ISO/DIS 22144, Authenticity of Information – Content Credentials
Description
ISO/TC 46/SC 9 and ISO/TC 171/SC 2 are liaisons and as such this document is being shared. This document is in the ISO Fast-Track process which means with a positive vote, it goes to publication.
‘ISO/DIS 22144, Authenticity of information – Content Credentials‘ describes the technical aspects of the C2PA architecture known as Content Credentials. It is a model for storing and accessing cryptographically verifiable information whose trustworthiness can be assessed based on a defined trust model. Included in this document is information about how to create and process a C2PA Manifest and its components, including the use of digital signature technology for enabling tamper-evidence as well as establishing trust.
Question: Do you approve the technical content of ISO/DIS 22144?
Decision:
Voted ‘No’ with comments.
Comments:
Since this is very technical and referred to various other ISO standards and technical metadata, we think the details are fine, as I saw in Chapter 16 C2PA Standard Assertions. However, we would like to remind to double check the versions of those listed under Chapter “2 Normative references.”
1). Those listed ISO standards might be consistent even though the date could be very old (e.g., 2001 for TIFF). A double check will be helpful.
E.g., ISO 16684-3, for JSON-LD serialization of XMP has a 2021 edition. It is fine without giving the year in this standard, but it should be consistent on if to give the year and provide the URL or not for each ISO standard in this chapter (E.g., “ISO/IEC 646:1991” is listed here with the year provided).
2) “Dublin Core™ Metadata Element Set, Version 1.1: Reference Description should be updated. It is clear under this webpage that “Please note that this version of the specification for the Dublin Core Element Set is somewhat out of date. Please see the DCMI Metadata Terms for the current documentation of its fifteen terms.” So, this standard ISO/DIS 22144 should make sure to follow the current one.
3) The W3C’s might also need to have a decision by the committee on if to use the one updated, even though it might be in the finalized period. (E.g., W3C on PNG now is 3rd edition)
So, we should recommend this ISO/DIS 22144 to have a revision on this chapter “2 Normative references.”
It should be noticed that this chapter has the introduction that “For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.” Maybe some issues above in #1) can be ignored, but the issue in #2 should be solved.