Introduction to DigSigs

DigSigs are open, industry standard ISO/IEC 20248 compliant tokens for securely communicating the authenticity and integrity of claims between two parties. DigSigs are designed to be native to the domain of barcodes and RFID.

What is a DigSig?

A DigSig is a binary data string which consists out of an encoded data structure AND a digital signature which is used in the verification process. For a binary string to be recognized as a DigSig it should adhere to the international standard ISO/IEC 20248.

Any user who encounters a DigSig out in the wild can decode the content of a DigSig and then also verify the integrity and the authenticity of the contents by following the rules defined in the standard. Such a verifier would then be garaunteed of the following:

Z

the content of the data was created by a known issuer;

Z

the sender cannot deny having issued the data; and

Z

the content of the data was not altered in transit (integrity).

DigSigs have been specifically designed for the domains of barcodes and RFID but it can also be used in many other domains where small data carriers are used and the authenticity and integrity of the data is important.

DigSig Envelopes

DigSigs come in two flavors, also known as envelope types. These are “uri” envelopes or “raw” envelopes. Simply put, “uri” envelopes are raw envelopes prefixed with an online-verifier URI.

Both “uri” and “raw” envelopes can be verified in an offline manner using an ISO/IEC 20248 compliant offline verification application.

URI Envelope

https://v1.20248.info/?wJgJlkAAg-IwMEQCIEJtiSgnOIoOxQICWz-OHCctNI1fZ_l62mGpq-Vfca6XAiB2SghwBaPtGVqPFvmuJHG1M4Lwgt2LY1jokq4_Y44R51h4qQO9KYW1lcyBNY1BoZXJzb24AAAA

Use URI envelopes when you are not very constrained in terms of space, and you want to allow members of the public to still be able to scan and verify your DigSigs using a generic 2D barcode scanner. Even though the DigSig will be verified using an online check it makes verification possible to a wider audience.

RAW ENVELOPE

wJgJlkAAg-IwMEQCIEJtiSgnOIoOxQICWz-OHCctNI1fZ_l62mGpq-Vfca6XAiB2SghwBaPtGVqPFvmuJHG1M4Lwgt2LY1jokq4_Y44R51h4qQO9KYW1lcyBNY1BoZXJzb24AAAA

 

RAW envelopes should be used in scenarios where you are constrained in terms of space and where you would expect a DigSig aware scanner to be reading your medium. This includes smaller barcodes and RFID solutions.