GB/T 31308.2-2026Processes, data elements and documents in commerce, industry and administration - Long term signature - Part 2: Profiles for XML Advanced Electronic Signatures (XAdES) (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents".

Drafting.

This document is Part 2 of GB/T 31308 "Long-term signatures for data elements, processes and documents in administration, commerce and industry".

GB/T 31308 has published the following parts.

---Part 1: CMS Advanced Digital Signature (CAdES) Specification;

---Part 2: XML Advanced Electronic Signature (XAdES) Specification;

---Part 3: Long-lasting signature specifications for PDF Advanced Digital Signatures (PAdES);

---Part 4: Attributes of evidence storage objects used for long-term signature formats.

This document replaces GB/T 31308.2-2014 "Specification for Long-Term Signatures of Processes, Data Elements and Documents in Commercial, Industrial and Administrative Sectors - Part 2".

Part 1."Long-Term Signature Specification for XML Advanced Electronic Signatures (XAdES)" Compared with GB/T 31308.2-2014, except for structural adjustments and encoding...

Aside from the logical changes, the main technical changes are as follows.

---The terms "long-lasting signature," "configuration file," and "XAdES with verification data" have been added (see 3.1, 3.2, and 3.6);

---The terms and definitions for "XAdES digital signature," "XadES with time," and "archived XAdES" have been changed (see 3.4, 3.5, and 3.6).

Version 3.7 (versions 3.2-3.4 of the 2014 edition) removed the term "signature data element" (see version 3.5 of the 2014 edition).

---Added "Provider Compliance Declaration", "XML Namespace", and "Long-Term Signature Operation Procedure" (see 4.1.2~4.1.4);

---Added the "XAdES-X-Long form" (see 4.6);

---Changed the "Additional unsigned attribute set data elements in the XAdES-A configuration file" (see 4.7.3, version 6.6.3 of 2014);

---Added a "non-signature attribute set data element" for "timestamp verification data" (see 4.8);

---Added "Conformity with XAdES-X-Long form" (see A.3.5).

This document is equivalent to ISO 14533-2:2021 "Long-term signatures of data elements, processes and documents in administration, commerce and industry - Part 2".

Part. XML Advanced Electronic Signatures (XAdES) Specification.

The following minimal editorial changes have been made to this document.

---The portion of the range is designated as "Note 1".

Please note that some content in this document may involve patents. The issuing organization of this document assumes no responsibility for identifying patents.

This document was proposed and is under the jurisdiction of the National Electronic Business Standardization Technical Committee (SAC/TC83).

Introduction

GB/T 31308 "Long-term signatures for data elements, processes and documents in administrative, commercial and industrial settings" is an interoperability standard to ensure the implementation of long-term signatures.

The standard for ensuring the long-term verifiability of electronic signatures is crucial for the security of the e-commerce market. GB/T 31308 is proposed to be jointly developed by four departments.

Composition.

---Part 1: CMS Advanced Digital Signature (CAdES) Specification. The purpose is to clarify the CMS Advanced Digital Signature (CAdES) specification.

The long-term signature standard ensures that this type of electronic signature can be verified over a long period of time.

---Part 2: XML Advanced Digital Signatures (XAdES) Specification. The purpose is to clarify the XML Advanced Digital Signatures (XAdES) specification.

The long-term signature specification ensures that this type of electronic signature can be verified over a long period of time.

---Part 3: Long-lasting signature specifications for PDF Advanced Digital Signatures (PAdES). The purpose is to clarify the advanced digital signature (PAdES) specification for PDF.

The (PAdES) long-term signature specification ensures that this type of electronic signature can be verified over a long period of time.

---Part 4: Attributes of the Evidence Object Used for Long-Term Signature Formats. The purpose is to clarify the attributes of the evidence object required for long-term signature verification.

The specifications ensure that electronic signatures can be verified over a long period of time.

GB/T 31308 (all parts) are adopted one-to-one with ISO 14533 (all parts) to ensure the long-term verification of electronic signatures.

The implementation standards are aligned with international standards. By formulating this series of standards, the relevant standard system is improved.

The purpose of this document is to ensure interoperability between relevant implementations, particularly regarding long-term signatures, enabling digital signatures to last for extended periods.

Verification is conducted within a specified timeframe. Each implementation references a long-term signature specification developed by the European Telecommunications Standards Institute (ETSI).

XAdES digital signature.

Data elements, processes, and documents in administration, commerce, and industry Long-term signatures, Part 2: XML advanced electronic signatures Signature (XAdES) Specification

1 Scope

This document defines the data elements used for long-term digital signature verification as defined in XML Advanced Electronic Signatures (XAdES).

This document applies to XAdES long-term signing of data elements, processes, and documents in administrative, commercial, and industry settings.

Note 1.This document does not provide technical specifications for digital signatures themselves, nor does it restrict the use of existing digital signature specifications.

Note 2.XAdES digital signature is an extension of the widely used XML electronic signature syntax.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

ISO 14533-1 Long-term signature specifications for data elements, processes and documents in administration, commerce and industry - Part 1: CMS Advanced Note. GB/T 31308.1-2026 Specification for Long-Term Signature of Data Elements, Processes and Documents in Administration, Commerce and Industry - Part 1: CMS Advanced Electronic Signature Name (CAdES) specification (ISO 14533-1:2022, IDT) ETSIEN 319132-21) XAdES Digital Signatures Part 2: Extended XAdES Digital Signatures v1.1.1 (XAdES digital W3CRecommendation,11April2023)

3 Terms and Definitions

The terms and definitions defined in ISO 14533-1, as well as the following terms and definitions, apply to this document.

longterm signature

A signature used for long-term verification verifies the signature information by checking the signature time, the signing entity, and the valid data in the signature.

Whether the information has been illegally altered.

configuration file profile Rules related to optional elements, value ranges, etc., of the reference specification are used to ensure interoperability.