XAdES4J: a java library for XAdES signature services

As comunicações electrónicas são cada vez mais o meio de eleição para negócios entre entidades e para as relações entre os cidadãos e o Estado (e-government). Esta diversidade de transacções envolve, muitas vezes, informação sensível e com possível valor legal. Neste contexto, as assinaturas electrónicas são uma importante base de confiança, fornecendo garantias de integridade e autenticação entre os intervenientes. A produção de uma assinatura digital resulta não só no valor da assinatura propriamente dita, mas também num conjunto de informação adicional acerca da mesma, como o algoritmo de assinatura, o certificado de validação ou a hora e local de produção. Num cenário heterogéneo como o descrito anteriormente, torna-se necessária uma forma flexível e interoperável de descrever esse tipo de informação. A linguagem XML é uma forma adequada de representar uma assinatura neste contexto, não só pela sua natureza estruturada, mas principalmente por ser baseada em texto e ter suporte generalizado. A recomendação XML Signature Syntax and Processing (ou apenas XML Signature) foi o primeiro passo na representação de assinaturas em XML. Nela são definidas sintaxe e regras de processamento para criar, representar e validar assinaturas digitais. As assinaturas XML podem ser aplicadas a qualquer tipo de conteúdos digitais identificáveis por um URI, tanto no mesmo documento XML que a assinatura, como noutra qualquer localização. Além disso, a mesma assinatura XML pode englobar vários recursos, mesmo de tipos diferentes (texto livre, imagens, XML, etc.). À medida que as assinaturas electrónicas foram ganhando relevância tornou-se evidente que a especificação XML Signature não era suficiente, nomeadamente por não dar garantias de validade a longo prazo nem de não repudiação. Esta situação foi agravada pelo facto da especificação não cumprir os requisitos da directiva 1999/93/EC da União Europeia, onde é estabelecido um quadro legal para as assinaturas electrónicas a nível comunitário. No seguimento desta directiva da União Europeia foi desenvolvida a especificação XML Advanced Electronic Signatures que define formatos XML e regras de processamento para assinaturas electrónicas não repudiáveis e com validade verificável durante períodos de tempo extensos, em conformidade com a directiva. Esta especificação estende a recomendação XML Signature, definindo novos elementos que contêm informação adicional acerca da assinatura e dos recursos assinados (propriedades qualificadoras). A plataforma Java inclui, desde a versão 1.6, uma API de alto nível para serviços de assinaturas digitais em XML, de acordo com a recomendação XML Signature. Contudo, não existe suporte para assinaturas avançadas. Com este projecto pretende-se desenvolver uma biblioteca Java para a criação e validação de assinaturas XAdES, preenchendo assim a lacuna existente na plataforma. A biblioteca desenvolvida disponibiliza uma interface com alto nível de abstracção, não tendo o programador que lidar directamente com a estrutura XML da assinatura nem com os detalhes do conteúdo das propriedades qualificadoras. São definidos tipos que representam os principais conceitos da assinatura, nomeadamente as propriedades qualificadoras e os recursos assinados, sendo os aspectos estruturais resolvidos internamente. Neste trabalho, a informação que compõe uma assinatura XAdES é dividia em dois grupos: o primeiro é formado por características do signatário e da assinatura, tais como a chave e as propriedades qualificadoras da assinatura. O segundo grupo é composto pelos recursos assinados e as correspondentes propriedades qualificadoras. Quando um signatário produz várias assinaturas em determinado contexto, o primeiro grupo de características será semelhante entre elas. Definiu-se o conjunto invariante de características da assinatura e do signatário como perfil de assinatura. O conceito é estendido à verificação de assinaturas englobando, neste caso, a informação a usar nesse processo, como por exemplo os certificados raiz em que o verificador confia. Numa outra perspectiva, um perfil constitui uma configuração do serviço de assinatura correspondente. O desenho e implementação da biblioteca estão também baseados no conceito de fornecedor de serviços. Um fornecedor de serviços é uma entidade que disponibiliza determinada informação ou serviço necessários à produção e verificação de assinaturas, nomeadamente: selecção de chave/certificado de assinatura, validação de certificados, interacção com servidores de time-stamp e geração de XML. Em vez de depender directamente da informação em causa, um perfil — e, consequentemente, a operação correspondente — é configurado com fornecedores de serviços que são invocados quando necessário. Para cada tipo de fornecedor de serviços é definida um interface, podendo as correspondentes implementações ser configuradas de forma independente. A biblioteca inclui implementações de todos os fornecedores de serviços, sendo algumas delas usadas for omissão na produção e verificação de assinaturas. Uma vez que o foco do projecto é a especificação XAdES, o processamento e estrutura relativos ao formato básico são delegados internamente na biblioteca Apache XML Security, que disponibiliza uma implementação da recomendação XML Signature. Para validar o funcionamento da biblioteca, nomeadamente em termos de interoperabilidade, procede-se, entre outros, à verificação de um conjunto de assinaturas produzidas por Estados Membros da União Europeia, bem como por outra implementação da especificação XAdES.

Development of a penetration test for timber impregnation products for use in old buildings

This paper studies the application of commercial biocides to old maritime pine timber structures (Pinus pinaster Ait.) that have previously been impregnated with other products. A method was developed in the laboratory to be used in situ to determine the impregnation depth achieved by a new generation biocide product applied to timber from an old building. This timber had once been treated with an unknown product difficult to characterize without extensive analysis. The test was initially developed in laboratory conditions and later tested on elements of the roof structure of an 18th century building. In both cases the results were promising and mutually consistent with penetration depths for some treatments reaching 2.0 cm. The application in situ proved the tests viability and simplicity of execution giving a clear indication on the feasibility of possible re-treatments.

Impact of a 1755-like tsunami in Huelva, Spain

Coastal areas are highly exposed to natural hazards associated with the sea. In all cases where there is historical evidence for devastating tsunamis, as is the case of the southern coasts of the Iberian Peninsula, there is a need for quantitative hazard tsunami assessment to support spatial planning. Also, local authorities must be able to act towards the population protection in a preemptive way, to inform 'what to do' and 'where to go' and in an alarm, to make people aware of the incoming danger. With this in mind, we investigated the inundation extent, run-up and water depths, of a 1755-like event on the region of Huelva, located on the Spanish southwestern coast, one of the regions that was affected in the past by several high energy events, as proved by historical documents and sedimentological data. Modelling was made with a slightly modified version of the COMCOT (Cornell Multi-grid Coupled Tsunami Model) code. Sensitivity tests were performed for a single source in order to understand the relevance and influence of the source parameters in the inundation extent and the fundamental impact parameters. We show that a 1755-like event will have a dramatic impact in a large area close to Huelva inundating an area between 82 and 92 km(2) and reaching maximum run-up around 5 m. In this sense our results show that small variations on the characteristics of the tsunami source are not too significant for the impact assessment. We show that the maximum flow depth and the maximum run-up increase with the average slip on the source, while the strike of the fault is not a critical factor as Huelva is significantly far away from the potential sources identified up to now. We also show that the maximum flow depth within the inundated area is very dependent on the tidal level, while maximum run-up is less affected, as a consequence of the complex morphology of the area.

Formaldehyde in indoor air: a public health problem?

Formaldehyde was the first air pollutant, which already in the 1970s emerged as a specifically non-industrial indoor air quality problem. Yet formaldehyde remained an indoor air quality issue and the formaldehyde level in residential indoor air is among the highest of any indoor air contaminant. Formaldehyde concentrations in 4 different indoor settings (schools, office buildings, new dwellings and occupied dwellings) in Portugal were measured using Photo Ionization Detection (PID) equipment (11,7 eV lamps). All the settings presented results higher than the reference value proposed by Portuguese legislation. Furthermore, occupied dwellings showed 3 units with results above the reference. We could conclude that formaldehyde presence is a reality in monitored indoor settings. Concentration levels are higher than the Portuguese reference value for indoor settings and these can indicate health problems for occupants.

Paleomagnetic study of the Messejana Plasencia dyke (Portugal and Spain): A lower Jurassic paleopole for the Iberian plate

The only Iberian lower Jurassic palcomagnetic pole come from the "Central Atlantic Magmatic Province"-related Messejana Plasencia dyke, but the age and origin of its remanence have been a matter of discussion. With the aim of solving this uncertainty, and to go further into a better understanding of its emplacement and other possible tectonic features, a systematic paleomagnetic investigation of 40 sites (625 specimens) distributed all along the 530 kin of the Messejana Plasencia dyke has been carried out. Rock magnetic experiments indicate PSD low Ti-titanomagnetite and magnetite as the minerals carrying the NRM. The samples were mostly thermally demagnetized. Most sites exhibit a characteristic remanent component of normal polarity with the exception of two sites, where samples with reversed polarities have been observed. The paleomagnetic pole derived from a total of 35 valid sites is representative of the whole structure of the dyke, and statistically well defined, with values of PLa = 70.4 degrees N, PLo = 237.6 degrees E, K= 47.9 and A(95) = 3.5 degrees. Paleomagnetic data indicates that: (i) there is no evidence of a Cretaceous remagnetization in the dyke, as it was suggested; (ii) most of the dyke had a brief emplacement time; furthermore, two dyke intrusion events separated in time from it by at least 10,000 y have been detected; (iii) the high grouping of the VGPs directions suggests no important tectonic perturbations of the whole structure of the dyke since its intrusion time; (iv) the pole derived from this study is a good quality lower Jurassic paleopole for the Iberian plate; and (v) the Messejana Plasencia dyke paleopole for the Iberian plate is also in agreement with quality-selected European and North American lower Jurassic paleopoles and the magnetic anomalies data sets that are available for rotate them to Iberia.

Shareholder wealth creation in response to announcements of acquisitions of unlisted firms: Evidence from Spain

We investigate shareholder value creation of Spanish listed firms in response to announcements of acquisitions of unlisted companies and compare this experience to the purchase of listed firms over the period 1991–2006. Similar to foreign markets, acquirers of listed targets earn insignificant average abnormal returns, whereas acquirers of unlisted targets gain significant positive average abnormal returns. When we relate these results to company and transaction characteristics our findings diverge from those reported in the literature for other foreign markets, as our evidence suggests that the listing status effect is mainly associated with the fact that unlisted firms tend to be smaller and lesser–known firms, and thus suffer from a lack of competition in the market for corporate control. Consequently, the payment of lower premiums and the possibility of diversifying shareholders’ portfolios lead to unlisted firm acquisitions being viewed as value–orientated transactions.

The US actuarial balance model for the pay-as-you-go system and its application to Spain

The aim of this paper is to formulate an approximation of the US actuarial balance model and apply it to the Spanish public retirement pension system under various scenarios in order to determine a consistent indicator of the system's financial state comparable to those used by the most advanced social security systems. This will enable us to answer the question as to whether there is any justification for reforming the pension system in Spain. This type of actuarial balance uses projections to show future challenges to the financial side of the pension system deriving basically from ageing, the projected increase in longevity and fluctuations in economic activity. If one is compiled periodically it can provide various indicators to help depoliticize the management of the pay-as-you-go system by bringing the planning horizons of politicians and the system itself closer together.

Individual pension information: Recommendations for the case of Spain based on the experiences of other countries

The aim of this paper is to establish some basic guidelines to help draft the information letter sent to individual contributors should it be decided to use this model in the Spanish public pension system. With this end in mind and basing our work on the experiences of the most advanced countries in the field and the pioneering papers by Jackson (2005), Larsson et al. (2008) and Sunden (2009), we look into the concept of “individual pension information” and identify its most relevant characteristics. We then give a detailed description of two models, those in the United States and Sweden, and in particular look at how they are structured, what aspects could be improved and what their limitations are. Finally we make some recommendations of special interest for designing the model for Spain.

Integration of biomonitoring and instrumental techniques to assess the air quality in an industrial area located in the coastal of Central Asturias, Spain

Throughout the world, epidemiological studies were established to examine the relationship between air pollution and mortality rates and adverse respiratory health effects. However, despite the years of discussion the correlation between adverse health effects and atmospheric pollution remains controversial, partly because these studies are frequently restricted to small and well-monitored areas. Monitoring air pollution is complex due to the large spatial and temporal variations of pollution phenomena, the high costs of recording instruments, and the low sampling density of a purely instrumental approach. Therefore, together with the traditional instrumental monitoring, bioindication techniques allow for the mapping of pollution effects over wide areas with a high sampling density. In this study, instrumental and biomonitoring techniques were integrated to support an epidemiological study that will be developed in an industrial area located in Gijon in the coastal of central Asturias, Spain. Three main objectives were proposed to (i) analyze temporal patterns of PM10 concentrations in order to apportion emissions sources, (ii) investigate spatial patterns of lichen conductivity to identify the impact of the studied industrial area in air quality, and (iii) establish relationships amongst lichen conductivity with some site-specific characteristics. Samples of the epiphytic lichen Parmelia sulcata were transplanted in a grid of 18 by 20 km with an industrial area in the center. Lichens were exposed for a 5-mo period starting in April 2010. After exposure, lichen samples were soaked in 18-MΩ water aimed at determination of water electrical conductivity and, consequently, lichen vitality and cell damage. A marked decreasing gradient of lichens conductivity relative to distance from the emitting sources was observed. Transplants from a sampling site proximal to the industrial area reached values 10-fold higher than levels far from it. This finding showed that lichens reacted physiologically in the polluted industrial area as evidenced by increased conductivity correlated to contamination level. The integration of temporal PM10 measurements and analysis of wind direction corroborated the importance of this industrialized region for air quality measurements and identified the relevance of traffic for the urban area.

Contribuição para a definição de procedimentos de inspeção de edifícios correntes após um sismo

Trabalho Final de Mestrado para obtenção do grau de Mestre em Engenharia Civil

Accessibility and Local Development: Interaction between Cross-border Accessibility and Local Development in Portugal and Spain

One of de EU major concerns is cohesion and cross-border regional development. Usually cross-border regions are less dynamic, acting as bottlenecks mainly in peripheral territories. This paper is focused on the Portuguese-Spanish border using socio-economic and accessibility data. It considers Spatial Econometrics to produce statistical evidence on the relationship between accessibility and development at a local scale. A pilot study is conducted on North and Center region using variables such as population age, graduation characteristics, migrations, unemployment and daily accessibility to main towns in future this evaluation will be applied to the entire cross-border area between Portugal and Spain.