Time Stamp Service

Time Stamp Service

The Time-stamp service is an optional feature to support assertions of proof that a document has been archived before a particular time. To do this, it implements the standard RFC3161 (external reference link: RFC 3161: Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP)):

 

When archiving a document, it sends a time stamp request (TSQ) to the configured time stamp authority (TSA). The TSQ contains a hash value of the content (content digest) archived. The TSA sends back a time stamp response (TSR) including a signed value for the content digest with a time stamp. The TSR is then stored in the archive with the document.

By default, the TSR is only stored at initial archiving of a document (create): When the document is updated, the TSR is not renewed, and TSR validations of the content may fail.

For the name of the TSR file stored the storage path configuration is applied (see Storage path). The file name is BASE32-encoded.

Example: The encoded filename is MRQXIYJOORZXE.data. When decoding, the file name would be: data.tsr.data.

In order to contact a TSA, a HTTP proxy can be configured.

 

When using the protocol service, the following commands can be recorded for time stamp operations:

  • createTSR

  • tsrValidated

  • tsrAndContentValidated