Time Stamp

Datacenter with replication, and mirrored architecture, 24/7 availability with SLA 99%.

A qualified support team ready to assist and offer support in streamlining integration and use.

All QualiSign Portal services are available for hiring in a quick and simple manner.

"Art.6 - It is the competence of the National Observatory, a research unit of the Ministry of Science and Technology, to generate the Brazilian Legal Time, as well as to disseminate it through the media, observing the provisions of current legislation and treaties, agreements and international acts to which Brazil is a party."

It should be clarified that ReTemp/BLT (Time Stamp Network certified to the Brazilian Legal Time) is currently the only existing national solution that guarantees the inviolability of the chronological record for the issuance of a document or the execution of a financial transaction in electronic media.

Any document and/or digital signature that includes a time stamp, adding legal value pursuant to the legislation, will only be valid whether the date/time is referenced to a ASS - Authentication and Synchronization System that produces a certificate confirming traceability to the Brazilian Legal Time, allowing it to be audited and inquired by interested parties at any time (Source: National Observatory).

A Time Certificate Authority (TSA) is an entity on which users of Time Stamp services rely, in order to issue Time Stamps. A TSA has overall responsibility for providing the Time stamp, a set of attributes provided by the reliable part of time that, associated with a digital signature, confers proof of its existence in a certain period. (Source: ITI)

A Time Stamp is used to specify the time when the digital or electronic signature is made. This is necessary to properly validate the signature.

If the Signature Time Stamp is present, the application that validates (checks) the signature, will confirm that the certificates involved in validating the signature were valid upon the signature. If there is no Time Stamp for the signature, the validity of the certificate is checked as soon as the signature is validated, which is not always acceptable.

E.g.:

Certificate is valid as of January 1, 2008

Certificate is valid by December 31, 2010

Signature is made on July 4, 2009

Signature is checked on April 30, 2012

With Time Stamp: signature is ok (signature was made during the validity period of the certificate).

No Time Stamp: signature is not valid (certificate is expired at the time of signature verification).

Time stamp should be used if the signature is used (to prove the authenticity of the document or the originating data author), in the long term, that is, more than one or more days.

A time stamp is not required when, for example, you send a short-signed note to a colleague and this note must be read and deleted on the same day it was written.

Of course, a Time Stamp cannot be used when it is not supported by digital signature technologies or when the Time Stamp Authority (TSA) is not available.

On the other hand, the Time Stamp is mandatory when you create signed documents for a wide distribution or for long-term storage and for archival purposes. The Time Stamp is also used when signing executable modules for software applications.

Time Stamp, also called TSP protocol (Timestamp protocol) is set by RFC 3161 and is part of the PKI or ICP (Public Key Infrastructure), based on X.509 certificates

As such, the Time Stamp can be used when signing data using PKCS # 7 (CMS), signing PDF documents and signing XML documents using XAdES

The Time Stamp is not used in S/MIME (despite the fact that it is based on PKI technology).

The Time Stamp is not available in OpenPGP, as it is not based on X.509 certificates. MS Authenticode (the technology used to sign applications and libraries on Windows) also uses Time Stamp, however this Time Stamp is different from the TSP set by RFC 3161.

A Time Certification Authority (TSA) is an entity that users of Time Stamp services trust to issue Time Stamps. TSA has overall responsibility for providing the Time Stamp, a set of attributes provided by the reliable part of time that, associated with a digital signature, confers proof of its existence in a certain period.

In practice, a document is produced and its content is encrypted. Then, it receives the attributes year, month, day, hour, minute and second, attested in the form of the signature made with a digital certificate, thus serving to prove its authenticity. TSA attests not only to the timing of a transaction, but also its content.

In practice, a document is produced and its content is encrypted. Then, it receives the attributes year, month, day, hour, minute and second, attested in the form of the signature made with a digital certificate, thus serving to prove its authenticity. TSA attests not only to the timing of a transaction, but also its content.

Note: The TSA Digital Certificate is not a common certificate. They are issued by Certification Authorities. These certificates must be properly validated and are issued and used only for Time Stamp

The Time Stamp tells the entity to validate the signature when the signature was made. As you know, the certificate is not everlasting. It has a validity period, that is, the certificate can only be used for its purpose, for some period of time

If you use the expired certificate to sign the data, that signature will not be accepted as valid. If the signature validator finds a Time Stamp, it will know when the signature was made and will check that the certificate was valid at the time.

If there is no date and time, no one knows, then, when the signature was made, and it is assumed that it could be done at any time, possibly after the certificate has expired

There are two possible outcomes with this situation: either the signature is claimed to be invalid, or it is assumed that the signature was made at the time of validation. In the second case, if the signature certificate is expired, at the time of signature validation, the signature will not be accepted as valid either. And if the signature is expected to be validated somewhere in the future, then it is likely that this problem will occur sooner or later

Like any signature, a Time Stamp (issued by a TSA) can become invalid if the certificate used to generate the Time Stamp is revoked (claimed as invalid by the issuing CA)

QualiSign Portal Time Stamps are issued by the QualiSoft Time Stamp Authority (TSA-QualiSoft). TSA-QualiSoft's Time Stamps use the ReTemp / BLT, (Time Stamp Network Certified to Brazilian Legal Time) from the National Observatory - ON, a service that makes it possible to obtain data / time to be used in digital documents, authentic, secure and auditable in accordance with current security standards (IOPS-Internet Official Protocol Standards, RFC 3161), ensuring that:

a) The issued time stamps are certified to the Brazilian Legal Hour, thanks to the use of certificates in accordance with the International Telecommunications Union (ITU-T) X.509 standard and equipment meeting the FIPS-140-1 level 2 and FIPS- standards. 140-1 level 3 of the NIST (National Institute of Standards and Technology) in the USA. FIPS (Federal Information Processing Standard) is the name under which these standards are published;

In the event of a fraudulent attempt to change the date / time, the Stamps stop working immediately, only returning to normal condition after being certified again by the Secondary Synchronizer of the National Observatory - ON;

b) Time stamps are secure by using, on the equipment of the National Observatory - ON, digital certificates of asymmetric cryptography issued by ICP-BRASIL (Brazilian Public Key Infrastructure)

c) Time stamps are auditable, as attribute certificates according to the X .509 standard are used