Timestamping Authority

Timestamping

When recording the date and time of a signature, we are talking about a timestamp. When a document is signed via eZsign, the timestamp is based on the eZmax clock by default.

Certified Timestamping

Generated by a trusted third party using FIPS compliant secure hardware, certified timestamping allows you to assert with a high degree of certainty that the date and timestamp is accurate and has not been tampered with. The obligations that third parties must comply with in order to claim the status of timestamping authority are found in RFC 3161.

When you activate the certified timestamping, a third party certifies the date and time of the signature. As a third party is involved in the signature process, it is important to know that the time taken for each signature is a few seconds longer.

Types of T imestamping Authority

1. No: The timestamp uses the clock of the eZmax system (default option)

2. Best effort: The timestamp is certified by a third party according to the best effort principle. When signing, if the third party is unable to confirm the date and time (eg failure of their system or inability to establish a connection), the timestamp will use the clock from the eZmax system.

3. Mandatory: The timestamp is certified by a third party. When signing, if the third party is unable to confirm the date and time (failure of their system, for example, or inability to establish a connection), it will be impossible to complete the signature since the certified timestamp is mandatory.

Configure the Timestamping Authority

In your Preferences

• Click on the icon with your initials in the right corner of your eZsign account.

• Click on "Change your Preferences".

• Select the desired timestamping Authority. This will be applied to all your folders unless there are any contradiction (see information section below).

For the Entire Company

• The administrator of your eZsign account can complete this configuration.

By Types of Shared Folders

• The administrator of your eZsign account can complete this configuration.

Information

When there is a contradiction between 2 types of timestamping authority, eZsign will prioritize the types in this order: Mandatory > Best Effort > No. For example, if the timestamping authority is "No" in a user’s profile, but it is "Mandatory" in the global configurations, the system will prioritize the "Mandatory" timestamping authority.

NOTE: When viewing a shared folder, the timestamping authority is displayed but you cannot change it. Once the folder is created, you cannot change the type of timestamping authority.