System and methods for generating trusted and authenticatable time stamps for electronic documents

• US 20020056042A1
• Filed: 01/10/2002
• Published: 05/09/2002
• Est. Priority Date: 06/23/1999
• Status: Abandoned Application

• Current Assignee: Symmetricom Incorporated (Microchip Technology Incorporated)
• Original Assignee: Symmetricom Incorporated (Microchip Technology Incorporated)
• Inventors: Robinson, David, van der Kaay, Erik H., Dowd, Gregory L., Tyo, David
• Application Number:
  US10/043,811
• Publication Number:
  US 20020056042A1
• Time in Patent Office: Days
• US Class Current: 713/178
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 2463/121 Timestamp
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A trusted time infrastructure system provides time stamps for electronic documents from a local source. The system comprises a trusted master clock, a trusted local clock, and a network operations center. The trusted master clock and network operations center are located within secure environments controlled by a trusted third party. The trusted local clock may be located in an insecure environment. The trusted master clock is certified to be synchronized with an accepted time standard, such as a national time server. The trusted local clock, which issues time stamps, is certified to be synchronized with the trusted master clock. Time stamps and certifications are signed by the issuing device using public key cryptography to enable subsequent authentication. The network operations center logs clock certifications and responds to requests for authentication of time stamps.

Claims

1. A time stamp certifying the existence of a digital document at a time, the time stamp comprising:

an identification of an issuing clock certified through a chain of at least one signed certificates to be synchronized with an accepted standard source of time, wherein each of the signed certificates certifies that two clocks are synchronized;

an identification of the time, wherein the identification of the time is provided by the issuing clock;

a document identifier based upon which the identity of the digital document can be verified; and

a cryptographic signature of a set of data comprising;

the identification of the issuing clock,

the identification of the time, and

the document identifier.

2. The time stamp of claim 1, further comprising at least one the signed certificates.

3. The time stamp of claim 1, further comprising the signed certificates.

4. The time stamp of claim 1, wherein the document identifier is the document.

5. The time stamp of claim 1, wherein at least one of the signed certificates is cryptographically signed.

6. The time stamp of claim 1, further comprising a link through which the chain of certificates can be accessed.

7. The time stamp of claim 6, wherein the link comprises an identification of a certifying clock.

8. The time stamp of claim 6, wherein the link farther comprises an identification of the time.

9. The time stamp of claim 1, wherein the chain is of at least two certificates.

10. A method of creating an authenticatable time stamp certifying the existence of a digital document at a time, the method comprising:

providing an identification of a trusted source of time certified through a chain of at least one signed certificates to be synchronized with an accepted standard source of time, wherein each of the signed certificates certifies that two clocks are synchronized;

providing an identification of the time, wherein the identification of the time is provided by the trusted source of time;

providing a document identifier based upon which the identity of the digital document can be verified; and

generating a cryptographic signature by cryptographically signing a set of data comprising;

the identification of the trusted source of time, the identification of the time, and the document identifier.

11. The method of claim 10, further comprising providing at least one the signed certificates.

12. The method of claim 10, further comprising providing the signed certificates.

13. The method of claim 10, wherein the document identifier is the document.

14. The method of claim 10, wherein at least one of the signed certificates is cryptographically signed.

15. The method of claim 10, further comprising concatenating the identification of the trusted source of time, the identification of the time, and the document identifier.

16. The method of claim 13, further comprising additionally concatenating at least one of the signed certificates.

17. The method of claim 10, further comprising providing a link through which the chain of certificates can be accessed.

18. The method of claim 17, wherein the link comprises an identification of a certifying clock.

19. The method of claim 18, wherein the link further comprises an identification of the time.

20. The method of claim 10, wherein the chain is of at least two certificates.

21. A trusted clock configured to provide time, the trusted clock certified through a chain of at least one cryptographically signed certificates to be synchronized with an accepted standard, wherein each of the signed certificates certifies that two clocks have been determined to be synchronized.

22. The trusted clock of claim 21, wherein each of the signed certificates identifies a time at which the two clocks have been determined to be synchronized.

23. The trusted clock of claim 21, wherein each of the signed certificates identifies the two clocks.

24. The trusted clock of claim 21, wherein the chain is of at least two certificates.

26. The certificate of claim 25, further comprising a measured temporal offset between the first clock and the second clock, wherein the first set of data further comprises the measured temporal offset.

27. The certificate of claim 25, further comprising an expiration time, wherein the first set of data further comprises the expiration time.

28. The certificate of claim 25, further comprising a second cryptographic signature created by either the first clock or the second clock, wherein the first set of data further comprises the second cryptographic signature.

29. The certificate of claim 28, wherein the first cryptographic signature is created by the first clock and the second cryptographic signature is created by the second clock.

25. A certificate certifying that two clocks are synchronized, the certificate comprising:

an identification of a first clock;

an identification of a second clock;

an identification of a time at which the first clock and the second clock have been determined to be synchronized; and

a first cryptographic signature of a first set of data comprising;

the identification of the first clock,

the identification of the second clock, and

the identification of the time.