RE: German eID

One thing I think You would be worth udnerstanding is the notion of the qualified signature, and qualified cert.
 
its a twist on identity emantics worth understanding.
 
If I make an analogy (entertaining, informative, but not intellectual): its like a modal logic, versus formal logic.

 
> From: henry.story@bblfish.net
> Date: Tue, 8 Feb 2011 11:11:05 +0100
> CC: martin.gaedke@informatik.tu-chemnitz.de
> To: public-xg-webid@w3.org
> Subject: German eID
> 
> In Monday's teleconf Martin Gaedke pointed out
> 
> gaedke: regarding electronic IDs, there is something going on in Germany
> ... also in other countries ongoing
> <webr3> like the US too
> <gaedke> http://www.epass.de/
> <gaedke> http://www.personalausweisportal.de/
> 
> I found the technical details here
> http://www.personalausweisportal.de/cln_102/SharedDocs/Downloads/DE/Technik_Flyer.html?nn=830460
> 
> As I understand these card work with a public key infrastracture. The CA is
> certificate is a Card Verifiable Certificates ISO 7816, and the certificates
> for the qualified electronic signature are X509 certs.
> 
> It will require client software that supports the eCard-API, and an eID server. These are defined here www.bsi.bund.de.
> 
> 1. BSI TR-03110 EAC und PACE
> 2. BSI TR-03112 eCard-API
> 3. BSI TR-03127 Architektur
> 4. BSI TR-03130 eID-Server
> 
> Perhaps the picture here helps
> https://www.bsi.bund.de/ContentBSI/Publikationen/TechnischeRichtlinien/tr03112/index_htm.html
> 
> Not sure how international these standards are, or how open. 
> 
> 
> It would be intresting to see if browsers can interact with these cards, if they contain an X509 certificate, and if these could contain a WebID.
> 
> Henry
> 
> 
> Social Web Architect
> http://bblfish.net/
> 
> 
 		 	   		  

Received on Tuesday, 8 February 2011 13:25:55 UTC