Time Stamping

Timestamps, both InfoCert and Aruba, have European validity according to the eIDAS Regulation and can be used on their own, e.g. integrated in a software, or together with any digital signature device.

In the Usage section, at the API level, you can monitor your free and top-up requests. They are available both graphically (period month and year) and with a textual summary.

The cost of a single request starts from 0.02€ and changes depending on the option chosen.

For example, the time stamping service with its own lot has a basic cost of 0.02€, while the starting price for the time stamping service without its own lot is 0.15€.

Other batch prices depend on the size: you can see the details in the Prices section within the individual API.

The service returns a response in real time.

To make requests to the POST /analisi endpoint, the references of the file to be checked must be given as the starting parameter.

Two types of messages may appear in the response:

• "Document successfully verified" if the time stamping process was successful
• "Wrong document URL or document unavailable" if the time stamping process was not successful

In the case of a successfully time stamped document, information such as the name of the time stamping authority will also be displayed.

You can check the document with the POST /analisi endpoint.

In the body of the request you can pass:

• the remote url of the file
• its content encoded in base64

The request to the POST /marche endpoint can be made using different parameters, depending on the way in which the document is to be time stamped:

• with its own batch of timestamps (InfoCert or Aruba)
• without owning any batch of InfoCert timestamps

In the first case the starting parameters are:

• username
• password

of the batch to be used for time stamping.

In the second case the starting parameter is the url of the pdf to be marked.

The response will provide specifications on the time stamped file and will also indicate how many timestamps you still have available.

With the Openapi API you can time stamp a document in 2 ways

• with your own batch (InfoCert or Aruba)
• with batch made available by Openapi

In this second case the marking will be carried out with a timestamp of the InfoCert Certification Authority.

You can check the consumption status via the POST /check_lotto endpoint or via the interface in the Usage section.

A request to POST /check_lotto can be made from the parameters

• username
• password

of the lot whose number of remaining makes is to be checked.

The response indicates the number of brands still available and the quantity already used.

A request to GET /availability/{type}/{qty} can be made from the parameters:

• 'type', i.e. name of the certificate authority (InfoCert or Aruba)
• 'qty', i.e. quantity, i.e. number of marks in the batch (e.g. 100, 1000)

The response indicates the number of available lots.

The lots currently available are:

• InfoCert Timestamps: 100, 250, 500, 1000, 2,000, 5000, 10,000, 20,000, 50,000, 100,000, 200,000, 500,000
• Aruba Timestamps: 20, 100, 250, 500

You can check the availability of each individual lot via the endpoint GET /availability/{type}/{qty}.

You can purchase batches of timestamps from 2 accredited Certification Authorities (Time-Stamping Authority - TSA): InfoCert and Aruba. The timestamps used for individual marking are those of InfoCert.

A request to GET /marche/{type}/{qty} can be made from the parameters:

• 'type', i.e. name of the certifying body (InfoCert or Aruba)
• 'qty', i.e. number of marks in the batch (e.g. 100, 1000)

The response provides details of the newly purchased batch of timestamps, in particular username and password.

In order to purchase a lot of timestamps it is necessary to make a request to the endpoint GET /marche/{type}/{qty} indicating the type, i.e. InfoCert or Aruba, and the quantity of timestamps in the lot (e.g. 50).

No parameter is required to make a request to GET /marche.

The response provides:

• the details of the lot of timestamps selected: the ID and name of the Accredited Certification Authority (InfoCert or Aruba)
• the quantity (e.g. 50)
• the username and password selected
• the entity id
• the date and time of purchase

It is possible to check lots of purchased timestamps via API with the GET /marche endpoint.