Time stamping system

• US 7,650,508 B2
• Filed: 09/10/2002
• Issued: 01/19/2010
• Est. Priority Date: 09/28/2001
• Status: Active Grant

• Current Assignee: Ncipher Security Limited
• Original Assignee: nCipher Corporation Limited (Thales SA)
• Inventors: Harvey, Ian Nigel
• Primary Examiner(s): Simitoski; Michael J
• Assistant Examiner(s): RAHIM, MONJUR
• Application Number:
  US10/488,979
• Publication Number:
  US 20050125672A1
• Time in Patent Office: 2,688 Days
• Field of Search: 380/51, 713/177, 713/178, 713/193, 713/400, 340/825
• US Class Current: 713/178
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A secure time stamping device uses multiple virtual clocks, each of which may be individually accessed and calibrated. A digital key is associated with each of the clocks. All of the virtual clocks use a common timer (130), with the actual clock output being generated by applying calibration information (124) for that clock to the timer (130) output. A user wishing to have a message time stamped presents that message along with information as to which virtual clock to be used at a device input (92). The appropriate calibration information (124) is then selected and the timer (130) output is compensated accordingly. The incoming message plus the resultant time are concatenated and automatically signed using the key (126) applicable to that particular virtual clock.

Claims

1. A time-stamping device for digitally time-stamping input data, comprising:

(a) a free-running timer having a timer output;

(b) a memory means for storing a plurality of sets of timer calibration information, each defining characteristics of a respective virtual clock;

(c) means for calibrating each virtual clock by updating the respective timer calibration data set in the memory means;

(d) compensation means for receiving the timer output and, for a given user-selected virtual clock, applying the respective timer calibration data set thereto to adjust said output and to generate a corresponding selected virtual clock output; and

(e) signature means for generating a time-stamped output in dependence upon the selected virtual clock output and the input data.

2. The time-stamping device as claimed in claim 1 in which each virtual clock has associated with it a respective signature key, the signature means generating the time-stamped output using the key associated with the selected virtual clock.

3. The time-stamping device as claimed in claim 2 in which the signature means concatenates the selected virtual clock output and the input data, and signs the resultant concatenated data.

4. The time-stamping device as claimed in claim 2 in which each signature key comprises a private part of a public/private key pair.

5. The time-stamping device as claimed in claim 2 including key access control means for authorizing requests for key management operations.

6. The time-stamping device as claimed in claim 1 including time-stamp access control means for authorizing user requests to time-stamp the input data in accordance with a given virtual clock output.

7. The time-stamping device as claimed in claim 1 including virtual clock access control means for authorizing requests to modify the calibration information for a given virtual clock.

8. The time-stamping device as claimed in claim 1 comprising a hardware module.

9. A method of digitally time-stamping input data, comprising:

(a) selecting one set of timer calibration data from a plurality of such stored sets, each set defining the characteristics of a respective virtual clock;

(b) adjusting an output of a free-running timer by applying a respective timer calibration set thereto to generate a corresponding selected virtual clock output; and

(c) signing data representative of both the selected virtual clock output and the input data to generate a time-stamped output.

10. The method as claimed in claim 9 in which each virtual clock has associated with it a respective signature key, the method including generating the time-stamped output using the key associated with the selected virtual clock.

11. The method as claimed in claim 10 including concatenating the selected virtual clock output and the input data, and signing the resultant concatenated data.

12. The method as claimed in claim 10 in which each signature key comprises a private part of a public/private key pair.

13. The method as claimed in claim 10 including checking the credentials of requests for key management operations.

14. The method as claimed in claim 9 including checking credentials of user requests to time stamp the input data in accordance with a given virtual clock output.

15. The method as claimed in claim 9 including checking the credentials of requests to modify the calibration information or a given virtual clock.