Appendix 4: Service schemas
This is a short summary of DSS-related schemas included in the service definition and what they are used for:
oasis-dss-core-schema-v1.0-os
https://docs.oasis-open.org/dss/v1.0/oasis-dss-core-schema-v1.0-os.xsd
It contains the definition of the request and response protocols for signing and verifying the signature of XML documents and other data. It also defines an XML timestamp format, and an XML signature property for use with these protocols. Finally it defines how the transport and security of the protocols should be.
Redtrust's service covers the signature generation part without taking into account verification and timestamping, which are scheduled for future development.
oasis-dss-vissig-schema-v1.0-cd1
https://docs.oasis-open.org/dss-x/profiles/visualsig/v1.0/cd01/oasis-dss-vissig-schema-v1.0-cd1.xsd
It contains the profile definition for the visual representation of the signature. The visual signature representation allows embedding visible signature features in documents as part of a digital signature operation and also validating these features as part of the signature verification operation.
Redtrust's service provides for embedding the visual representation of the signature in PDF documents, regardless of verification.
oasis-dssx-1.0-profiles-sigpolicy-schema-cd01
Signatures may contain explicit signature policy identifiers, which establish rules for the generation and verification of these signatures. This profile extends the core of the protocol and specifies a set of operations for managing the generation and verification of electronic signatures under the rules established by the signature policy.
The Redtrust service covers the signature protocol part of the profile without taking into account the signature verification.
oasis-dssx-1.0-profiles-vr-cd1
https://docs.oasis-open.org/dss-x/profiles/verificationreport/oasis-dssx-1.0-profiles-vr-cd1.xsd
It contains the protocol definition and processing profile of the DSS Verification Protocol specified in Section 4 of the core profile. It allows you to return individual signature verification reports for each signature in a verification request and to include detailed information on the different steps taken during verification.
The Redtrust service doesn't provide for this profile, it's included for future developments where verification will be included as part of the service features.