ISO/IEC 18014-2:2021/Cor 1:2024

Information security - Time-stamping services - Part 2: Mechanisms producing independent tokens - Technical Corrigendum 1

Sécurité de l'information — Services d'horodatage — Partie 2: Mécanismes produisant des jetons indépendants — Rectificatif technique 1

General Information

• Status: Published
• Publication Date: 04-Nov-2024
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Current Stage: 6060 - International Standard published
• Start Date: 05-Nov-2024
• Completion Date: 05-Nov-2024

Relations

• Corrects: ISO/IEC 18014-2:2021 - Information security - Time-stamping services - Part 2: Mechanisms producing independent tokens
• Effective Date: 11-Feb-2023

Overview

ISO/IEC 18014-2:2021/Cor 1:2024 is a Technical Corrigendum to Part 2 of the ISO/IEC 18014 series on information security - time-stamping services. It updates the specification for mechanisms producing independent tokens, clarifying the structure of a time-stamp token and strengthening requirements for a verifiable binding between the hash-codes of data and the point in time. The corrigendum was prepared by ISO/IEC JTC 1/SC 27 (Information security, cyber security, and privacy protection).

Key topics and requirements

• Time-stamp token structure: The corrigendum defines the time-stamp token TST(t) as comprising four components:
  • {H(D)} - a set of one or more hash-codes on the data D
  • t - the asserted point in time
  • C - a verifiable binding between {H(D)} and t
  • P - additional token information (as previously defined)
• Verifiable binding (C):
  • Must be a valid, verifiable binding between the hash-codes and the time.
  • The corrigendum explicitly adds this as a required token element and clarifies its role.
• Protection mechanisms:
  • Clause title revised to “Protection mechanisms for verifiable binding.”
  • The verifiability of the binding must be satisfied using a protection mechanism that can be chosen by the time-stamp requester and/or imposed by the time-stamping authority (TSA).
• Consistency and evidence:
  • The corrigendum reinforces that C provides verifiable evidence linking data fingerprints to a specific timestamp, improving the token’s evidentiary value.

Applications and who uses it

ISO/IEC 18014-2:2021/Cor 1:2024 applies to organizations and practitioners who need trustworthy time-stamping services:

• Time-stamping authorities (TSAs) and service operators implementing independent token mechanisms.
• Security architects and system designers integrating reliable timestamps into applications.
• Software developers building integrity and non-repudiation features.
• Legal, compliance, and audit teams relying on time-stamp evidence for regulatory or forensic purposes.
• Organizations using secure logging, digital notarization, or archival services where provable binding of data to time is required.

Related standards

• ISO/IEC 18014 series (other parts of the time-stamping standard)
• Work by ISO/IEC JTC 1/SC 27 on information security and privacy protection

This corrigendum is essential reading for implementers and evaluators of time-stamping services who require clarity on token composition, verifiability, and protection mechanism responsibilities. Keywords: ISO/IEC 18014-2:2021/Cor 1:2024, time-stamping services, time-stamp token, verifiable binding, independent tokens, information security, time-stamping authority.

Standards Content (Sample)

International
Standard
ISO/IEC 18014-2
Third edition
Information security — Time-
2021-09
stamping services
Part 2:
TECHNICAL
Mechanisms producing
CORRIGENDUM 1
independent tokens
2024-11
TECHNICAL CORRIGENDUM 1
Sécurité de l'information — Services d'horodatage
Partie 2:
Mécanismes produisant des jetons indépendants
RECTIFICATIF TECHNIQUE 1
Reference number
ISO/IEC 18014-2:2021/Cor.1 :2024(en) © ISO/IEC 2024

ISO/IEC 18014-2:2021/Cor.1:2024(en)

© ISO/IEC 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
© ISO/IEC 2024 – All rights
ii
ISO/IEC 18014-2:2021/Cor.1:2024(en)

Technical Corrigendum 1 to ISO/IEC 18014-2:2021 was prepared by Joint
...