Timestamping definition<\/h3>\n\n\n\n
In order to achieve the same level of reliability as that provided by the timestamping of a certificate by a registration authority, the initial regulations called for the participation of a trusted third party in the electronic timestamping process. Timestamping was defined for the first time in article 1 of the decree of 20 April 2011 as the \u201cmechanism associating a representation of data at a particular time and attesting to the existence of the representation of this data at this instant by means of a timestamp token [which] includes a stamp from the electronic timestamping service provider established using the signature data of the timestamp token\u201d. This definition of electronic timestamping therefore presupposes the use of a trusted service provider<\/a>, which de facto excludes certain forms of electronic timestamping.<\/p>\n\n\n\n A few years later, in 2014, the European Union regulation on electronic identification and trusted services for electronic transactions in the internal market, known as the eIDAS regulation, was adopted. It aims to allow the free circulation of timestamp tokens and therefore facilitate trade for more than 400 million people. In this regulation, electronic timestamping is defined more largely as \u201cdata in electronic form which binds other data in electronic form to a particular time establishing evidence that the latter data existed at that time\u201d.<\/p>\n\n\n\n Electronic timestamping is a process whereby a date and time can be electronically bound to other data in electronic form to certify, either with or without the intervention of a trust service provider, of its existence or execution at a given moment and also to attest to its content at that precise time.<\/p>\n\n\n\n The eIDAS regulation mentions two categories of electronic timestamps:<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n The regulation does not give a specific definition of simple electronic timestamping. It is understood that a timestamping process that does not meet the conditions set out in the European eIDAS regulation is of a non-qualified type.<\/p>\n\n\n\n Conversely, article 42 defines qualified electronic timestamping as fulfilling the following conditions:<\/p>\n\n\n\n Regarding this last condition, the eIDAS regulation<\/a> leaves room for innovation and the development of a method ensuring a level of security equivalent to the advanced electronic signature or the advanced electronic seal. It is up to the trust service provider to demonstrate that its method meets the requirements set out in the eIDAS regulation.<\/p>\n<\/div>\n\n\n\n Electronic timestamping (with use of a trust service provider) is a \u201cprocess which links the representation of a data to a particular time\u201d. To apply a timestamp to data in electronic form (example: a contract, software source code, an invoice, an electronic medical prescription, a price indication, a ticked box on a form, access to an information system), a unique identifier must be generated through use of the hash function. This step is essential in order to create a reliable and unique representation of the data; that is, a virtual fingerprint. This is then transmitted to the timestamping service authority, which combines the digital fingerprint with the exact date and time based on Coordinated Universal Time (UTC). The reliability of this combination is guaranteed by means of a timestamp token, which is a type of signed certificate containing:<\/p>\n\n\n\n Under the French decree on electronic timestamping, the timestamp token seal allows the identification of \u201cthe electronic timestamping service provider that issues it and ensures a link with the timestamp token to which it is attached.\u201d It is the combination of the timestamping authority\u2019s private key and a public key, communicated to the user by means of an electronic certificate.<\/p>\n\n\n\n At the end of the timestamping process, the timestamping authority sends all these items to the user and also archives them.<\/p>\n\n\n\n The digitalisation of entire sectors of the economy has created a need for electronic timestamping to provide proof of the date and content. In many areas, such as intellectual property, personal data protection, or IT, it has become essential to be able to prove the existence of data at a given moment. Without this proof, a person may be denied rights that are legitimately due or be wrongly penalised.<\/p>\n\n\n\n Since globalisation, the cost of sending and returning documents via traditional postal services has been significant. Indeed, most transactions require timestamping and a signature. In the long run, this back-and-forth of documents impacts the cash flow of companies involved in the transaction. Thanks to digital timestamping, the need for express mail is eliminated, replaced by simple clicks. The time and cost savings are considerable when you factor in the cost of a token. The system of timestamping tokens, or time marks, allows tracking of the document\u2019s changes (modifications, deletions, additions, etc.).<\/p>\n\n\n\n Calibrating the timestamping with atomic clocks ensures the traceability of documents and enhances digital security<\/a>. Any modification without a timestamp questions the document\u2019s integrity. With the 2014 European eIDAS regulation, legislators have established certain technical requirements for electronic timestamping systems to ensure their evidential reliability.<\/p>\n\n\n\n Timestamping can be useful in many sectors. Here are a few examples:<\/p>\n\n\n\n Timestamping, even electronic, is admissible as evidence in the courts of the European Union.<\/p>\n\n\n\n Thus, non-qualified electronic timestamping is acceptable in court, especially when evidence can be provided by any means. In fact, Article 41\u00a71 of the European eIDAS regulation establishes a principle of non-discrimination regarding electronic timestamping, accepting it as legal evidence in the same way as manual timestamping, even if it does not meet the requirements of qualified electronic timestamping. The same applies to non-qualified electronic registered delivery services.<\/p>\n\n\n\n In Switzerland, the 2016 SCSE regulation provides a legal framework similar to the eIDAS data protection law. Although SCSE does not specify technical standards that must be applied, the Swiss Federal Council recognises processes implemented according to eIDAS standards as valid. As with eIDAS, SCSE assigns a higher evidentiary value to timestamping certificates issued by qualified trust service providers.<\/p>\n\n\n\n Contrary to the simple electronic timestamp, a qualified electronic timestamp shall enjoy the presumption of the accuracy of the date and the time it indicates and the integrity of the data to which the date and time are bound (article 41\u00a72 of the eIDAS regulation). This provides a significant advantage in the event of litigation or dispute, as it allows to reverse the onus of proof and the burden of proof can be shifted onto the party challenging the reliability of a qualified timestamping system. In this context, a part of the doctrine equates qualified electronic timestamping with the electronic version of the legal concept of \u201ccertain date\u201d.<\/p>\n\n\n\n By extension, in France, article L100 of the postal and electronic communications code states that electronic registered delivery is the equivalent of physical registered mail as long as it meets the requirements of article 44 of the eIDAS regulation, especially as regards the use of a qualified electronic timestamp. In this case, the data sent and received by means of a qualified electronic registered delivery service benefits, among other things, from a presumption as to the integrity of the data and the correctness of the date and time of sending and reception. In fact, an electronic timestamp applied to registered mail has an advantage over physical registered mail, because electronic timestamping not only certifies the date but also the content, which physical registered mail does not.<\/p>\n\n\n\n Thus, when Evidency, a trusted third party in the electronic timestamping process, timestamps electronic documents such as an invoice, a reference price, or a deposit, Evidency\u2019s token assigns a certain date to the documents in question and certifies their content at the moment the timestamp token is applied. As such, this content cannot be modified.<\/p>\n\n\n\n Evidency\u2019s electronic timestamping solution is easy to implement and simple to use.<\/p>\n\n\n\nWhat is the purpose of electronic timestamping?<\/h3>\n\n\n\n
What are the two recognised types of electronic timestamping?<\/h2>\n\n\n\n
1. Non-qualified or simple electronic timestamping<\/h3>\n\n\n\n
2. Qualified electronic timestamping.<\/h3>\n\n\n\n
\n
How does electronic timestamping work?<\/h2>\n\n\n\n
\n
![\"\"](\"https:\/\/evidency.io\/wp-content\/uploads\/2024\/10\/fonctionnement-horodatage-ENG-1-1.webp\")
<\/figure>\n<\/div>\n\n\n\nWhy use Timestamping?<\/h2>\n\n\n\n
Digitalisation of exchanges<\/h3>\n\n\n\n
Cost reduction<\/h3>\n\n\n\n
Traceability of timestamped documents<\/h3>\n\n\n\n
Which documents can be timestamped?<\/h2>\n\n\n\n
\n
The legal recognition of electronic timestamping as digital evidence<\/h2>\n\n\n\n
Presumption of reliability in favor of qualified electronic timestamps<\/h2>\n\n\n\n
![\"\"](\"https:\/\/evidency.io\/wp-content\/uploads\/2024\/10\/differences-entre-horodatage-qualifie-et-non-qualifie.webp\")
<\/figure>\n\n\n\nEvidency offers flexible timestamping solutions to suit your needs:<\/h2>\n\n\n\n
\n