ISO/IEC TR 29149:2012 情報技術—セキュリティ技術—タイムスタンプサービスの提供と使用に関するベストプラクティス | ページ 5

2.1

certification authority

ca

authority trusted by one or more users to create and assign public-key certificates

Note 1 to entry: Optionally, the certification authority may create the users' keys.

[SOURCE: ISO/IEC 9594-8:2005]

2.2

digital signature

data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery, e.g. by the recipient

[SOURCE: ISO 7498-2:1989]

2.3

evidence

information which is used, either by itself or in conjunction with other information, to establish proof about an event or action

Note 1 to entry: Evidence does not necessarily prove the truth or existence of something, but can contribute to the establishment of such a proof.

[SOURCE: ISO/IEC 13888-1:2009]

2.4

evidence user

entity that uses non-repudiation evidence

[SOURCE: ISO/IEC 13888-1:2009]

2.5

hash-function

Note 1 to entry: Computational feasibility depends on the specific security requirements and environment.

[SOURCE: ISO/IEC 10118-1:2000]

2.6

hash-value

string of bits which is the output of a hash-function

[SOURCE: ISO/IEC 10118-1:2000, modified — The term “hash-code” is used to represent this concept in ISO/IEC 10118-1:2000.]

2.7

imprint

string of bits, either the hash-value of a data string or the data string itself

[SOURCE: ISO/IEC 13888-1:2009]

2.8

message authentication code

MAC

string of bits which is the output of a MAC algorithm

Note 1 to entry: A MAC is sometimes called a cryptographic check value (see for example ISO 7498-2).

[SOURCE: ISO/IEC 9797-1:2011]

2.9

non-repudiation

ability to prove an action or event has taken place, so that this event or action cannot be repudiated later

[SOURCE: ISO 7498-2:1989]

2.10

non-repudiation token

special type of security token as defined in ISO/IEC 10181-1, consisting of evidence, and, optionally, of additional data

[SOURCE: ISO/IEC 13888-1:2009]

2.11

object identifier

OID

globally unique value associated with an object to unambiguously identify it

[SOURCE: ISO/IEC 8824-1:2002|ITU X.680:2002]

2.12

private key

that key of an entity's asymmetric key pair which should only be used by that entity

[SOURCE: ISO/IEC 9798-1:1997]

2.13

public key

that key of an entity's asymmetric key pair which can be made public

Note 1 to entry: In the case of an asymmetric signature scheme, the public key defines the verification transformation. In the case of an asymmetric encipherment system, the public key defines the encipherment transformation. A key that is 'publicly known' is not necessarily globally available. The key may only be available to all members of a pre-specified group.

[SOURCE: ISO/IEC 11770-3:2008]

2.14

public key certificate

public key information of an entity signed by the certification authority and thereby rendered unforgeable

[SOURCE: ISO/IEC 11770-3:2008]

2.15

signer

entity generating a digital signature

[SOURCE: ISO/IEC 13888-1:2009]

2.16

time stamp

data item which denotes a point in time with respect to a common time reference

[SOURCE: ISO/IEC 11770-1:2010]

2.17

time-stamp token renewal

process of issuing a new time stamp token to extend the validity period of an earlier time-stamp token

[SOURCE: ISO/IEC 18014-1:2008, adapted]

2.18

time-stamp requester

entity which possesses data it wants to be time-stamped

Note 1 to entry: A requester can also be a trusted third party including a time-stamping authority.

[SOURCE: ISO/IEC 18014-1:2008]

2.19

time-stamp token

TST

data structure containing a verifiable binding between a data items’ representation and a time-value

Note 1 to entry: A time-stamp token can also include additional data items in the binding.

[SOURCE: ISO/IEC 18014-1:2008]

2.20

time-stamp verifier

entity which possesses data and wants to verify that it has a valid time-stamp bound to it

Note 1 to entry: The verification process may be performed by the verifier itself or by a trusted third party.

[SOURCE: ISO/IEC 18014-1:2008]

2.21

time-stamping authority

TSA

trusted third party trusted to provide a time-stamping service

[SOURCE: ISO/IEC 18014-1:2008]

2.22

time-stamping policy

named set of rules that indicates the applicability of a time-stamp token to a particular community or class of application with common security requirements

[SOURCE: ISO/IEC 18014-1:2008]

2.23

time-stamping service

TSS

service providing evidence that a data item existed before a certain point in time

[SOURCE: ISO/IEC 18014-1:2008]

2.24

trusted third party

TTP

security authority, or its agent, trusted by other entities with respect to security related activities

[SOURCE: ISO/IEC 10181-1:1996]