- From: Ansgar Scherp <mail@ansgarscherp.net>
- Date: Sat, 13 Nov 2021 12:17:20 +0100
- To: semantic-web@w3.org
- Cc: Andreas Kasten <andreas-kasten@web.de>
- Message-ID: <a33e919b-37bb-0ded-92a8-52281b700d50@ansgarscherp.net>
Dear Semantic Web Community Some time ago there was a vivid discussion about security aspects on the semantic web including digital signatures and general the role of security in the Semantic Web. We were quite pleased to see that security aspects became center of a vivid discussion. For some of the tasks, there are already existing, ready-to-use solutions available since some years. So, following the earlier discussion, I like to point out to and advertise an existing solution for digital signatures on the Semantic Web. It is part of Dr. Andreas Kasten's PhD thesis and it is both theoretically founded as well as an open source implementation available. /The digital graph signature framework, called Siggi, has a couple of distinct features: // //// //a) Signing of graphs or parts of graphs (including named graphs) with a digital graph signature. // //// //b) The digital graph signature itself is Linked Data compatible, i.e., the signature itself is represented as a graph and thus can be directly shipped with the signed input graph (e.g., as .nt file). // //// //c) Since the digital graph signature is represented as a graph, one can naturally apply the signatures in an iterative fashion. Thus, a party B can sign add some triples to an already signed graph (by party A) and share this graph plus the signature. This allows to trace back where the original data came from and thus build complex trust networks. // / Details of the signing framework can be found here: * Andreas Kasten, Ansgar Scherp, Peter Schauß: A Framework for Iterative Signing of Graph Data on the Web. ESWC 2014: 146-160 https://link.springer.com/chapter/10.1007%2F978-3-319-07443-6_11 * Code: https://github.com/akasten/signingframework (we will make some updates, if there is a community interest!) * Or in Andreas' thesis: Secure semantic web data management, https://kola.opus.hbz-nrw.de/files/1393/thesis.pdf I hope with this, we can trigger again some interest in the community to work on digital graph signatures, and perhaps to take up and extend on Andreas' original works. Best regards, Ansgar & Andreas
Received on Saturday, 13 November 2021 11:17:39 UTC