ETSI - European Telecommunications Standards Institute
适用范围
"The present document specifies policy requirements relating to the operation of Time-stamping Authorities (TSAs). The present document defines policy requirements on the operation and management practices of TSAs such that subscribers and relying parties may have confidence in the operation of the time-stamping services. These policy requirements are primarily aimed at time-stamping services used in support of qualified electronic signatures (i.e. in line with article 5.1 of the European Directive on a community framework for electronic signatures) but may be applied to any application requiring to prove that a datum existed before a particular time. These policy requirements are based upon the use of public key cryptography@ public key certificates and reliable time sources. The present document may be used by independent bodies as the basis for confirming that a TSA may be trusted for providing time-stamping services. The current document addresses requirements for TSAs issuing time-stamp tokens which are synchronized with Coordinated universal time (UTC) and digitally signed by the TSA. Subscriber and relying parties should consult the TSA's practice statement to obtain further details of precisely how this time-stamp policy is implemented by the particular TSA (e.g. protocols used in providing this service). The current document does not specify: ? protocols used to access the TSA; NOTE 1: A time-stamping protocol is defined in RFC 3161 and profiled in TS 101 861. ? how the requirements identified herein may be assessed by an independent body; ? requirements for information to be made available to such independent bodies; ? requirements on such independent bodies. NOTE 2: See CEN Workshop Agreement 14172 ""EESSI Conformity Assessment Guidance""."