Terms and abbreviations

  • eIDAS – abbreviation for Regulation No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market. This regulation repeals European Union directive 1999/93/EC. The current and valid version of eIDAS was published by the European Parliament and European Council on July 7, 2014.

  • ETSI – European Telecommunications Standards Institute is an independent, not-for-profit organization for standardization in information and communications technology (ICT) in Europe with world-wide projection.

  • HTTPS – Hypertext Transfer Protocol Secure is a protocol used for secure communication over a computer network. HTTPS uses the HTTP protocol along with SSL or TLS. HTTPS is mainly used in communication between a web browser and a web server. Provides authentication, protection of the privacy and integrity of the exchanged data. The standard server-side port is 443 TCP.

  • ISO – the International Organization for Standardization creates international standards (ISO) and other documents in all areas of normalization except the electrotechnical area.

  • PAdES – digitally signed PDF documents based on the ISO-32000-1 standard or standards of the PAdES[4][8] family.

  • CMS, PKCS7, CAdES – digitally signed (internally or externally) general data in CMS/PKCS7/CAdES format. It may be e.g. signed e-mail communication, audio or video recordings, etc. One of the examples of internally signed CAdES[5][10] data are DMIS data messages.

  • XAdES – digitally signed XML documents based on the XAdES[3][9][11] family standard.

  • PDF – a file format developed to present documents independent of software and hardware where they were created. Standardized as ISO 32000-1:2008.

  • PDF/A – official archiving version of the PDF file format. Narrows down the PDF format definition so that files saved as PDF/A can be opened without information loss in all future versions of software tools. Standardized as ISO 19005:1-2008, ISO 19005-2:2011 and ISO 19005-3:2012.

  • Document – signed PDF document or other signed data.

  • ISDOC – Information System Document - electronic invoicing format used in the Czech Republic.

  • DMIS – Data Message Information System (Informační systém datových schránek – ISDS).

  • OID – abbreviation of Object Identifier, identifier mechanism standardized by the International Telecommunications Union (ITU) and ISO/IEC for naming any object, concept, or “thing” with a globally unambiguous persistent name.

  • OCSP – Online Certificate Status Protocol (OCSP) is an Internet protocol used to get the revocation status of an X.509 digital certificate. It is described in RFC 6960[13]. It was created as an alternative to certificate revocation lists (CRL), specifically addressing certain problems associated with using CRLs in a public key infrastructure (PKI).

  • 602 ID – registered user (client) account where the purchased services and products are activated.

  • SDK – Software development kit is a collection of software development tools in one installable package. They ease the creation of applications for certain software packages, frameworks, platforms, computer systems, gaming consoles, operating systems or a similar platform.

  • TSL – Trusted List is a list of trusted certificate issuers (qualified trust service providers).

  • HSM – Hardware Security Module is a physical computing device that safeguards and manages generated and stored certificate keys (private or public).

  • Certificate – X509 data structure containing a public key and details of the key owner, key issuer, permitted manner of use and other relevant information specified by the corresponding CA policy.

  • CA – Certification authority, provider of services of electronic certificates for electronic signatures/seals/website certificates.

  • TLS – Transport Layer Security and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols designed to provide communications security over a computer network for services such as web browsing, email and other data transmissions.

  • URI – Uniform Resource Identifier is a string of characters with a defined structure that unambiguously identifies a specific resource (a document or service). Such identification enables interaction with representations of the resource over a computer network, typically the Internet,

  • WSDL – Web Services Description Language is a language that describes functions provided by a web service, and also describes the input and output of these functions (in other words, what the web service provides and how to request it). Because a web service basically communicates using the SOAP protocol, WSDL usually describes SOAP communication. WSDL is based on the XML format.

  • PSD2 - PSD2 is an abbreviation for Payment Service Directive 2 (European Parliament and Council Directive (EU) 2015/2366 of 25 November 2015 on payment services in the internal market), which replaces the previous directive. More information about the directive here.

  • QTSP - QTSP - Qualified Trust Service Provider as stipulated by eIDAS (No. 910/2014) and national legislation (for the Czech Republic No. 297/2016 Coll.)

Reference

[1] ETSI EN 319 102-1 v1.0.0 – Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures.

[2] ETSI EN 319 102-1 v1.1.1 – Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures.

[3] ETSI TS 103 171 – Electronic Signatures and Infrastructures (ESI); XAdES Baseline Profile.

[4] ETSI TS 103 172 - Electronic Signatures and Infrastructures (ESI); PAdES Baseline Profile.

[5] ETSI TS 103 173 - Electronic Signatures and Infrastructures (ESI); CAdES Baseline Profile.

[6] ETSI TS 103 174 - Electronic Signatures and Infrastructures (ESI); ASiC Baseline Profile.

[7] ETSI TS 319 401 - Electronic Signatures and Infrastructures (ESI); General Policy Requirements for Trust Service Provider.

[8] ETSI EN 319 142-1 - Electronic Signatures and Infrastructures (ESI); PAdES Digital Signatures.

[9] ETSI EN 319 132 - Electronic Signatures and Infrastructures (ESI); XAdES Digital Signatures.

[10] ETSI EN 319 122 - Electronic Signatures and Infrastructures (ESI); CAdES Digital Signatures.

[11] ETSI EN 319 162 - Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC).

[12] RFC3647 – Internet X.509 Public Key Infrastructure – Certificate Policy and Certification Practices Framework.

[13] RFC 6960 - X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP.

[14] ETSI TS 119 495 V1.4.1 - Electronic Signatures and Infrastructures (ESI); Sector Specific Requirements; Qualified Certificate Profiles and TSP Policy Requirements under the payment services Directive (EU) 2015/2366.