EN 9300-005:2017

Aerospace series - LOTAR - LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data - Part 005: Authentication and Verification

EN 9300-005 describes the fundamentals and concepts of authentication and verification of the integrity of digital documents and their content during the archiving and retrieval processes. The Data Domain Parts EN 9300-x00 will specify qualification measures for the content of the document. The fundamentals given in this document cover the requirements, methods and recommendations for their implementation within an archiving system.

Luft- und Raumfahrt - LOTAR - Langzeit-Archivierung und -Bereitstellung digitaler technischer Produktdokumentationen, wie zum Beispiel von 3D-, CAD- und PDM-Daten - Teil 005: Authentifizierung und Verifizierung

Série aérospatiale - LOTAR - Archivage long terme et récupération des données techniques produits numériques telles que CAD 3D et PDM - Partie 005 : Authentification et Vérification

Aeronavtika - LOTAR - Dolgotrajno arhiviranje in iskanje digitalne tehnične dokumentacije o izdelkih, kot so podatki o 3D, CAD in PDM - 005. del: Avtentikacija in overjanje

Standard EN 9300-005 opisuje temeljne smernice in načela avtentikacije in overjanja integritete digitalnih dokumentov ter njihove vsebine pri postopkih arhiviranja in iskanja. Deli standarda EN 9300-x00 o podatkovnih domenah bodo določali ukrepe za kvalifikacijo vsebine dokumenta. Temeljne smernice, podane v tem dokumentu, zajemajo zahteve, metode in priporočila za njihovo
uvedbo znotraj sistema arhiviranja.

General Information

• Status: Published
• Publication Date: 03-Oct-2017
• Withdrawal Date: 29-Apr-2018
• ICS: 01.110 - Technical product documentation
• ICS: 35.240.30 - IT applications in information, documentation and publishing
• ICS: 35.240.60 - IT applications in transport
• ICS: 49.020 - Aircraft and space vehicles in general
• Technical Committee: ASD-STAN - Aerospace
• Drafting Committee: ASD-STAN/D 7/WG 1 - LOTAR Long Term Archiving and Retrieval of Digital Technical Product Data
• Current Stage: 6060 - Definitive text made available (DAV) - Publishing
• Start Date: 04-Oct-2017
• Completion Date: 04-Oct-2017
• Ref Project: SIST EN 9300-005:2017 - Aerospace series - LOTAR - LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data - Part 005: Authentication and Verification

Overview - EN 9300-005:2017 (LOTAR)

EN 9300-005:2017 is the LOTAR (LOng Term Archiving and Retrieval) part that defines authentication and verification fundamentals for long-term archiving of digital technical product documentation (3D, CAD, PDM). Published by CEN for the aerospace sector, it covers the requirements, methods and implementation recommendations to prove the originality, integrity and identity of archived electronic documents across ingest, storage and retrieval processes.

Key topics and technical requirements

• Authentication of users and documents
  • User authentication options: PKI (Public Key Infrastructure) is recommended for higher evidential value; user key/password is acceptable as an initial quality level with lower legal weight.
  • Document authentication uses electronic signatures (engineering signatures and time signatures) to link signatory identity and document content.
• Electronic signatures
  • Defined as an encrypted hash code plus metadata (time, owner). Signatures must be uniquely linked to the signatory, identifiable, under signatory control, and detect subsequent data changes.
  • Distinction between engineering signatures (volitional, quality attestations) and time signatures (certified time-stamping).
• Hash codes and integrity
  • Hash functions act as digital fingerprints. Requirements: one-way functions and practical collision resistance. The standard notes commonly used hashes (e.g., RIPEMD-160, SHA-1 historically; SHA-224/256/384/512 recommended for long-term use) and advises renewing algorithms in line with current best practice.
• Qualification: verification and validation
  • Verification: checks authenticity against legal/admissibility rules; applied across the LTA process.
  • Validation: confirms content integrity by comparing validation properties (document-type specific fingerprints or attributes).
  • Both use level schemes (0–2) to indicate risk: Level 0 = no rules, Level 1 = mandatory rules/properties, Level 2 = mandatory + optional (minimized risk).
• Trust services
  • Roles such as signer, verifier, trust center/TSP and their services (certificates, time-stamping) are described for supporting evidential chains.

Applications - practical value

• Ensures legally defensible archives of CAD, 3D and PDM artifacts for aerospace lifecycle and regulatory compliance.
• Guides implementation of secure ingest, conversion, signature creation, and retrieval processes in long-term digital archives.
• Supports risk management for data reuse (design reuse), product liability, and evidence in legal proceedings.

Who should use this standard

• Aerospace OEMs, suppliers and maintenance organizations
• Archivists and configuration managers handling CAD/PDM data
• IT/security architects implementing LOTAR-compliant archives
• Software vendors, service providers and Trust Service Providers (TSPs)

Related standards

• EN 9300 (all parts) - LOTAR framework and Data Domain Parts (EN 9300-x00) for content qualification
• EN 9300-003, EN 9300-007 - referenced term/definition sources
• Relevant international norms referenced for signatures and verification (as cited within EN 9300-005)

Keywords: EN 9300-005, LOTAR, long term archiving, authentication, verification, electronic signature, hash code, PKI, CAD archive, PDM data.

Standards Content (Sample)

2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.Luft- und Raumfahrt - LOTAR - Langzeit-Archivierung und -Bereitstellung digitaler technischer Produktdokumentationen, wie zum Beispiel von 3D-, CAD- und PDM-Daten - Teil 005: Authentifizierung und VerifikationSérie aérospatiale - LOTAR - Archivage long terme et récupération des données techniques produits numériques telles que CAD 3D et PDM - Partie 005 : Authentification et VérificationAerospace series - LOTAR - LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data - Part 005: Authentication and Verification49.020Letala in vesoljska vozila na splošnoAircraft and space vehicles in general35.240.30Uporabniške rešitve IT v informatiki, dokumentiranju in založništvuIT applications in information, documentation and publishing01.110L]GHONHTechnical product documentationICS:Ta slovenski standard je istoveten z:EN 9300-005:2017SIST EN 9300-005:2017en,fr,de01-december-2017SIST EN 9300-005:2017SLOVENSKI
STANDARD
EUROPEAN STANDARD NORME EUROPÉENNE EUROPÄISCHE NORM
EN 9300-005
October
t r s y ICS
r sä s s râ
u wä t v rä u râ
u wä t v rä x râ
v {ä r t r English Version
Aerospace series æ LOTAR æ LOng Term Archiving and Retrieval of digital technical product documentation such as
uDá CAD and PDM data æ Part
r r wã Authentication and Verification Série aérospatiale æ LOTAR æ Archivage long terme et récupération des données techniques produits numériques telles que CAD
uD et PDM æ Partie
r r w ã Authentification et Vérification
Luftæ und Raumfahrt æ LOTAR æ LangzeitæArchivierung und æBereitstellung digitaler technischer Produktdokumentationená wie zum Beispiel von
uDæá CADæ und PDMæDaten æ Teil
r r wã Authentifizierung und Verifizierung This European Standard was approved by CEN on
s x July
t r s yä
egulations which stipulate the conditions for giving this European Standard the status of a national standard without any alterationä Upætoædate lists and bibliographical references concerning such national standards may be obtained on application to the CENæCENELEC Management Centre or to any CEN memberä
translation under the responsibility of a CEN member into its own language and notified to the CENæCENELEC Management Centre has the same status as the official versionsä
CEN members are the national standards bodies of Austriaá Belgiumá Bulgariaá Croatiaá Cyprusá Czech Republicá Denmarká Estoniaá Finlandá Former Yugoslav Republic of Macedoniaá Franceá Germanyá Greeceá Hungaryá Icelandá Irelandá Italyá Latviaá Lithuaniaá Luxembourgá Maltaá Netherlandsá Norwayá Polandá Portugalá Romaniaá Serbiaá Slovakiaá Sloveniaá Spainá Swedená Switzerlandá Turkey and United Kingdomä
EUROPEAN COMMITTEE FOR STANDARDIZATION COMITÉ EUROPÉEN DE NORMALISATION EUROPÄISCHES KOMITEE FÜR NORMUNG
CEN-CENELEC Management Centre:
Avenue Marnix 17,
B-1000 Brussels
t r s y CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Membersä Refä Noä EN
{ u r ræ r r wã t r s y ESIST EN 9300-005:2017

(informative)
Use cases and recommended solutions
for issues of authentication and verification . 16
Figures Figure 1 — Check and renew signature document. 8 Figure 2 — Concept of repair in data preparation / ingest process and retrieval process . 12 Figure 3 — Creation and check of electronic signatures . 14 Figure 4 — Validity of electronic signatures . 14 Figure 5 — Verification period of electronic signatures . 15
5.1.2 Authentication by User Key and Password EN 9300 recommends authentication policies based on current business practices for user keys and passwords as the initial user authentication quality level. Advantages:  legal recommendations for documentation of the release process are fulfilled;  there is no need for a PKI and no additional hardware for identification is required. Disadvantage:  the validity in the context of lawsuits is less than under PKI. 5.2 Authentication of Document and Content
Applying authentication to a document and its content will improve its evidential weight in the context of legal proceedings. The authenticity of a digital document can be proved with the document hash code. In case of a change of content, a new electronic document must be created and authenticated. 5.2.1 Requirements to Hash Codes For signing and verification a hash code will be used like a digital finger print. To ensure that no security gaps occur, the hash code must fulfil the following criteria:  it should practically be impossible to find a collision (where two or more different digital documents generate an identical hash code);  creating hash codes shall be an one way function. It should not be possible to find a file that generates a given hash code. NOTE From a theoretical point of view collisions are inevitable. SIST EN 9300-005:2017
...