Digital legal archiving

Transcription

1 Digital legal archiving A universe of new challenges by Irina Lippens, Project Manager Wim Coulier, Trust Services Expert

2 A long time ago in a galaxy far, far away 2

3 History of Archiving...or where it all started First cave painting, dating back to Aurignacian period (approximately 40,000 years ago) found in the El Castillo cave in Cantabria, Spain 3

4 History of Archiving Can i trust it? Or the Seal «The Joshua Roll», Vatican Library. An illuminated scroll, probably of the 10th century, created in the Byzantine empire During the early Byzantine period these rings were used for sealing personal documents and validating wills and testaments. 6th Century, Silver. The Walters Art Museum. 4

5 History of Archiving OK, you signed it, but when? Or the Timestamping A timestamp is the time at which an event is recorded by a computer, not the time of the event itself. 5

6 History of Archiving the olders archive still in use The Vatican Secret Archives have been estimated to contain 52 miles (84 km) of shelving, and there are 35,000 volumes in the selective catalogue alone. The oldest surviving document dates back to the end of the eighth century. 6

7 History of Archiving Oooops... Or when things go wrong LaserDisc invented by David Paul Gregg and James Russell in 1958 A LaserDisc (left) compared with a DVD 7

8 Archiving or what it all is about Archiving is the process of collecting, classifying and preserving information for future reference Legal archiving is archiving for legal and regulation purposes 8

9 Regulations... or what makes archiving legal? At this moment European legistlation on Digital Legal Archiving requirements is very limited Upcoming new EU Directive on Trust Services: tion/com_2012_2038_en.pdf Includes notion qualified electronic signature preservation service to extending the trustworthiness of the qualified electronic signature validation data beyond the technological validity period Time Staming Services Delegated acts via standards Complete new set of standards coming 9

10 History of Archiving... or when things go right Long term signature verification Hardware security No glitches: once a security problem, nonrepudiation value is lost for ever! Support for format No software bugs Hash documents you shall Not just at set-up but continuous effort required during solution lifetime 10

11 Security aspects Proof signature itself Algorithm failure Recalculation still possible Proof signing certificate Valid at time of signing Not revoked or suspended Not expired Certificate not falsified (CA signature valid) Trust Provider compromise or termination 11

12 Solutions readability Hardware Software PDF/A format ISO standard format designed for archiving purposes widely recognized multitude of software (incl. Open Source) 12

13 Solutions security *AdES Advanced Electronic Signature - European Standard for signature format (versions for XML, CMS and PDF file formats) includes revocation data (CRL or OCSP response) includes signing time time-stamp Foresees possibility to add time-stamps over time ERS-LTANS Evidence Record Syntax Long Term Archiving and notarising services retimestamping in bulk Based on hash trees "Merkle-trees" reduces management issues of retimestamping Redundancy 2 completely different time-stamp authorities Redundancy in used algorithms 13

14 Long term accessibility Readability over time file corruption file interpretation (format) Proof of integrity over time File not changed Non-repudiation guaranteed 14

15 Main Challenge 1 or - how to capture data? Rendition server 15

16 Legal Scanning IRIS PowerScan Legal add-on What are the benefits of Legal Scanning? Identification of the scanner operator of every image Embedding of document owner and scanning company information in the images Traceability of every image Guarantee that the images cannot be altered (nor in IPS interface nor in IPS cache) Guarantee that the sequence of the images cannot be altered Images must be signed and cannot be deleted, moved, modified, added... 16

17 Standard document management system Easy to set-up Multiple configuration options Office integration Easy data export Retention rules (data can not be edited or deteled for a fixed period of time) IBM/EMC storage management 17

18 Compress & Convert Legal Scanning Rendition server PDF / A 18

19 Hardware Concept Production site 1 Production site 2 CPU Main memory Mass storage device (hard disk) Tampered content provider Active/passive Replication CPU Main memory Mass storage device (hard disk) Tampered content provider Off-line storage Tertiary storage Removable medium (disaster recovery) Removable medium (tape) 19

20 Main Challenge 2... Or how to store data? Hard disk Large storage Fast Cheap but Prone to failure Vulnerable to physical damage Optical discs Universal Cheap but Slower than hard disks Small capacity Compatibility issues between disc formats and readers Solid state drives Faster than hard drives No moving parts so they last longer Low power consumption Less susceptible to physical damage and immune from magnetic fields Smaller and lighter than hard drives but Expensive Tape drives Can store large amounts of data Cheap but Slow access to data Data must be read from tape sequentially 20

21 Case Study 1 Just Scan (SPF Justice) Objective: replace paper-based investigation files (dossier d instruction) by electronic files Solution Scanning room in each juridical district (27 in Belgium) Centralized document management Benefits: Easy access and transfer (no time loss to copy paper) Secured concervation Quick search Green product 21

22 Case Study 2 CSS MyScan (SPF Finances) Objective: paper-less tax forms and tax files (admin. files of office employees) Solution: two scanning sited (Ghent and Namur) fully equiped and staffed centralized infrastructure (FileNet, flow management and monitoring, etc) Benefits: Reduced (close to 0) data input errors Fast processing (images, work flow) Electronic long-term conservation (paper documents can be distroyed) 22

23 Thank you! And may the Force be with you 23

24 Back-up slides 24

25 BACKUP: ERS-LTANS 25

26 BACKUP: *AdES XAdES-BES Signed Info Signature Key Info Signed properties Unsigned properties XAdES BES XAdES-T Time-stamp over signature XAdES-C Revocation references XAdES-X Time-stamp over references XAdES-X-L Revocation data itself XAdES-A Time-stamp Validation Data & Archive Time-stampS 26