INTERNATIONAL ISO/IEC STANDARD 18014-1 Second edition 2008-09-01 Information technology Security techniques Time-stamping services Part 1: Framework Technologies de I'information - Techniques de sécurité - Services d'estampillage de temps - Partie 1: Cadre genéral Reference number ISO/IEC 18014-1:2008(E) ISo IEC @ISO/IEC2008 py IHS under lic itted without license from IHS Not for Resale ISO/IEC 18014-1:2008(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by IsO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below COPYRIGHTPROTECTEDDOCUMENT @ ISO/IEC2008 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, IsO's member body in the country of the requester. ISO copyright office Case postale 56. CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail [email protected] Web www.iso.org Published in Switzerland @ ISO/IEc 2008 - All rights reserved I without license from IHS Not for Resale ISO/IEC 18014-1:2008(E) Contents Page Foreword. Introduction 1 Scope 2 Normative references ... 3 Terms and definitions 4 Symbols and abbreviated terms 5 General..... 5.1 Background and Summary .. 5.2 Services involved in Time-stamping.... 5.3 5.4 Use of Time-Stamps .... 5.5 Generation of a Time-Stamp Token ... 5.6 Verification of a Time-Stamp Token... 5.7 Time..Stamp renewal........... .6 6 6.1 Time-Stamp Request Transaction.. 6.2 Time-Stamp Verification Transaction... 7 Message Formats.. .8 7.1 Time-stamp request.... 7.2 Time-stamp response.. ..10 7.3 Time-stamp verification 12 7.4 Extension fields .12 7.4.1 ExtHash extension.... 7.4.2 ExtMethod extension... .13 7.4.3 ExtRenewal extension... 13 Annex A (normative) AsN.1 Module for time-stamping ....... .14 Annex B (normative) Excerpt of the Cryptographic Message Syntax ... 20 B.1 Introduction.... ...20 B.2 General Overview... 20 B.3 General Syntax.... .20 B.4 Data Content Type. 21 B.5 Signed-data Content Type . B.5.1 SignedData Type... 22 B.5.2 EncapsulatedContentlnfo Type... 23 B.5.3 .Signerlnfo Type.......... 23 B.5.4 Message Digest Caicuiation Process .. B.5.5 Signature Generation Process ... 25 B.5.6 Signature Verification Process... 25 B.6 Useful Attributes B.6.1 Content Type 26 B.6.2 Message Digest. 26 B.6.3 Countersignature. 27 Bibliography 28 CopyrightIntenationalOganzastanadzation Allrightsreserved ili ted without license from IHS Not for Resale