LTANS WG: ARI

1
LTANS WG ARI

• November 9, 2006

2
LTANS WG (ltans) ARI

• Goals of I-D
• best practices of System architecture?
• integration of LTA with other systems
  (authentication, protocols like WebDAV, Trusted
  Time Stamp Sources, storage systems, etc.)?
• how are LTAP and ERS used in a system?
• renewals (hash and signature)?
• handling of availability, integrity and
  confidentiality in an example system?
• Implementation details (and tips)?

3
LTANS WG (ltans) ARI

• Main questions for the system
• Availability
• How long shall the data be stored
• Integrity
• is the object still the one that has been
  entrusted to the electronic archive?
• protect against modifications by the system or an
  attacker
• can the owner proof to another party that the
  data has not been altered since archiving
  (including not been altered by himself)?
• Confidentiality
• how can the data best be protected against
  disclosure to e.g. service providers operating
  the system or
• during transmission of data to and from the
  archive?

4
LTANS WG (ltans) ARI

• Known System Design approaches for the LTANS
  archiving and signature renewal
• Stand-alone solution
• Loosely coupled with a normal archiving system.
• Integrated directly in an existing archiving
  system

5
LTANS WG (ltans) ARI

• Stand-alone solution(simple operations store,
  retrieval, signature renewal and delete)

user / client
WebDAV, File System
LTAP Service
Long Term Archive Protocol
Authentication
Trusted Timestamp source
Management of data files
signature renewal
6
LTANS WG (ltans) ARI

• 2. Loosely coupled with archiving system

user / client
LTAP
LTA with signature renewal
File storage
Trusted Timestamp source
7
LTANS WG (ltans) ARI

• 3. Integrated deeply in an archiving system

user / client
LTAP Service
LTAP
WebDAV, File System
other protocols
Authentication
Management of metadata, data files and storage
Other functionality Search, Retention, etc.
Trusted Timestamp source
signature renewal
File storage
8
LTANS WG (ltans) ERS

• LTAP Service Components

Authentication
LTAP Service
Long Term Archive Protocol
LTAP Service
Management of data files, builds hash trees and
manages Evidence Records
signature renewal
Trusted Timestamp source
File storage
9
LTANS WG (ltans) ARI

• next steps
• shall we continue or abandon?
• possible result would be Informational RFC