1. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. FSML and SDML Milton M. Anderson Financial Services Technology Consortium miltonma@gte.net W3C Signed-XML Workshop April 15-16, 1999

2. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Signature Block namestring true 1.5 dnamestring base64string … above repeats in pairs… valuestring namestring valuestring namestring number namestring

3. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Signature Block -- continued valuestring base64string

4. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Signature Types check -- first signature on a check endorsement -- first endorsement on a check deposit -- signature on a deposit slip co-endorse -- subsequent signature on an endorsement counter-endorse -- subsequent signature on an endorsement and on the first signature log-signature -- signature by card on log bankacct -- signature by bank on account credentials bank -- signature by bank on bank documents, e.g. cashier’s check certification -- signature by bank to certify a check endorse-over -- endorsement to third party generic -- first signature on a document co-sign -- subsequent signature on doc, but not previous signatures counter-sign -- subsequent signature on document and signatures witness -- signs only other signatures

5. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Check Block namestring true 1.5 numstring valuestring namestring amountstring valuestring valuestring

6. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Legal Notice This instrument subject to check law This instrument subject to U.S. Treasury check law

7. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Account Block namestring true 1.5 valuestring numstring valuestring number

8. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Account Restrictions, Signature Restrictions minimum amount nnnnnn.nn ccc maximum amount nnnnnn.nn ccc n signatures required n signatures required above amount nnnnnn.nn ccc special processing currency ccc duration pnynmnd is a list of the following permitted signature types chk:end:dep:cos:cts:coe:cte:log:act:crt:edo:bnk:gen:wit

9. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Action Block namestring true 1.5 function = payment, transfer, deposit, certify, stop, inquiry, present, re-present reason = process, resend, test, info, or return

10. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. FSML Document a sequence of one or more blocks and/or nested documents signed_echeck_doc ::= ‘ ’ acct_sig_group bank_sig_group { } ‘ ’ acct_sig_group ::= [ ] bank_sig_group ::= [ ]

11. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Hashing Generate and prefix nonce to block Calculate the hash over the block, including block start and end tags Carriage returns, line feeds, and trailing white space is not included Leading white space and embedded spaces are included SGML entities are left untranslated Hashes are converted to base 64 PKCS 1 formats are used for RSA signatures Repeat for each block Hash and sign the contents of Character set for FSML is 0x0A, 0x0D, 0x20-0x7E No extra spaces are permitted within tags

12. Copyright © 1999, Financial Services Technology Consortium. All rights reserved. Conclusion FSML allows composition of signed documents FSML allows parts of signed documents to be removed Hashing and signing can be implemented on smart cards Hardware generated nonce strengthens hash algorithms Smart card can log key data from signed document User can control insertion of personal information by hardware Signature types and signature restrictions allow bank to control use of credentials