanced Electronic Signatures (XAdES)
– ETSI_es_201733v010103_Electronic Signature Formats
– ETSI_sr_002176v010101_Algorithms and Parameters for Secure Electronic
Signatures

BVBA
• TSA (timestamp authority) based on ETSI TS 102 023 V1.2.1 (2003-01)
• Technical Specification Electronic Signatures and Infrastructures (ESI);
Policy requirements for time-stamping authorities, and
• ETSI_ts_101861v010301_time_stamping_profile

BVBA
page 13 • TSDT
Xades, electronic signature process flow
Electronic
document
Creation (Pdf)
DocSign
Signature PIN code
TimeStamp
Public Key
Verification
OCSP
Verification
INPUT
Electronic
document
Creation (Pdf)
+
Timestamp profile
OUTPUT
0
1
2
3
4
5
6
7
8 9
E-sign

BVBA
page 14 • TSDT
TSA – timestamp , process flow
Request
Time stamp
Verify validity
certificate
logging
Verify validity
> 1 < second
logging
Set
Time stamp
TimeStamp
According ETSI TS 102 023
System audit process

BVBA
page 15 • TSDT
TSDT - approach
• creating a system to enable the TSDT service :
– policy,
– processes,
– procedures,
• procedures (or protocols) contain the 'what',
the 'how', the 'where', and the 'when'.
– security,
– infrastructure/architectural design and
– audit
• Verify: systems, documents, and operations
Abbreviations:
CA - Certification Authority ,
PKI - Private Key Infrastructure,
RA - Registration Authority
TSA - Timestamp Authority

BVBA
page 16 • TSDT
TSDT - IAM
• Minimal requirement!
• Class 3 Certificate: This certificate will be issued to
individuals as well as organizations. As these are high
assurance certificates, primarily intended for e-commerce
applications, they shall be issued to individuals only on
their personal (physical) appearance before the Certifying
Authorities.
Abbreviations:
CA - Certification Authority ,
RA - Registration Authority

BVBA
page 17 • Fedisa
Certificate classification (Verisign)
• VeriSign uses the concept of classes of digital certificates
– Class 1 for individuals, intended for email.
– Class 2 for organizations, for which proof of identity is required.
– Class 3 for servers and software signing, for which independent
verification and checking of identity and authority is done by the
issuing certificate authority.
– Class 4 for online business transactions between companies.
– Class 5 for private organizations or governmental security.
https://www.verisign.com/support/roots.html

BVBA
page 18 • TSDT
TSDT - Policy
A policy is typically described as a principle or set of rules to
guide decisions and achieve rational outcome(s).
Where as a policy will contain the 'what' and the 'why',
Typical topics:
•Purpose
•Policy administration
•Obligations and liability
•Organisation’s digital archive preservation policy
•Records to be deposited
•Time of deposit (retention)
•Data integrity, and access continuity assurances
•Data integrity – system
•Accepted formats
•Infrastructure

BVBA
page 19 • TSDT
TSDT – security shells (barriers, tiers)
Policy Security
PolicyHR
Trusted Archival
Authority
Physical Security
Building Security
Policy Security
Application security
Server room
Organisation&managementPolicy
System Security
Authorisation & authentification
Network Security
User interface Security
procedures people

BVBA
page 20 • TSDT
TSDT – basic functionalities and features
• Depose documents
• User management
• Access control
• Document life cycle management (retention policy)
• Audit trail (event logging)
• Proof of document integrity
• Web access (intranet, internet)
• Document management system (user interface),

BVBA
page 21 • TSDT
TSDT – basic functionalities: audit trail (logging of
events)
• System:
– Authorisation matrix
– Change file detection
– Log file is encrypted
– Secure logging
– Operator alerts
– System alarms
– System modifications have to be done by ‘system
administrator’ + logging (+ documented)
Based on results of risk assessment
1/2
Remark:
CWA 14167-1. Security Requirements for Trustworthy
Systems Managing Certificates for Electronic Signatures

BVBA
page 22 • TSDT
TSDT – basic functionalities: audit trail (logging of
events)
• Procedures
– 4-eyes in case system operations / modifications
– Administrator access management by means of
smart card and certificate
• Dashboard (events)
– Authorisation matrix
– Configuration user management , access
management modifications
– Who has, when , what document deposed,
modified, consulted, changed, deleted, shared?
Based on results of risk assessment
2/2

BVBA
page 23 • TSDT
TSDT – basic functionalities: user management
• Authority assigns access rights to users
• User management data (access rights) information exchange via Certificate
smart card, and authentic source;
– Roles:
• Authority
• Employee
• System administrator (local office/authority)
– Responsibilities:
• Depose
• Copy
• Share
• Delete
• View
• Annotate
• (other actions)

BVBA
page 24 • TSDT
TSDT – basic functionalities: proof of integrity
• System generates ‘ERS’ per document, to proof long
term evidence (non-repudiation / undeniable )
• Kind of ‘fingerprint’
– Timestamp
– Electronic signature
– Certificate (status)
– Root chain certificate
– Hashing (verification / proof of ‘un-changed’ status
of content
• System regenerates periodically ERS (based on
certificate life cycle)
Abbreviations:
ERS – Evidence record syntax

BVBA
page 25 • TSDT
TSDT – attributes of a trans-actioned document
Archived Object
Object META-DATA
Digital Signature
(optional)
Complementary data
Archive meta-data
Evidence record
Object’s
conservationattributes

BVBA
page 26 • TSDT
TSDT – Overview of trans-actioned features
Archived Object
Object META-DATA
Digital Signature
(optional)
Complementary data
Archive meta-data
Evidence record
Object’s
Transactioning object
Could be any
electronic file / data.
Object meta-data
Author, category, size, version,
date, key-word
Digital Signature
Relevance is depending on
legal requirements.
it is mandatory to proof the legal
‘serieux’ of the users

BVBA
page 27 • TSDT
TSDT – ERS, evidence record syntax
Archived Object
Object META-DATA
Digital Signature
(optional)
Complementary data
Archive meta-data
Evidence record
Object’s
Overview of ERS
Complementary data
•Digital certificate
•Certificate chain
•Certificate revokation list
meta-data
•Document owner
•Trans-actioning time
•Origin of document
Evidence record
•Document finger print
•Timestamp
•Hash link

BVBA
page 28 • TSDT
TSDT – basic architectural design
ERS
engine
Hardware &
Storage
Policy & Procedures
Security & Legal
User client
Web Service
DMS –
user
interface
TSA

BVBA
page 29 • TSDT
TSDT – functional architectural design
IAM
CA
TSA
DMS
ERS
i-Sign
HW
Event logging
(audit trail)
storage
SA*
Abbreviations:
IAM – identity & access management
CA – Certification authority
(RA – registration authority)
SA – “source authentic”

BVBA
page 30 • TSDT
TSDT – process design
TAA & ERS
ERS

BVBA
TSDT – how it could work (a suggested scenario or use
case)
page 31 • TSDT

BVBA
page 32 • Fedisa
TAA - pre requisites : TSA
Abbreviations:
TSA - Timestamp Authority , ETSI TS 102 023

BVBA
page 33 • TSDT
TSDT – architectural design
S1
S2
S3
S4
Abbreviations:
LTAP – long term archival protocol

BVBA
page 34 • TSDT
Afterwords, attention items
• Business case, justification
• Risk analysis, threat , vulnerability, security
• Legal: sometimes constraints: only one copy as the original ! or not allowed
to store abroad (difficult to verify on internet!)
• Select technology;
• Business process flow;
• Usability , user friendly GUI;
• Success , succès.

BVBA
page 35 • TSDT
Afterwords : points of attention during conceptual design
• Recoverability and Data Integrity
• Architecture / Design to achieve required availability
• Reliability
• Manageability
• Backup and Recovery
• Performance
• Scalability [Not every application supports more transactions or more
users when adding CPU and Memory]
• Installation Requirements
• Configuration Requirements
• Maintainability Requirements
• Localisation / Internationalisation Requirements & constraints
• Operations-, Support- and Troubleshooting Requirements
• Documentation Requirements
• Monitoring: Application Level Monitoring must be explicitly requested,
otherwise you just get system- and database monitoring.
• Archiving and Restoring

BVBA
page 36 • TSDT
TSDT – some other fields of application
1. Liberal professions, have in some case long term - legal- responsibilities,
i.e.
– Lawyers
– architects : a 10 year professional responsibility for building plans
– accountants : also responsible for VAT declarations
– auditor/revisor (head of accountants): signing of fiscal year
documents/statements
2. Log files
– log files (systems, applications,...) should not be changed, only by
dedicated staff (i.e. chief security officer), and applicable policy, or local
laws
3. Banks, insurance companies; stock exchange
– approval of credits and loans: who has done what in accordance of the
mandate
– timeline and sequence (order) of the performed transactions (using
time-stamping)
4. Medical statements and medicines prescription
– patients' medical records in electronic form

BVBA
page 37 • TSDT
5. Justice (ministry)
– defined and traceable work streams
– from police statement to lawyers and judges, and classification of files:
every ‘role’ has added, viewed, changed documents.
– Files can not be changed by un-authorised people, nor been lost, with
dramtic legal consequences
6. Patenting (every country has a patent office; patent is public information)
– to be able to prove who was first to come up with an idea or to patent
a document, drawing, design, music score, research results,...
– Escrow
7. IPP (intellectual property protection)
– research companies have a legal trace of the progress of the search for
a new product
– this can/could be private information (un-disclosed for third parties)

BVBA
page 38 • TSDT
8. Registered mail
– electronic mail with proof of content, 'addressee", time , and
acceptance
9 . Closed environments
– tax governments, pension authority, banks, insurances, stock exchange
(logging of transactions),....
10. Accounting services companies
– storage of accounting companies customers' documents in electronic
format– outsourced electronic archiving (is implemented in some
Eastern European countries)
11. Apostilles:
– It specifies the modalities through which a document issued in one of
the signatory countries can be certified for legal purposes in all the
other signatory states. Such a certification is called an apostille
(French: certification). It is an international certification comparable to
a notarisation in domestic law.
12. Invoices:
– Electronic invoices archival, helpdesks, customer’s service , legal
purposes.

BVBA
page 39 • Fedisa
The EU Directive 1999/93/EC on a Community framework for
electronic signatures : Profiles
XAdES defines six profiles (forms) differing in protection level offered. Each profile
includes and extends the previous one:
XAdES, basic form just satisfying Directive legal requirements for advanced
signature;
XAdES-T (timestamp), adding timestamp field to protect against repudiation;
XAdES-C (complete), adding references to verification data (certificates and
revocation lists) to the signed documents to allow off-line verification and
verification in future (but does not store the actual data);
XAdES-X (extended), adding timestamps on the references introduced by
XAdES-C to protect against possible compromise of certificates in chain in
future;
XAdES-X-L (extended long-term), adding actual certificates and revocation
lists to the signed document to allow verification in future even if their original
source is not available;
XAdES-A (archival), adding possibility for periodical timestamping (e.g. each
year) of the archived document to prevent compromise caused by weakening
signature during long-time storage period.

BVBA
page 40 • TSDT
Xades, electronic signature composition
The XAdES-T envelope:
contains a trusted timestamp over the
signature. The goal is to prove that the
signer’s certificate was valid at the time of
signature.
The XAdES-X envelope:
“When an OCSP response is used, it is
necessary to time-stamp in particular that
response in the case the key from the
responder would be compromised”
In other words, the goal is to prove that
the OCSP responder’s signing certificate
was valid at the time of OCSP response.
“The SignatureTimeStamp encapsulates the
time-stamp over the SignatureValue
element.”
XADES : XML Advanced Electronic
Signatures
Specification from the ETSI that is built
upon the Xmldsig specification.
It provides “signatures that remain valid
over long periods.
XAdES-X-L
XAdES-X
XAdES-C
XAdES-T
XAdES-EPES
OCSP
Timestamp
Certificates Chain
Timestamp
XAdES - a Timestamp

BVBA
page 41 • TSDT
Xades, electronic signature
composition

BVBA
page 42 • TSDT
“Xades – A”, electronic signature composition
• Signed Signature Properties
• Signing Time (non-authoritative: may be from signer’s computer)
•Signature Certificate
•Signature Policy Identifier
•Signature Production Place (optional)
•Signer Role (optional)
•Signed Data Properties
•Data Object Format *
•Commitment Type Indication *
•All Data Objects Time Stamp *
•Individual Data Objects Time Stamp *
•Unsigned Signature Properties
•Counter Signature *
•Signature Timestamp+
•Complete Certificate Refs
•Complete Revocation Refs
•Refs Only Time Stamp - or – Sig and Refs Time Stamp
•Certificate Values
•Revocation Values
•Archive Time Stamp +

BVBA
page 43 • TSDT
Contact
Jan_biets@hotmail.com
-
0477 32 90 11

Blockchain private permissioned

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Blockchain private permissioned

Similar to Blockchain private permissioned (20)

More from Jan Biets [jan_biets@hotmail.com]

More from Jan Biets [jan_biets@hotmail.com] (15)

Recently uploaded

Recently uploaded (20)

Blockchain private permissioned