From IP Location
Users of location information may require some assurances about its veracity before they will use the information. The most convenient way to provide such an assurance is to identify the source of the information, then ensure that the information is not modified between the source and destination. A digital signature provides a way to provide this assurance.
Digital signatures can be applied in two ways to a PIDF-LO: the Secure MIME (S/MIME) method in Reference 1 or an XML digital signature (see Reference 2). S/MIME offers features that are not useful in this context, like encryption; whereas an XML digital signature offers some flexibility. This flexibility is what makes the XML digital signature useful in signing PIDF-LO.
This appendix describes how a PIDF-LO document can be digitally signed. In particular, a transform is described that can be used to selectively sign parts of the PIDF-LO document.
What Needs to Be Signed
A digital signature is useful for linking different data together, but not all of the information in a PIDF-LO needs to be protected by the digital signature. If a PIDF-LO is generated by an LIS, certain information must be signed for the signature to be effective, but other elements can be unsigned so that it can be changed.
The following pieces of information must be signed for a digital signature to have any effect:
Location information The location information is the primary piece of interesting data.
The presentity identifier This field identifies the subject of location...
Products & Services
Topics of Interest
This appendix describes the protocol bindings for HELD. Two bindings are included: an HTTP binding that uses a web services form, and a BEEP binding that can be used for more permanent client/server...
2.8 Uses for XML Signature 2.8.1 Digital Signature of Web Page Signing a Web page will allow humans to understand that information conveyed by it is authentic. A typical example is a historical...
2.6 XML Digital Signatures While the advantages of incorporating the results of esoteric mathematical algorithms using very large numbers into a text format are not immediately apparent, the W3C...
Digital Signatures Just as your signature on a document attests to your understanding and acceptance of the content you have signed, a digital signature can be applied to a document in the same way.
Signing a Document Blank signature fields are useful for an approval cycle, for instance, where a document is reviewed by several people, each signing to specify their acceptance of the contents. If...