Re: Possible patent issue with UTCTime hack

["Todd Glassey @ GMT" <todd.glassey@xxxxxxxxxxxxx>]

Marc,
Seems to me that the problem in Certs is that there is no culpable mechanism
to deploy and prove the availability of "credible time" data. I think that
Certs should, in themselves, only list absolute time points, the use models
should provide a centerpoint of the windowing scheme that is reflected in
the evaluating of the Certs, but anyone that uses any time centric services
is responsible to prove that their time data is accurate and believable.
Especially CA's, RA's and other trust processors.

Seems to me that the key here is process used in the time setting services,
that is what and how the underlying OS has the Timebase set and proves it.
With this in mind, how would you get secure time data into a system?

Todd

----- Original Message -----
From: "Marc Branchaud" <marcnarc@xcert.com>
To: <ietf-pkix@imc.org>
Sent: Tuesday, November 02, 1999 05:47 PM
Subject: Possible patent issue with UTCTime hack


>
> It seems that McDonnell Douglas has patented the date "windowing" that is
> used to get around Y2K problems:
>
> http://news.cnet.com/news/0-1009-200-1426450.html
>
> Since PKIX requires windowing UTCTime in certs, this may violate the
patent
> (note: I don't know anything about anything, especially patents).
>
> Marc
>