RFC3161 timestamp developer toolkit and API creating strong legal evidence

Strong evidence for data authentication

Enterprise Enablers – DigiStamp Products and Services

SecureTime Component	DigiStamp Products and Services
	New Enterprise Plug-in Sign and time stamp a PDF file. Customers primarily in the European Union who are using time stamps in their e-Invoicing process (EEI) can use this toolkit to sign and time stamp PDF files. See details here.
	Desktop tools for individual signers include DigiStamp IP Protector software or more recently, third party tools like Adobe Acrobat, e-Lock and others. More information here.
	API toolkit for adding time stamps to your internal systems - work flow, data collection, etc. DigiStamp's integration toolkits historically were the primary method of adding time stamps to your existing business applications. Due to wide acceptance of the time stamping standard, this function is supported in more software like BouncyCastle, S/MIME Library (SFL). DigiStamp does not charge for using its API toolkit. More information below.
	The gateway allows many employees and internal systems to securely share access to DigiStamp's Internet-based time stamp service. No software or accounting is necessary at individual workstations. The gateway could even be replaced with on-site hardware or a different time stamp vendor, and there would be no impact to existing users. The software version of Gateway is free with a 1-year volume contact here. The cost for each Gateway hardware device is $1,200 (this is in beta testing today). Additional information below.
	Core of our operations is the web services approach to providing IETF RFC 3161 time stamps. Prices and account setup are here. An evaluation account allows you to access our test time stamp servers, see: Account Set-Up. More information below.
	We rarely sell these servers. Because there are two key advantages to using the Internet-based service: cost and ease of access. In a few cases an in-house server may be preferred. More details here

Web-Based time stamp servers

System developers can use the open interface of our Internet-based timestamp servers to provide the timestamp service within their existing software. If you've already built digital signature capabilities into your system -- with in-house software or third-party programs like BouncyCastle, S/MIME Library (SFL) -- you can probably configure your current system to use DigiStamp. Here is a list of software alternatives.

The data that you time stamp can be in any format. Only the data hash value (e.g SHA512 hash) is transmitted to time stamp servers; your data is never transmitted outside of your environment.

Evaluation account setup

There is no charge to use our test servers for your evaluation. Account Set-Up.

The technical details

During your evaluation you may want to know some of the technical details and your options that are described here.

DigiStamp uses the latest cryptographic technology to ensure the highest levels of reliability (RSA 2048 bit keys, SHA 512, etc.). Redundant, geographically separated servers are used to ensure continual access to DigiStamp’s service. You select one of the DigiStamp server locations; however, in the event the selected server is temporarily unavailable, the client software can automatically failover to another server. DigiStamp continually monitors server utilization to ensure availability and response time. See the description of our certified hardware and the audit process; the DigiStamp approach removes all possible human tampering from the process and puts the trust into audited, NIST certified hardware.

Enterprise Server Plug-in

The DigiStamp toolkits are provided to organizations that want to integrate RFC3161 time stamps into their existing applications. Our users have reported that it takes just a few hours to integrate our toolkit and retrieve their first time stamp. There is no cost for our toolkits, we do charge for the timestamp transactions. We give you access to our no-charge test servers for your evaluation. Click here to create an evaluation account and retrieve a copy of the toolkit. Click here to download the PDF product sheet.

DigiStamp provides the application programmer a toolkit of software services to:

Configure your Internet communications preferences for reliable access to the time stamp servers (time-outs, SSL, failover, etc.)
Create a time stamp request and send it via the Internet to the time stamp server(s).
Verify the time stamp signature and your trust of the public certificate.

The toolkit is delivered in four versions depending on client platform and programming language choice:

Java Overview and examples. JavaDoc for API's.

Java PDF
Beta Program
2009-04-15 Overview. JavaDoc for API's.

C / C++ Overview and examples.

COM .NET C# Overview and examples.

	Gateway to time stamp services
	The DigiStamp SecureTime Gateway is forward time stamp request from within your organization to DigiStamp Internet-base servers. The Gateway presents a standards compliant HTTP interface to your internal customer for them to retrieve time stamps (IETF RFC 3161). The reason you would use the SecureTime Gateway is: To allow access internally to a time stamp server that does not require authentication. Therefore, your clients only need to know the DNS entry name for the time stamp service and individual clients to not need an account (authority is available to all users that can access the Gateway). The Gateway can serve as a temporary method of supplying time stamps to your internal clients. If you change your approach at a later time (for example, you purchase a time stamping hardware) then your clients would not need to change the name that they had become accustomed to using. The change would be limited to replacing the Gateway and/or redirecting the DNS entry. The software gateway is delivered as a web components packaged in a standard web application archive (WAR) file. This web component is added to your J2EE application.