Archive for the ‘atomic clocks’ Category

Benefits of Accurate Network Time Synchronization

Monday, October 12th, 2009

Your computer probably does hundreds and thousands of tasks a day. If that is part of a network then the number of tasks could be millions. From sending emails to saving data, and everything else your computer is tasked to do, they are all logged by the computer or server.

Computers use timestamps to logo processes and indeed, timestamps are used as the only method a computer has to indicate when and if a task or application has been conducted. Timestamps are normally a 16 or 32 bit integer (one long number) that counts back the seconds from a prime epoch – normally 01 January 1970.

So for every task you computer does it will be stamped with the number of seconds from 1970 that the transaction was conducted. These timestamps are the only piece of information a computer system has to ascertain what tasks have been completed and what tasks have yet to be instigated.

The problem with computer networks of more than one machine is that the clocks on individual devices are not accurate enough for many modern time sensitive applications. Computer clocks are prone to drift they are typically based on inexpensive crystal oscillator circuits and can often drift by over a second a day.

This may not seem much but in today’s time sensitive world a second can be a long time indeed especially when you take into account the needs of industries like the stock exchange where a second can be the difference in price of several percent or online seat reservation, where a second can make the difference between an available seat and one that is sold.

This drift is also accumulative so within only a few months the computer systems could be over a minute out of sync and this can have dramatic effects on time sensitive transactions and can result in all sorts of unexpected problems from emails not arriving as a computer thinks they have arrived before they have been sent to data not being backed up or lost completely.

A NTP time server or network time server are increasingly becoming crucial pieces of equipment for the modern computer network. They receive an accurate source of time from an atomic clock and distribute it to all devices on the network. As atomic clocks are incredibly accurate (they won’t drift by a second even in a 100,000 years) and the protocol NTP (Network Time Protocol) continually checks the devices time against the master atomic clock time – it means the computer network will be able to run perfectly synchronised with each device within a few milliseconds of the atomic clock.

Life Without the Atomic Clock

Saturday, October 10th, 2009

When we consider the most important inventions of the last 100 years, very few people will think of an atomic clock. In fact, if you ask somebody to come up with a top ten of inventions and innovations its doubtful if the atomic clock would figure at all.

Its probably not hard to imagine what people think of as the most life-changing inventions: the Internet, mobile phones, satellite navigation systems, media players etc.

However, nearly all theses technologies rely on accurate and precise time and they would not function without it. The atomic clocks lies at the heart of many of the modern innovations, technologies and applications associated with them.

Let’s take the Internet as an example. The Internet is, in its simplest form, a global network of computers, and this network spans time zones and countries. Now consider some of the things we use the Internet for: online auctions, Internet banking or seat reservation for example. These transactions could not be possible with precise and accurate time and synchronisation.

Imagine booking a seat on an airline at 10am and then another customer tries to book the same seat after you on a computer with a slower clock. The computer only has the time to go on so will consider the person who booked after you to have been the first customer because the clock says so! This is the reason any Internet network that requires time sensitive transactions is connected to a NTP server to receive and distribute an atomic clock time signal.

And for other technologies the atomic clock is even more crucial. Satellite navigation (GPS) is a prime example. GPS (Global Positioning System) works by triangulating atomic clock signals from satellites. Because of the high velocity of radio waves an inaccuracy of 1 second could see a sat-nav device out by 100,000 km.

Other technologies too from mobile phone networks to air traffic control systems are completely reliable on atomic clocks demonstrating how underrated this technology is.

Closed Circuit Cameras are Useless Without a Network Time Server

Thursday, October 8th, 2009

For those of us that live in Britain, the CCTV camera (closed circuit TV) will be a familiar site on the high streets. Over four million cameras are in operation throughout the British Isles with every major city being monitored by state funded cameras which has cost the British taxpayer over £200 million ($400 million).

The reasons for use of such widespread surveillance have always been declared as to prevent and detect crime. However, critics argue that there is little evidence that CCTV cameras have done anything to dent the rising street crime on the UK’s streets and that the money could be better well spent.

One of the problems of CCTV is that many cities have both cameras controlled by local councils and privately controlled cameras. When it comes to crime detection the police often have to obtain as much evidence as possible which often means combining the different local authority controlled CCTV cameras with the privately controlled systems.

Many local authorities synchronise their CCTV cameras together, however, if the police have to obtain images from a neighbouring borough or from a private camera these may not be synchronised at all, of if so, synchronised to a different time completely.

This is where CCTV falls down in the fight against crime. Just imagine a suspected criminal is spotted on one CCTV camera committing a criminal act. The time on the camera could say 11.05pm but what if the police follow the suspects movements across a city and use footage from a privately owned camera or from other boroughs and while the CCTV camera that caught the suspect in the act may say 11.05, the other camera could spot the suspect minutes later only for the time to be even earlier. You could imagine a good defence lawyer taking full advantage of this.

To ensure their worth in the fight against crime, it is imperative that CCTV cameras are time synchronized using a network time server. These times servers ensure every device (in this case camera) is running the exact same time. But how do we ensure all cameras are synchronised to the same time source. Well fortunately, a global time source known as UTC (coordinated Universal Time) has been developed for this exact purpose. UTC is what governs computer networks, air traffic control and other time sensitive technologies.

A CCTV camera using a NTP server that receives a UTC time source from an atomic clock will not only be accurate but the time told on the devices will be provable in court and accurate to a thousandth of a second (millisecond).

2038 The Next Computer Time Bug

Tuesday, October 6th, 2009

Remember the turn of the millennium. Whilst many of us were counting down the seconds until midnight, there were network administrators across the globe with their fingers crossed hoping their computer systems will still be working after the new millennium kicked in.

The millennium bug was the result of early computer pioneers designing systems with only two digits to represent the time as computer memory was very scarce at the time. The problem didn’t arise because of the turn of the millennium, it arose because it was the end of the century and two digit year flicked around to 00 (which the machines assume was 1900)

Fortunately by the turn of the millennium most computers were updated and enough precautions were taken that meant that the Y2K bug, as it became known, didn’t cause the widespread havoc it was first feared.

However, the Y2K bug is not the only time related problem that computer systems can be expected to face, another problem with the way computers tell the time has been realised and many more machines will be affected in 2038.

The Unix Millennium Bug (or Y2K38) is similar to the original bug in that it is a problem connected with the way computers tell the time. The 2038 problem will occur because most machines use a 32 bit integer to calculate the time. This 32 bit number is set from the number of seconds from 1 January 1970, but because the number is limited to 32 digits by 2038 there will be no more digits left to deal with the advance of time.

To solve this problem, many systems and languages have switched to a 64-bit version, or supplied alternatives which are 64-bit and as the problem will not occur for nearly three decades there is plenty of time to ensure all computer systems can be protected.

However, these problems with timestamps are not the only time related errors that can occur on a computer network. One of the most common causes of computer network errors is lack of time synchronization. Failing to ensure each machine is running at an identical time using a NTP time server can result in data being lost, the network being vulnerable to attack from malicious users and can cause all sorts of errors such as emails arriving before they have been sent.

To ensure your computer network is adequately synchronized an external NTP time server is recommended.

Keeping Your Network Secure A Beginners Guide

Wednesday, September 30th, 2009

Network security is vitally important for most business systems. Whilst email viruses and denial-of-service attacks (DoS attack) may cause us headaches on our home systems, for businesses, these sorts of attacks can cripple a network for days – costing businesses hundreds of millions each year in lost revenue.

Keeping a network secure to prevent this type of malicious attack is usually of paramount importance for network administrators, and while most invest heavily in some forms of security measures there is often vulnerabilities inadvertently left exposed.

Firewalls are the best place to begin when you are trying to develop a secure network. A firewall can be implemented in either hardware or software, or most commonly a combination of both. Firewalls are used to prevent unauthorized users from accessing private networks connected to the Internet, especially local intranets. All traffic entering or leaving the intranet pass through the firewall, which examines each message and blocks those that do not meet the specified criteria.

Anti-virus software works in two ways. Firstly it acts similarly to a firewall by blocking anything that is identified in its database as possibly malicious (viruses, Trojans, spyware etc). Secondly Anti-virus software is used to detect, and remove existing malware on a network or workstation.

One of the most over-looked aspects of network security is time synchronization. Network administrators either fail to realise the importance of synchronization between all devices on a network. Failing to synchronize a network is often a common security issue. Not only can malicious users take advantage of computers running at different times but if a network is struck by an attack, identifying and rectifying the problem can be near impossible if every device is running on a different time.

Even when a network administrator is aware of the importance of time synchronization they often make a common security mistake when attempting to synchronize their network. Instead of investing in a dedicated time server that receives a secure source of UTC (Coordinated Universal Time) externally from their network using atomic clock sources like GPS, some network administrators opt to use a shortcut and use a source of Internet time.

There are two major security issues in using the Internet as a time server. Firstly, to allow the time code through the network a UDP port (123) has to be left open in the firewall. This can be taken advantage of by malicious users who can use this open port as an entrance to the network. Secondly, the inbuilt security measure used by the time protocol NTP, known as authentication, doesn’t work across the Internet which means that NTP has no guarantee the time signal is coming from where it is supposed to.

To ensure your network is secure isn’t it time you invested in an external dedicated NTP time server?

Parking Tickets and the NTP Server

Saturday, September 26th, 2009

There is nothing worse than returning to your car only to discover that your parking meter time limit has expired and you’ve got a parking ticket slapped on to your windscreen.

More-often-than-not it’s only a matter of being a couple of minutes late before an over eager parking attendant spots your expired meter or ticket and issues you a fine.

However, as the people of Chicago are discovering, whilst a minute may be the difference between getting back to the car in time or receiving a ticket, a minute may also be the difference between different parking meters.

It seems the clocks on the 3000 new parking meter pay boxes in Cale, Chicago have been discovered to be unsynchronized. In fact, of the nearly 60 pay boxes observed, most are off at least a minute and in some cases, nearly 2 minutes from what is “actual” time.

This has posed a headache to the firm in charge of parking in the Cale district and they could face legal challenges from the thousands of motorists that have been given tickets from these machine.

The problem with the Cale parking system is that while they claim they regularly calibrate their machine there is no accurate synchronization to a common time reference. In most modern applications UTC (Coordinated Universal Time) is used as a base timescale and to synchronize devices, like Cale’s parking meters, a NTP server, linked to an atomic clock will receive UTC time and ensure every device has the exact time.

NTP servers are used in the calibration of not just parking meters but also traffic lights, air traffic control and the entire banking system to name but a few applications and can synchronize every device connected to it to within a few milliseconds of UTC.

It’s a shame Cale’s parking attendants didn’t see the value of of a dedicated NTP time server – I’m sure they are regretting not having one now.

Reasons for Atomic Clock Timing

Wednesday, August 26th, 2009

Atomic clocks have, unbeknown to most people, revolutionised our technology. Many of the ways we trade, communicate and travel are now solely dependent on timing from atomic clock sources.

A global community often means that we have to communicate with people on other areas of the world and in other time zones. For this purpose a universal time zone was developed, known as UTC (Coordinated Universal Time), which is based on the time told by atomic clocks.

Atomic clocks are incredibly accurate, losing only a second in every hundred million years, which is staggering when you compare it to digital clocks that will lose that much time in a week.

But why do we need such accuracy in timekeeping? Much of the technology we employ in modern times is designed for global communication. The Internet is a good example. So much trade is done across continents in fields such as the stock exchange, seat reservation and online auctioning that exact time is crucial. Imagine you are bidding for an item on the Internet and you place a bid a few seconds before the end, the last and highest bid, would it be fair to lose the item because the clock on your ISP was a little fast and the computer therefore thought the bidding was over. Or what about seat reservation; if two people on different sides of the globe book a seat at the same time, who gets the seat. This is why UTC is vital for the internet.

Other technologies too such as global positioning and air traffic control are reliant on atomic clocks to provide accuracy (and in the case of air traffic is paramount for safety). Even traffic lights and speed cameras have to be calibrated with atomic clocks otherwise speeding ticket may not be valid as they could be questioned in court.

For computer systems NTP time servers are the preferred method for receiving and distributing a source of UTC time.

Using NTP Networks

Monday, August 3rd, 2009

Network Time Protocol is by far the most widely used application for synchronizing computer time across local area networks and wider areas networks (LANs and WANs). The principles behind NTP are fairly simple. It checks the time on a system clock and compares it with an authoritative, single source of time, making corrections to the devices to ensure they are all synchronized to the time source.

Selecting the time source to use is perhaps the fundamentally most important thing in setting up a NTP network. Most network administrators opt, quite rightly to use a source of UTC time (Coordinated Universal Time). This is a global timescale and means that a computer network synchronized to UTC is not only using the same timescale as every other UTC synchronized network but also there is no need to worry about different time zones around the globe.

NTP uses different layers, known as strata, to determine the closeness and therefore accuracy, to a time source. As UTC is governed by atomic clocks, any atomic clock giving out a time signal is referred to as stratum 0 and any device that receives the time directly from an atomic clock is stratum 1. Stratum 2 devices are devices that receive the time from stratum 1 and so on. NTP supports over 16 different stratum levels although accuracy and reliable decrease with each stratum layer further away you get.

Man network administrators opt to use an internet source of UTC time. Apart from the security risks of using a time source from the internet and allowing it access through your firewall. Internet time servers are also stratum 2 devices in that they are normally servers that receive the time from single stratum 1 device.

A dedicated NTP time server on the other had are stratum 1 devices in themselves. They receive the time directly from atomic clocks, either via GPS or long wave radio transmissions. This makes them far more secure than internet providers as the time source is external to the network (and firewall) but also it makes them more accurate.

With a stratum 1 time server a network can be synchronized to within a few milliseconds of UTC without risk of compromising your security.

Using Atomic Clocks to Synchronize a Network

Wednesday, July 22nd, 2009

Most computer networks have to be synchronized to some degree. Allowing the clocks on computers across a network to all be telling different times is really asking for trouble. All sorts of errors can occur such as emails not arriving, data getting lost, and errors get unnoticed as the machines struggle to makes sense of the paradoxes that unsynchronized time can cause.

The problem is computers use time in the form of timestamps as the only point of reference between different events. If these don’t match then computers struggle to establish not only the order of events but also if the events took place at all.

Synchronizing a computer network
together is extremely simple, thanks largely to the protocol NTP (Network Time Protocol). NTP is installed on most computer operating systems including Windows and most versions of Linux.

NTP uses a single time source and ensures that every device on the network is synchronized to that time. For many networks this single time source can be anything from the IT manager’s wrist watch to the clock on one of the desktop machines.

However, for networks that have to communicate with other networks, have to deal with time sensitive transactions or where high levels of security are required then synchronization to a UTC source is a must.

Coordinated Universal Time (UTC) is a global timescale used by industry all over the world. It is governed by a constellation of atomic clocks making it highly accurate (modern atomic clocks can keep time for 100 million years without losing a second).

For secure synchronization to UTC there is really only one method and that is to use a dedicated NTP time server. Online NTP servers are used by some network administrators but they are taking a risk not only with the accuracy of the synchronization but also with security as malicious users can imitate the NTP time signal and penetrate the firewall.

As dedicated NTP servers are external to the firewall, relying instead on the GPS satellite signal or specialist radio transmissions they are far more secure.

Does my Computer Network Need to be Synchronized to an Atomic Clock?

Thursday, July 9th, 2009

Time synchronization with network time protocol servers (NTP servers) is now a common consideration for network administrators, although, keeping exact time as told by an atomic clock on a computer network is often seen as unnecessary by some administrators

So what are the advantages of synchronizing to an atomic clock and is it necessary for your computer network?  Well the advantages of having accurate time synchronization are manifold but it is the disadvantages of not having it that are most important.

UTC time (Coordinated Universal Time) is a global timescale that is kept accurate by a constellation of atomic clocks from all over the world. It is UTC time that NTP time servers normally synchronize too. Not just that it provides a very accurate time reference to for computer networks to synchronize too but also it is used by millions of such networks across the globe therefore synchronizing to UTC is equivalent to synchronizing a computer network to every other network on the globe.

For security reasons it is imperative that all computer networks are synchronized to a stable time source. This doesn’t have to be UTC any single time source will do unless the network conducts time sensitive transactions with other networks then UTC becomes crucial otherwise errors may occur and these can vary from emails arriving before they were despatched to loss of data.  However, as UTC is governed by atomic clocks it makes it a highly accurate and auditable source of time.

Some network administrators take the shortcut of using an internet time server as a source of UTC time, forgoing the need for a dedicated NTP device. However, there are security risks in doing such a thing. Firstly, the inbuilt security mechanism used by NTP, called authentication, which confirms a time source is where and who it claims it is, is unavailable across the internet. Secondly, internet time servers are outside the firewall which means a UDP port needs to be left open to allow the time signal traffic. This can be manipulated by malicious users or viral programs.

A dedicated NTP time server is external to the network and receives the UTC atomic clock time from with either the GPS satellite system (global positioning system) or specialist radio transmissions broadcast by national physics laboratories.