Terminology

Digital trust glossary

A concise guide to terms used across eIDAS, PKI, electronic signatures, validation, policies and trust services.

A–E

Advanced electronic signature (AdES)
An electronic signature meeting the linkage, identification, control and change-detection requirements in eIDAS.
ASiC
An ETSI container format that associates one or more data objects with signatures or timestamps.
Certificate authority (CA)
An entity that issues and manages public-key certificates; it may perform one part of a wider trust service.
Certificate Policy (CP)
A named set of rules indicating the applicability of certificates to a community or class of application with common security requirements.
Certification Practice Statement (CPS)
A statement of the practices a certification authority employs in issuing, managing, revoking and renewing certificates.
Conformity assessment body (CAB)
A body accredited to perform defined conformity-assessment activities. Its exact role depends on the applicable scheme.
Digital signature
A cryptographic mechanism that can support integrity and origin authentication. Legal electronic-signature concepts also include people, intent and context.
DSS
Digital Signature Service, the European Commission-supported open-source Java library for signature creation, augmentation and validation.
eIDAS
The EU framework for electronic identification and trust services, based on Regulation (EU) No 910/2014 as amended.
Electronic seal
Electronic data attached to or logically associated with other data to support origin and integrity for a legal person.
Electronic signature
Electronic data attached to or logically associated with other electronic data and used by a signatory to sign.

F–P

List of Trusted Lists (LOTL)
The European Commission’s signed list identifying the EU/EEA national trusted lists.
Object identifier (OID)
A globally unique hierarchical identifier used in certificates, policies, algorithms and other technical structures.
OCSP
The Online Certificate Status Protocol, used to obtain status information about identified certificates.
PAdES, XAdES and CAdES
ETSI families of advanced-signature profiles for PDF, XML and CMS-based signatures respectively.
PKI
Public key infrastructure: the policies, roles, services, systems and controls used to issue and manage certificates and keys.

Q–Z

Qualified trust service
A trust service meeting the applicable requirements and holding qualified status through the relevant assessment and supervisory process.
Qualified trust-service provider (QTSP)
A provider that supplies one or more qualified trust services and has been granted qualified status by the relevant supervisory body.
Relying party
A person or system that relies on a certificate, signature, seal, trust service or associated evidence.
Trusted list
An authoritative, signed structure describing trust-service providers, services and status information under a defined scheme.
Trust service
A regulated or contractual service that supports electronic transactions, such as certificate issuance, timestamps, validation, preservation or registered delivery.
Validation policy
The rules, constraints, trust inputs and interpretation used to determine and report a validation outcome.

Start with the requirement

Need a clearer route forward?

Set out the service, jurisdiction, standards or policy documents involved and the decision that needs to be made.

Contact TrustAssert