1 ESTIO 21/05/2015 Electronic Signature Testsuit for Inter-Operability A project supported by the EU ISIS programme

2 ESTIO 21/05/2015 Content Project Objectives and Partners Project tasks Testing methodology Project plan

3 ESTIO 21/05/2015 Project Objectives Specify infrastructure and tools to perform conformance testing of e-signature related products for the following standards: –X.509 Qualified Certificates –Electronic Signature Formats (ETSI, XML, EDIFACT) Provision of these tools to allow testing of e-signature products

4 ESTIO 21/05/2015 Partners

5 ESTIO 21/05/2015 Tasks to be performed T1: Functional requirement specifications T2: Specification and implementation of test tools T3: Validation of test tools by industry partners T4: Liaisons with the European Standardisation Bodies T5: Project Management

6 ESTIO 21/05/2015 T1: Functional Requirement Specification Conformance requirements for specified standards: –X.509 qualified certificate format –ETSI signature formats –XML signature formats –(EDIFACT signature formats) Testing approach Functional specification for testing tools

7 ESTIO 21/05/2015 Testing approach Verify formats generated by the product (certificates, signature creation) Generate formats to “drive” the product and study its behavior (signature verification) Product Under Test Testing Tools simulation ofPKI files: CMS-,QC-formats

8 ESTIO 21/05/2015 Testing approach (cont.) Test Suite ESTIO_TS TestGroup generation of QC TestGroup verification of ES TestGroup generation of ES TestGroup valid formats TestGroup invalid formats TestGroup mandatory elements TestGroup optional elements TestGroup commercially available products TestGroup  TestGroup products under development TestGroup mandatory elements Test Cases TestGroup optional elements Test Cases

9 ESTIO 21/05/2015 T2: Specification and implementation of test tools Specification of flexible and user-friendly testing tools Implementation of testing tools using existing products –ASN.1 encoders/decoders and compilers Development of test cases

10 ESTIO 21/05/2015 T3: Validation of test tools Validation of test tools by –industry partners Baltimore, iD2, Secude, Safelayer –independent testing laboratories LGAI

11 ESTIO 21/05/2015 T4: Liaisons with Standards Bodies Attend the meetings where these topics will be discussed in order to: –receive information on standards-in-progress –get feedback on proposed conformance requirements –get feedback on testing approach –give feedback on proposed standards Standards bodies to liase with: –ETSI ESI WG !! –CEN/ISSS E-SIGN WS –IETF PKIX –W3C –ISO/IEC ITJC1/SC27

12 ESTIO 21/05/2015 Project plan