Bibliography [1] IDTA 01001 Specification of the Asset Administration Shell. Part 1: Metamodel, Version 3.2. Industrial Digital Twin Association (IDTA). Online. Available: https://industrialdigitaltwin.org/en/content-hub/aasspecifications [2] IDTA 01002 Specification of the Asset Administration Shell. Part 2: Application Programming Interfaces, Version 3.2. Industrial Digital Twin Association (IDTA). Online. Available: https://industrialdigitaltwin.org/en/content-hub/aasspecifications [3] IDTA 01003-a Specification of the Asset Administration Shell. Part 3a: Data Specification – IEC 61360, Version 3.1. Industrial Digital Twin Association (IDTA), January 2025. Online. Available: https://industrialdigitaltwin.io/aas-specifications/IDTA-01003-a/v3.1/index.html [4] IDTA-01005 Specification of the Asset Administration Shell. Part 5: Package File Format, Version 3.1. Industrial Digital Twin Association (IDTA), January 2025. Online. Available: https://industrialdigitaltwin.io/aas-specifications/IDTA-01005/v3.1/index.html [5] Tom Preston-Werner. Semantic Versioning. Version 2.0.0. Online. Available: https://semver.org/spec/v2.0.0.html [6] Secure Download Service, Plattform Industrie 4.0, October 2020. Online. Available: https://www.plattform-i40.de/IP/Redaktion/EN/Downloads/Publikation/secure_downloadservice.pdf [7] Dataspace Protocol 2024-01. Edited by Sebastian Steinbuß, Julia Pampus, James Marino. International Dataspaces Association. Online. Available: https://docs.internationaldataspaces.org/ids-knowledgebase/v/dataspace-protocol [8] Vincent Hu, David Ferraiolo, Rick Kuhn, Adam Schnitzer, Kenneth Sandlin, Robert Miller and Karen Scarfone, “Guide to Attribute Based Access Control (ABAC) Definition and Considerations”, NIST Special Publication 800-162, Jan. 2014. [Online]. Available: http://dx.doi.org/10.6028/NIST.SP.800-162 [9] “eXtensible Access Control Markup Language (XACML)”, OASIS Standard, Version 3.0, 22. Jan. 2013, [Online]. Available: http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.pdf [10] ITU-T Recommendation X.509 (2005), ISO/IEC 9594-8:2005, Information technology - Open Systems Interconnection - The Directory: Public-key and attribute certificate frameworks. [11] Decentralized Identifiers (DIDs) v1.0, Core architecture, data model, and representations; https://www.w3.org/TR/2022/REC-did-core-20220719/; W3C; July 19, 2022 [12] IEEE Standard for Local and Metropolitan Area Networks—Secure Device Identity. IEEE Std 802.1AR-2018, August 2018. [13] CEN-CENELEC. EN 18239:2026, Digital Product Passport - Access rights management, information system security, and business confidentiality. [14] CEN-CENELEC. EN 18246:2026, Digital product passport - Data authentication, reliability and integrity. [15] CEN-CENELEC. EN 18221:2026, Digital product passport - Data storage, archiving, and data persistence. European Standard. [16] CEN-CENELEC. EN 18222:2026, Digital Product Passport - Application Programming Interfaces (APIs) for the product passport lifecycle management and searchability. [17] European Parliament and Council. Regulation (EU) 2024/1781 of 13 June 2024 establishing a framework for the setting of ecodesign requirements for sustainable products, amending Directive (EU) 2020/1828 and Regulation (EU) 2023/1542 and repealing Directive 2009/125/EC. Official Journal of the European Union, 2024. Online. Available: https://eur-lex.europa.eu/eli/reg/2024/1781/oj [18] European Commission. Commission Implementing Regulation (EU) 2026/1778 of 16 July 2026 laying down the implementation arrangements for the digital product passport registry set up under Regulation (EU) 2024/1781 of the European Parliament and of the Council. Official Journal of the European Union, 2026. Online. Available: https://eur-lex.europa.eu/eli/reg_impl/2026/1778/oj [19] European Parliament and Council. Regulation (EU) No 910/2014 of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC. Official Journal of the European Union, 2014. Online. Available: https://eur-lex.europa.eu/eli/reg/2014/910/oj [20] European Parliament and Council. Regulation (EU) 2024/1183 of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. Official Journal of the European Union, 2024. Online. Available: https://eur-lex.europa.eu/eli/reg/2024/1183/oj [21] CEN-CENELEC. EN 18219:2026, Digital product passport - Unique identifiers. [22] CEN-CENELEC. EN 18220:2026, Digital product passport - Data carriers. [23] CEN-CENELEC. EN 18223:2026, Digital Product Passport - System interoperability. [24] European Parliament and Council. Regulation (EU) 2024/2847 of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act). Official Journal of the European Union, 2024. Online. Available: https://eur-lex.europa.eu/eli/reg/2024/2847/oj [25] A. Backman, J. Richer, and M. Sporny. HTTP Message Signatures. RFC 9421. Internet Engineering Task Force, February 2024. Online. Available: https://www.rfc-editor.org/rfc/rfc9421.html [26] R. Polli and L. Pardue. Digest Fields. RFC 9530. Internet Engineering Task Force, February 2024. Online. Available: https://www.rfc-editor.org/rfc/rfc9530.html