Access

PROOFIP uses the highest standard of Public Key Infrastructure technology, compliant with the RFC 3161 protocol, for the generation of tokens.

Request a PROOFIP Certificate and Token

Create an account at the PROOFIP website https://proofip.se.

After registration, legal entities are granted Administrator status with the possibility to invite employees to submit their works/results in the form of computer files in any format.

PROOFIP Token Generation

The local browser generates a unique digital fingerprint (a hash) of the file using a strong SHA-2 (256bit) one-way hashing algorithm.

NB: At no point in time is the original digital file uploaded to PROOFIP and the User retains full possession of the file and its content. It is only the hash code that is calculated in the User's browser and then uploaded to PROOFIP as a file.

The hash is timestamped according to eIDAS Regulation and RFC-3161 standard.

The PROOFIP token is a Timestamp Response hashed with the sha-256 algorithm that provides unalterable proof of existence of the digital file at the point in time when the token was created. The one-way hashing algorithm ensures that the original digital file can never be reproduced from the hash.

PROOFIP Certificate and Token Verification Process

The PROOFIP token is verified on the PROOFIP website by uploading:

• the original digital file that was timestamped
• the token from the corresponding Certificate

The public key contained in the PROOFIP token is checked, to confirm the authenticity of the digital file and the time of its fixation in PROOFIP timestamping.

The PROOFIP system validates the PROOFIP token by comparing the hash of the original digital file to the hash contained in the PROOFIP token by decrypting the signed hash of the original digital file.

This hash is then compared to the hash of the original digital file uploaded to the PROOFIP site as a part of the verification process.

If the conditions are met, the PROOFIP token is validated and the existence of the digital file at a specific point in time is verified. An immediate on-screen validation message is provided.

If the original digital file is even slightly modified, the comparison of the file and the relevant token will not be successful. Any change to the PROOFIP token will also render it invalid.