Security Technology Competence Centre

We present the application of the SERENITY methodology to the domain of long-term trusted electronic archiving, sometimes also referred to as trusted digital notary services. We address the SERENITY approach from thepoint of view of a company providing security solutions in the mentioned domain and adopt the role of a solution developer. In this chapter we show a complete vertical slice through the trusted archiving domain providing: (i) the relevant S&D properties, (ii) the S&D classes and S&D patterns on both organizational and technical level, (iii) describe how S&D patterns are integrated into a trusted longterm archiving service using the SERENITY Run-Time Framework (SRF). At the end of the chapter we put in perspective what a solution developer can learn from the process of capturing security knowledge according to SERENITY methodology and we discuss how existing implementations of archiving services can benefit from SERENITY approach in the future.

With the transition to paperless environment the e- business and e-government processes demand to prove the existence of data at a specific point of time and to demonstrate the integrity of the data since that time during long term periods is becoming of utmost importance. Through the course of time the true value of electronic content may simply evaporate due to technological progress and incompetence to prove the authenticity of data stored. This paper presents an approach and a solution to the problem of long-term preservation of electronic data for dematerialized business processes. The basic system design and the architecture of a long-term electronic archive service is introducing a protocol and an evidence record syntax that is being standardized within the IETF long term archive and notarization service working group. The proposed system environment is based PKI-enabled services for creation of long term integrity proofs. Furthermore, the solution contains additional class of services that meet the requirements for long term validity of digitally signed and legally binding documentation.