Marc Sel

Using the Semantic Web to Generate Trust Indicators

This article discusses how Semantic Web technology such as RDF and SPARQL can define and compute trust indicators related to Trust Service Providers (TSPs) using independent public domain information. Such Trust Indicators can complement the purely cryptographic trust evaluations that are common today.

Secure Financial Reporting through XBRL and Electronic Signatures

This paper will discuss where financial reporting is heading, how such financial reporting according to EU standards should be done in XML and XBRL technology, and why electronic signatures such as XMLDSIG and XAdES should secure this.

A Comparison of Trust Models

This article presents a comparative study of trust models, a term often used without a well-defined specification. Nevertheless, most automated enterprise processes rely on it. Examples include Automated Border Control gates, e-Government systems such as Tax-On-Web, electronic banking and money transfer and many more. We first present a short introduction to trust models. We then propose key terms to describe how trust can be established, and illustrate how these terms can be applied. Finally we compare the trust models created by ICAO PKD, EU eIDAS, US FICAM and Bitcoin, and present a conclusion.

Improving Interpretations of Trust Claims

This paper presents an approach to semantic modelling of large-scale trust ecosystems to improve the interpretations of trust claims. The problem of interpreting trust claims is described and relevant types of reasoning are analysed. A model based on \(\mathcal {SROIQ}\) and OWL Description Logic is proposed. The novel elements are the creation of classes and properties on the basis of legal and regulatory sources that extend existing vocabularies (W3C, Dublin Core), and the use of these classes and properties to create assertions that represent information harvested from on-line information sources. The resulting model allows automated classification via a reasoner, as well as queries that support use cases from various actors. A general approach is presented, as well as results from a prototype implementation based on the European eIDAS and US FICAM trust ecosystems.

A pan-European Framework on Electronic Identification and Trust Services for Electronic Transactions in the Internal Market

This article is summarizing the results of the European study SMART 2012/0001 commissioned by the European Commission..

Internet of Trucks and Digital Tachograph – Security and Privacy Threats

Integration of digital tachographs with emerging technologies, such as Intelligent Transport System (ITS) or fleet management system, extends the initial mission of tachographs. In addition to supporting the enforcement of social and commercial rules, they improve driver experience and increase transport and maintenance efficiency.

Worldbank’s Secure eID Toolkit for Africa

This article provides a high-level functional and technical overview of the Worldbank’s Toolkit project ’Secure Electronic Identity for Africa’. The Toolkit project was initiated by the Worldbank in 2012, with sponsorship of the French government. Its aim is to provide African nations with a guidebook addressing all required elements to establish a secure electronic identity system in their country. The Toolkit is expected to be publicly announced in 2013. Implementation funding is to be provided through a PPP (Public Private Partnership) including participation from the Worldbank.

e-Identity – Monetization and Interoperability

This article discusses different ways to approach the value of identity. It attempts to modelise the economic value of identity, and to demonstrate the added value of making use of government provided identities.

Demystifying SAP security

This article attempts to demystify the feature-rich SAP security functions, to demonstrate how they can cooperate to build a strong security posture, and how to avoid some classic pitfalls.

The security of mass transport ticketing systems

Mass transport ticketing systems in most developed countries are making a rapid transition from ‘traditional’ paper or carton-based ticketing systems towards a contactless ‘smart card‘ based approach. This article discusses the main IT security aspects of mass transport ticketing systems (metro, bus, etc).