Secure digital archiving of high-value data

Recent legislation in the USA and across Europe, such as the Electronic Communications Act 2000 in the UK, and the ESIGN federal bill in the USA, has provided the missing legal aspect to electronic security that is driving the acceptance and utilisation of electronic documentation in high-value commercial and legal domains. Now legal and financial documents, such as contracts or financial records, no longer require handwritten signatures for non-repudiation, and can gain the advantages of electronic indexing, transmission and storage. The resulting growth in both the volume and value of critical electronic documents has caused a surge in digital archiving services, which offer secure storage to protect against media failure, theft and natural disasters, while providing and maintaining the security and integrity that can be built into the data. This paper describes how digital archiving uses PKI-based technologies, including timestamping, and XML structuring to provide controlled access, integrity and legally binding data. Finally, the paper summarises the work in which BT has been involved, from the ETERMS project with the International Chamber of Commerce, to building prototypes offering timestamping and document archiving, enhancing existing uses of digital certificates.