Electronic Signatures and Infrastructures (ESI); Policy and security requirements for trust service providers providing long-term preservation of digital signatures or general data using digital signature techniques

Note

ETSI technical specification, based on EN 319 401, setting the requirements for providers ensuring the long-term preservation of digital signatures or data (version 1.1.1).

Summary

Purpose

Technical specification ETSI TS 119 511 (version 1.1.1, June 2019) sets the policy and security requirements for providers that ensure the long-term preservation of digital signatures and data, using signature techniques ETSI TS 119 511 V1.1.1, § 1 Scope ETSI TS 119 511 V1.1.1, History. Its scope begins as follows:

It targets in particular the qualified preservation service for qualified electronic signatures and seals of Regulation 910/2014. It covers two cases: preserving over time the ability to validate a signature and to prove the existence of the signed data, even if the key is compromised or the algorithms weakened; and providing proof of existence of digital objects, signed or not, by means of signatures, time stamps or evidence records ETSI TS 119 511 V1.1.1, § 1 Scope.

Who it applies to

• Qualified trust service providers that provide a qualified preservation service for qualified electronic signatures, and for qualified electronic seals Art. 1 Art. 40.

Key points

• Three storage models: with storage, with temporary storage, without storage ETSI TS 119 511 V1.1.1, § 4.1 Preservation storage models.
• Documentation: practice statement, policy, preservation profiles, preservation evidence policy and signature validation policy ETSI TS 119 511 V1.1.1, § 4.3 Preservation service applicable documentation.
• Expected evidence duration and preservation period: two distinct notions ETSI TS 119 511 V1.1.1, § 4.4 Expected evidence duration ETSI TS 119 511 V1.1.1, § 4.5 Preservation period.
• Cryptographic monitoring and augmentation: the specification provides for the monitoring of algorithms and the augmentation of preservation evidences ETSI TS 119 511 V1.1.1, § 7.14 Cryptographic monitoring ETSI TS 119 511 V1.1.1, § 7.15 Augmentation of preservation evidences.
• Annex A: requirements specific to the qualified preservation service within the meaning of Regulation 910/2014 ETSI TS 119 511 V1.1.1, Annex A (normative): Qualified preservation service for QES as defined by article 34 the Regulation (EU) No 910/2014.

What the acts apply, and how

• Implementing Regulation 2025/1946: TS 119 511 version 1.1.1 and TS 119 172-4 version 1.1.1 apply subject to adaptations List of reference standards and specifications referred to in Article 2. The annex does not draw up a list of excluded clauses. The adaptations of TS 119 511 date the references (ETSI EN 319 401 version 3.1.1, TS 119 612 version 2.3.1, TS 119 172-4); align evidence duration, algorithms and cryptographic monitoring with the agreed mechanisms published by ENISA; require personnel updates at least every 12 months; require, when the provider signs an evidence, a certified cryptographic device (Common Criteria, EUCC level EAL 4 or higher, or FIPS 140-3 level 3 until 31-12-2030); set a quarterly vulnerability scan and an annual penetration test; and specify Annex A as regards the time-stamps used within the preservation evidence, with wording that differs between language versions (see below) List of reference standards and specifications referred to in Article 2. Regulation 910/2014 provides for a presumption, applicable to seals mutatis mutandis Art. 40:

Wording that differs between language versions. For requirement OVR-A-03 of Annex A, the English version of the annex reads:

The French version of the same passage uses “il convient” (“it is recommended”) instead List of reference standards and specifications referred to in Article 2. The summary does not decide between the two.

• Implementing Regulation 2025/2162: its Annex II cites TS 119 511, without a version, for the qualified preservation services for qualified electronic signatures and seals, and for the provision of qualified electronic archiving services; conformity assessment schemes include at least these standards, as applicable, with their year and version number Annex II Art. 6(3).

Important clauses

• ETSI TS 119 511 V1.1.1, § 1 Scope: scope.
• ETSI TS 119 511 V1.1.1, § 6 Policies and practices: policies and practices.
• ETSI TS 119 511 V1.1.1, § 9 Preservation process: preservation process.
• ETSI TS 119 511 V1.1.1, Annex A (normative): Qualified preservation service for QES as defined by article 34 the Regulation (EU) No 910/2014: qualified service.

Links

• Signature applicability rules: ETSI TS 119 172-4 ETSI TS 119 172-4 V1.1.1.
• Preservation protocols: ETSI TS 119 512 ETSI TS 119 512 V1.2.1.
• Learning path: step 4, trust services.

ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI TS 119 511 V1.1.1. Written by Asphalia.