Digital Graph Signatures and Trust Networks for the Semantic Web do EXIST!

Dear Semantic Web Community

Some time ago there was a vivid discussion about security aspects on the 
semantic web including digital signatures and general the role of 
security in the Semantic Web. We were quite pleased to see that security 
aspects became center of a vivid discussion.

For some of the tasks, there are already existing, ready-to-use 
solutions available since some years.

So, following the earlier discussion, I like to point out to and 
advertise an existing solution for digital signatures on the Semantic 
Web. It is part of Dr. Andreas Kasten's PhD thesis and it is both 
theoretically founded as well as an open source implementation available.

/The digital graph signature framework, called Siggi, has a couple of 
distinct features: //
////
//a) Signing of graphs or parts of graphs (including named graphs) with 
a digital graph signature. //
////
//b) The digital graph signature itself is Linked Data compatible, i.e., 
the signature itself is represented as a graph and thus can be directly 
shipped with the signed input graph (e.g., as .nt file). //
////
//c) Since the digital graph signature is represented as a graph, one 
can naturally apply the signatures in an iterative fashion. Thus, a 
party B can sign add some triples to an already signed graph (by party 
A) and share this graph plus the signature. This allows to trace back 
where the original data came from and thus build complex trust networks. //
/
Details of the signing framework can be found here:

* Andreas Kasten, Ansgar Scherp, Peter Schauß: A Framework for Iterative 
Signing of Graph Data on the Web. ESWC 2014: 146-160
https://link.springer.com/chapter/10.1007%2F978-3-319-07443-6_11

* Code: https://github.com/akasten/signingframework (we will make some 
updates, if there is a community interest!)

* Or in Andreas' thesis: Secure semantic web data management, 
https://kola.opus.hbz-nrw.de/files/1393/thesis.pdf

I hope with this, we can trigger again some interest in the community to 
work on digital graph signatures, and perhaps to take up and extend on 
Andreas' original works.

Best regards,

Ansgar & Andreas

Received on Saturday, 13 November 2021 11:17:39 UTC