Glossary Item Box

Government Gateway 2.2.0 (MR-01) ISV Developer Help (Doc Version 06/03/08) | Send comments on this topic.

# Digital Signature Authentication

Illustrates the structure of the SenderDetails block when the message Body is digitally signed (i.e. the Method element has a value of W3Csigned).
<! -- DigestValue contains the digest of the message Body SignatureValue contains the digital signature of the DigestValue (produced using the submitter’s private key) X509Certificate contains the submitter’s certificate --> <GovTalkMessage xmlns="http://www.govtalk.gov.uk/CM/envelope"> <EnvelopeVersion>2.0</EnvelopeVersion> <Header> <MessageDetails> </MessageDetails> <SenderDetails> <IDAuthentication> <Authentication> <Method W3Csigned</Method> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo > <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> <SignatureMethod Algorithm=“http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> <Reference URI="#Body"> <DigestMethod Algorithm=" http://www.w3.org/2000/09/xmldsig#sha1"/> <DigestValue>ThisIsTheDigestOverTheBody</DigestValue> </Reference > </SignedInfo> <SignatureValue>ThisIsTheSignedDigestValue</SignatureValue> <KeyInfo> <X509Data> <X509Certificate>ThisIsTheDigitalCertificateOfTheSubmitter<X509Certificate/> </X509Data> </KeyInfo> </Signature> </Authentication> </IDAuthentication> </SenderDetails> </Header> <GovTalkDetails> </GovTalkDetails> <Body Id="Body"> </Body> </GovTalkMessage >

> This is the legacy signature structure used by older applications – It should not be used by new implementations. As illustrated, there are a number of differences; in particular the X509Certificate element is not within the Signature block.
> <! -- DigestValue contains the digest of the message Body SignatureValue contains the digital signature of the DigestValue (produced using the submitter’s private key) X509Certificate contains the submitter’s certificate --> <SenderDetails> <IDAuthentication> <Authentication> <Method>W3Csigned </Method> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo > <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2000/WD-xml-c14n-20001011"/> <SignatureMethod Algorithm=“http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> <Reference> <Transforms> <Transform Algorithm=“http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath>/GovTalkMessage/Body</XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> <DigestValue>ThisIsTheDigestOverTheBody</DigestValue> </Reference> </SignedInfo> <SignatureValue>ThisIsTheSignedDigestValue</SignatureValue> </Signature> </Authentication> </IDAuthentication> <X509Certificate>ThisIsTheDigitalCertificateOfTheSubmitter<X509Certificate/> </SenderDetails>

© Crown Copyright 2008. All rights reserved