TimestampServer

Overview Cryptography & Tamper Technology Model Drill Down Pricing Support Downloads

The Tamper-Proof Timestamp for Commercial Applications

In many business processes it is important to know when operations have taken place or have the ability to prove the point in time at which an operation occurred. Timestamps provide unique evidence when a transaction has taken place or when a document existed in a specific form. The greater the commercial or legal significance of a particular business operation is the more important the timestamp becomes. For example, on submitting an electronic offer on a tender platform or auditable archiving of documents. SafeGuard^® TimestampServer is based on a hardware security module and ensures the highest level of authenticity and tamper-proof creation of timestamps.

Product Details

Interfaces

RFC 3161 timestamp protocol
- Timestamp protocol via HTTP
- Socket based protocol (TCP)
- Compliant with ETSI standard TS101861
- „Plug & Play“ usage in many commercial applications, e.g. Adobe Acrobat®
CryptoServer Timestamp API (CTS API)
- General TimestampServer administration
- Certification request for timestamp keys with PKCS#10/PKCS#7
- Verification of timestamps
Network Time Protocol (NTP)
- Synchronization of TimestampServer clock with an external time server
- Support for Authenticated NTP
- Simple integration in existing network structures
Performance

Due to its wide range of models, SafeGuard^® CryptoServer offers the ideal Hardware Security Module for every performance requirement:
Se10, Se50, Se400 and Se1000, as well as CS10 and CS50

They provide the highest available performance on the market with up to 1000 or 500 timestamps per second respectively (at 1024 or 2048 bit RSA-timestamp key respectively).
Hardware

SafeGuard^® TimestampServer is based on the CryptoServer hardware models and is available in two series:
- Se-Series for maximum performance
- CS-Series for highest security requirements
Both series are available as network appliances (LAN) for use in racks (2 rack units, with 2 ethernet interfaces).
They come equipped with a serial RS232 interface (e.g. for PIN pads or printers). Additionally, the Se-Series appliances feature a USB connection
Cryptographic Algorithms

According to the ETSI standard TS101861, SafeGuard^® TimestampServer supports the following algorithms:
- RSA
- Hash algorithms SHA-1,SHA-2 family, RIPEMD-160, MD5
Random Number Generation
- Deterministic random number generation according to FIPS 186-3 or AIS 20 (class K4)
- Physical random number generation in accordance with AIS 31 (class P2) (only with the CS Series)

Cryptography & Tamper Technology

The most common usage of Hardware Security Modules is the tamper-proof preparation and storage of cryptographic keys. Within these mission-critical host applications Hardware Security Modules are included as the standard today.

With the SafeGuard^® CryptoServer product line we are offering different kinds of security and performance levels in terms of tamper technology. With our experience of over 25 years in developing and manufacturing hardware security modules we are able to provide our customers the highest product quality and reliability in terms of tamper technology starting from standard tamper-proof devices up to the highly secure, tamper-responsive HSM SafeGuard^® CryptoServer CS.

Details

Cryptographic Algorithms

SafeGuard^® SecurityServer is available with the following cryptographic algorithms:
- RSA
- DSA, ECDSA
- AES, DES, Triple DES
- AES MAC, Triple DES MAC, Retail MAC
- Hash algorithms SHA-1, SHA-2 family, RIPEMD-160, MD5
- Diffie-Hellman
- Additional algorithms on request
Certification

SafeGuard^® SecurityServer is available with the following certification levels:
- FIPS 140-2 level 3
- FIPS level 4 for „physical security“
- Common Criteria EAL4+
For details please consult the “MODELL DRILL DOWN” section
Random Number Generation

Safeguard SecurityServer comes with the following options:
- Physical random number generation in accordance with AIS 31 (class P2)
- Deterministic random number generation according to FIPS 186-3 or AIS 20 (class K4)
For details please consult the “MODELL DRILL DOWN” section
Tamper Technology

SafeGuard SecurityServer is available with the following tamper features:
- tamper-proof
- tamper-responsive
- secure deletion if mechanical / physical / chemical attacs occur
- secure deletion in case of temperature fluctuation or if the energy supply is outside of defined limits
- possibility of manual deletion
For Details please consult the “MODELL DRILL DOWN” section

Model Based Highlights

Se-Series

The industry standard HSM optimized for common security requirements in a commercial setting

Se LAN

Central point of security for critical applications
Simplifies encryption and signing key management
Ensures business continuity with high availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional DC
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L
SNMP Support
MIB Files are provided on the product CD

Se PCIe

Cost effective HSM for servers
Optimized for cryptographic acceleration in host application
Integrated key management

Hardware Specifications
- Dimensions: length: 167.65 mm (“half” length) height: 111.15 mm (“full” height)
- Operating power 3.3 volt (PCI express bus specification)
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L

CS-Series

High-end tamper responding HSM for advanced hardware security requirements

CS LAN

Central point of highest physical security for ePassport and eID applications
Simplifies key management
High availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional D
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
- Frontpanel display for status and basic administration
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L
SNMP Support
MIB Files are provided on the product CD

CS PCI

Highest security HSM for eID/ePassport server applications
Optimized for cryptographic acceleration in host applications
Integrated key management
Delivers FIPS and Common Criteria compliance

Hardware Specifications
- Dimensions: length: 167 mm (“half” length) height: 107 mm (“full” height) operating power 3.3 and 5.0 volt (PCI bus specification) environmental temperature in operation: +10°C to +35°C / +50°F to +95°F
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
- AIX 5L

Pricing

SafeGuard^® TimestampServer helps you meet compliance requirements when standard applications such as document management systems and archiving solutions are used. SafeGuard^® TimestampServer helps you to lower your operational costs in terms of:

Highest available performance on the market at an attractive price
Inexpensive starter models for applications with regular performance requirements
Exhaustive remote administration
Efficient key management and firmware updates via remote access
Automation of remote diagnosis through network management system using SNMP protocol

Support

Security and availability of your infrastructure lay today the foundation to your success.
With our flexible service portfolio we provide multiple support options that suit your business needs. Starting from a basic support and hardware repair service up to 24/7 service, we are able to tailor the services exactly according to your needs.

How to contact us:
E-Mail: support-cs@utimaco.de

Download SecurityServer Simulator

To support our customers from the beginning of the selection process on, Utimaco offers a complete functional SafeGuard^® Security Simulator.

After registration you can download the SafeGuard^® SecurityServer Simulator. Included are all API's, libraries, administration tools and documentation of the SecurityServer. Utimaco's SafeGuard^® SecurityServer Simulator at a glance:

Download Detailed Information

Please contact us for more detailed information or to find out which partner can help you best with your request