Determine authenticity of PDF document based on metadata fields
Hi,
I am trying to find information or definitions of metadata fields in PDF.
Specifically I am trying to determine how the following field is created
http://ns.adobe.com/pdfx/1.3/ pdfx:SourceModified:D:2018
Please see attached screenshot. The highlighted orange areas match with the information in Document Properties.
The yellow fields are of interest. Do these indicate (reliably) that modifications have been made and is the field for the Application used set in stone once the document is created?
I have tried some internet searches and I can t find anything to point me in the right direction.
The purpose is to determine if this document is genuinely from 2004 or recently modified
Many Thanks
I am trying to find information or definitions of metadata fields in PDF.
Specifically I am trying to determine how the following field is createdhttp://ns.adobe.com/pdfx/1.3/ pdfx:SourceModified:D:2018
Please see attached screenshot. The highlighted orange areas match with the information in Document Properties.
The yellow fields are of interest. Do these indicate (reliably) that modifications have been made and is the field for the Application used set in stone once the document is created?
I have tried some internet searches and I can t find anything to point me in the right direction.
The purpose is to determine if this document is genuinely from 2004 or recently modified
Many Thanks
ASKER
Thanks David,
This helps for future reference. The problem is trying to identify if when or how this file may have been modified and it doesn't have a digital signature.
I'm very interested in the fields that show in the metadata under ns.adobe.com
It appears to me that maybe these time stamps come from an interaction with the ns.adobe.com rather than from the PC that creates the doc. In doing some testing today I am able to manipulate the creation dates buy altering the date on my PC but this field still pickups up the correct date. So it must be validating and timestamp against the URL.
Just haven't been able to find any info about what the field definitions are and how they are created
This helps for future reference. The problem is trying to identify if when or how this file may have been modified and it doesn't have a digital signature.
I'm very interested in the fields that show in the metadata under ns.adobe.com
It appears to me that maybe these time stamps come from an interaction with the ns.adobe.com rather than from the PC that creates the doc. In doing some testing today I am able to manipulate the creation dates buy altering the date on my PC but this field still pickups up the correct date. So it must be validating and timestamp against the URL.
Just haven't been able to find any info about what the field definitions are and how they are created
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This is the only way to be sure... or if you have a decryption key for an encrypted PDF.
PDF files are just text files so anyone can jam any meta data into an unsigned PDF, just like forging an email.