FR2900011A1 - Data transfer securing method for use during transmission of e.g. financial document, involves transmitting information, representative of existence of document copy in one non volatile memory, to recipient of document - Google Patents

Abstract

The method involves creating an electronic document e.g. electronic mail, by a document sender using a creating unit, and identifying a recipient of the document using an identifying unit. A copy of the document is stored by a storage unit in a non volatile memory accessible by the sender and not by the recipient. The copy is stored by another storage unit in another non volatile memory accessible by the recipient and not by the sender. The information representative of the existence of the copy in the latter memory, is transmitted by a transmission unit to the recipient of the document. An independent claim is also included for a device for securing data transfer.

Description

METHOD AND DEVICE FOR SECURING DATA TRANSFERS 5

  The present invention relates to a method and a device for securing data transfers. It applies, in particular, to the transmission of letters, invoices, legal or accounting documents, with acknowledgment of receipt. Hybrid, electronic and postal processes are known which include a step of sending an electronic mail with delivery of a mailing address of the recipient, the postal organization printing the mail and forwarding its printed version by traditional postal means. , with delivery by hand and signature by the recipient of an acknowledgment of receipt. Processes for transmitting so-called secure e-mails are also known, implementing, at both the sender and the recipient level, an electronic signature, for example an electronic signature conforming to the PKI public key infrastructure. (acronym for Public Key Infrastructure). These methods do not guarantee that the recipient has been informed of the arrival of an e-mail and have legal value only if the recipient actually receives the e-mail. These methods and devices have many other disadvantages. They do not allow the easy sending of a large amount of heterogeneous documents. They do not guarantee that an original is available to the issuer and that an original is available to the recipient, as is the case for legal documents. They do not allow mailing to recipients who have no means of prior identification. The present invention aims to remedy these disadvantages. For this purpose, the present invention aims, according to a first aspect, a method of securing data transfer, characterized in that it comprises: a step of creation of a document by a document issuer, a step identifying at least one recipient of said document, a step of storing a copy of the document in a first memory accessible by the issuer of the document but not accessible by a recipient of the document, for each recipient of the document, a step of storing a copy of the document in a second memory accessible by said recipient of the document but not accessible by the issuer of the document and - a step of transmitting to each recipient of the document, information representative of the existence of a copy of the document at his disposal in a said second memoir. With these provisions, each of the sender and the receiver has a memory where are archived the documents of which they were, respectively, sender and recipient. Each of them has an original and can archive it in a place of his choice, without the risk of interfering with the other original. Thus, if there is a mismatch between two services, or even within a double-part operation, the error will be detected and repaired. According to particular features, the method as briefly described above includes a step of time stamping each step of storing a copy of the document. With these provisions, each party to the correspondence can check the date of storage of the copy of the document in the memory reserved for it. According to particular features, the method as briefly described above includes a step of authenticating the recipient and, in case of positive authentication, a step of access, by said recipient, to the copy of the document available in the second memory. Thanks to these provisions, the issuer of the document may require the recipient to be authenticated before the latter becomes aware of the document intended for him. In particular, the issuer of the document can assert this authentication in case of subsequent challenge of delivery of the document to the recipient. According to particular features, during said step of authenticating the recipient, an acknowledgment is constituted and in that said method includes a step of storing, in each of the first and second memories, said acknowledgment of receipt. relationship with a copy of said document. Thanks to these provisions, the two parties to the correspondence can check the date of delivery of the copy of the document to the addressee and make sure of this delivery of 35 copies. According to particular features, the first and second memories are in the same data center.

  Thanks to these provisions, the storage steps can also be secured. According to particular features, the method as briefly described above comprises a step of transmitting, to a third remote memory, a copy of the document. Thanks to these provisions, a third party, for example a bailiff, can sequestrate the copy of the document and vouch for the content of the document created by the issuer of the document. According to particular features, the method as briefly described above includes an operator authentication step, a step of associating, in memory, a file with a copy of the document, a timestamping step said associating step and a step of assigning, to said file, an identifier of said operator and timestamp data of said associating step. With these provisions, if an operator must intervene on a document, its identifier, the date and time of the operation will be known. According to particular characteristics, during the step of creating a document, attributes are attributed to said document representative of the recipient's authentication conditions. With these provisions, the conditions for delivery of a copy of the document to the recipient of the document are associated and document and limit a risk of delivery error without the authentication requested by the issuer of the document. According to particular features, prior to the step of creating a document, a step of authentication of the issuer of the document is performed. Thanks to these provisions, the recipient of a document can be assured of the identity of the issuer of this document. According to particular features, the method as briefly described above comprises a step of associating the document with a certificate of integrity rendering detectable any subsequent modification of said document, said integrity certificate being memorized, in the first and second memories, in relation to the copies of the said document. Through these provisions, each party to correspondence can verify that the document has not been changed between its creation and its delivery to the recipient or its subsequent consultation. According to a second aspect, the present invention relates to a device for securing data transfer, characterized in that it comprises: means for creating a document by a document issuer, means for identifying at least one document a recipient of said document, - means for storing the document in a first memory accessible by the sender of the document but not accessible by a recipient of the document, - for each recipient of the document, a means of storing the document in a second memory accessible by said recipient of the document but not accessible by the issuer of the document and - means for transmitting to each recipient of the document, information representative of the existence of the document at its disposal in a second memory.

  According to a third aspect, the present invention aims at a method of securing data transfer, characterized in that it comprises: a step of creating a document by a document issuer, a step of identifying at least one document a recipient of said document, said identification comprising the determination of at least one electronic address of said recipient and at least one postal address of said recipient, - a step of storing the document and the identification of each recipient, - a step of electronic transmission, to at least one electronic address of each recipient of the document, information representative of the existence of the document at its disposal, for at least one recipient of the document, a step of determining whether the time elapsed since the step electronic transmission and before receipt of the document, by said recipient of the document, is greater than a predetermined duration and if, for said recipient of the document, the time elapsed since the electronic transmission step and before the document is received by said recipient of the document, is greater than a predetermined duration, a step of printing said document and transmitting the document printed, at a postal address of the said addressee.

  Thanks to these provisions, the issuer of the document can be assured that the recipient of the document will be informed of the existence of the document for him, either via an electronic address or via an address. PO. The risks of non-transmission related to the difficulties of the recipient's access to the messages transmitted to one of his e-mail addresses (e.g. saturated electronic mailbox, failure of the host of this e-mail address, obsolescence of the e-mail address) are thus reduced.

  According to a fourth aspect, the present invention relates to a data transfer security device, characterized in that it comprises: a means for creating a document by a document issuer, a means for identifying at least one document a recipient of said document, said identification comprising the determination of at least one electronic address of said addressee and at least one postal address of said addressee; means for storing the document and identifying each addressee; electronic transmission, to at least one electronic address of each recipient of the document, information representative of the existence of the document at its disposal, for at least one recipient of the document, a means of determining whether the time elapsed since the electronic transmission step and before the document is received by said document recipient, is greater than a predetermined duration and a adapted printing means, if, for said recipient of the document, the time elapsed since the electronic transmission step and before receiving the document, by said recipient of the document, is greater than a predetermined duration, to print said document and to transmission of the printed document to a postal address of said recipient. According to a fifth aspect, the present invention aims at a method of securing data transfer, characterized in that it comprises: a step of attempting to transmit a document from a document issuer to at least one recipient of the document, by implementing at least one transmission attribute and - for at least one transmission attempt step, a value evaluation step of at least one transmission attribute and - a provisioning step of the issuer, evaluating the value of the transmission attribute. With these provisions, the transmitter can estimate the quality of service or the risk for the next transmission attempt to said recipient. For example, the sender may estimate the value of an e-mail address, the reliability of the recipient's document receiving service, and decide to change the way in which it will transmit new documents to that recipient. According to a sixth aspect, the present invention is directed to a d10 - device for securing data transfer, characterized in that it comprises: means for attempting to transmit a document from a document transmitter to a destination at least one document recipient, implementing at least one transmission attribute and - for at least one transmission attempt step, evaluation means 5 adapted to evaluate a value of at least one transmission attribute and - means for providing the transmitter, evaluating the value of the transmission attribute. According to a seventh aspect, the present invention aims at a method of securing data transfer, characterized in that it comprises: a so-called weak identification step of a user during which said user provides one or more addresses electronic, - a message transmission step from said user or to said user, by implementing said first identification, - a so-called strong identification step of a user, during which said user provides a proof of his identity and is assigned a pair of asymmetric keys and - a message transmission step, from said user or to said user, using said pair of asymmetric keys. With these provisions, a user can become accustomed to the use of an electronic signature and transmit or receive confidential messages weakly secure, then move to a strong authentication level in which his identity is guaranteed to his interlocutors. According to an eighth aspect, the present invention relates to a device for securing data transfer, characterized in that it comprises: a so-called weak identification means of a user during which said user provides one or more addresses electronic means; means for transmitting messages from said user or to said user, by implementing said first identification, a so-called strong identification means of a user, during which said user provides a proof of his identity; and it is assigned a pair of asymmetric keys and message transmission means, from said user or to said user, implementing said pair of asymmetric keys. According to a ninth aspect, the present invention aims at a method for securing data transfers, characterized in that it comprises: a step of assigning values of attributes of confidences to a process of data transfer from a transmitter document to a document recipient, - a document issuing step, by a document issuer, during which the document issuer defines at least one recipient and values of trusted attributes required for the document. transmission of said document and for each recipient for which the values of attributes of trusts assigned to the data transfer process from the sender to that recipient are all greater than the required values, a step of transmitting, to said recipient, said document. With these provisions, the issuer of a document can choose the level of quality of service that must be associated with the transmission of a document to a recipient. For example, a document considered to be very important or very confidential will only be sent to a recipient with strong authentication from that recipient or for a predetermined period of time when a document considered of lesser importance or less confidentiality, for example a copy of important document transmitted, for information, to a third party, will be delivered to the addressee with a less strict authentication of this recipient or for a longer duration. According to a tenth aspect, the present invention aims at a device for securing data transfers, characterized in that it comprises: a means for assigning values of attributes of confidences to a data transfer process from a transmitter of document to a document recipient; means for editing a document by a document issuer in which the document issuer defines at least one recipient and values of trusted attributes required for the transmission; of said document and a suitable transmission means, for each recipient for which the values of trust attributes assigned to the data transfer process from the issuer to that recipient are all greater than the required values, to transmit said document to said recipient. According to an eleventh aspect, the present invention aims at a method for securing data transfer, characterized in that it comprises: a step of composing a document, by an issuer, by implementing a model store on a server, a step of verifying compliance by said document with predetermined criteria, a step of storing said document, a step of verifying that the storing of said document complies with predetermined criteria, a step of communication to each recipient the document, a message informing him of the existence of a document intended for him, - a step of attempting to access said document, by a recipient of said document, - a verification step that said attempt to access respects predetermined criteria and if the access attempt meets predetermined criteria, a step of transmitting said document to said recipient. With these provisions, the entire process of composition, archiving and transmission to the recipient is performed under the control of meeting predetermined criteria, which ensures a high level of quality of service to the issuer of the document.

  According to a twelfth aspect, the present invention relates to a device for securing data transfer, characterized in that it comprises: means for composing a document, by an issuer, by implementing a model stored on a server, a means for verifying compliance by said document with predetermined criteria, means for storing said document, means for verifying that the storing of said document satisfies predetermined criteria, means of communication to each recipient of the document; document, a message informing him of the existence of a document intended for him, - a means of making an attempt to access said document, by a recipient of the said document, - a means of verification that the said attempt to access respects predetermined criteria and - a suitable transmission means, in the case where the access attempt respects predetermined criteria, to transmit said document to said destination ataire. Other advantages, aims and features of the present invention will emerge from the description which follows, for an explanatory and non-limiting purpose, with reference to the accompanying drawings in which: - Figure 1 shows, schematically, in the form of a functional diagram, a particular embodiment of the device object of the present invention, FIGS. 2A and 2B represent, in the form of a logigram, steps implemented during the registration of a user to the services offered by setting up a According to a particular embodiment of the present invention, FIGS. 3A and 3B show, in the form of a block diagram, the functions implemented for a recommended electronic document transmission and FIG. a logic diagram, steps implemented for the evaluation of values of dynamic personal confidence attributes. FIG. 1 shows a data transfer security service 100 comprising a document composition service 102, a preservation service 104, a traceability service 106, a communication service 108, an amplification service 110 , a verification service 112, a scheduling service 114 and an operating service 116. There is also seen, in FIG. 1, a network 118 of trusted third parties operating registrars 120, a network 122 of trusted third parties , a transmitter 124 connected to a secure private office 126, a recipient 128 connected to a secure private office 130, a third party issuer archiver 132, a third party recipient archiver 134 and a third party printer 136. The transfer security service data set 100 implements each of the aspects of the present invention. The document composition service 102 retains templates or masks of documents with attributes, generic for all users or specific users for providing such document templates and their attributes. These attributes can be assigned to the document templates through a graphical user interface (not shown) in which menus and contextual aids allow the user to choose the attributes of the template according to their meanings and effects. These attributes, referred to as trust, which are described below, relate to the identities of the issuers and / or recipients of documents, the tasks or scheduling of the tasks, the control and validation of the processing carried out on the documents resulting from these models and / or the level of security required for the document. When composing a document from a template, the sender user selects a template, provides the data to document the template, in particular at least one recipient ID, an email address and, preferably, an address. addressee, if these elements are not already present in the document model, as well as the message to be sent to the addressee, for example the elements of an invoice, a contract, a convocation. The transmitting user may also, during this composition of document, modify and complete the attributes of the document model to constitute attributes of the document to be transmitted, for example its delivery date to the recipient in electronic form, its delivery date. postal form in case of failure of the delivery in electronic form, its end date of delivery to the recipient in electronic form, the level of authentication of the recipient necessary for the document. It is observed that the document composition, an automatic system, for example a computer of the sending user can provide the elements necessary for the composition, for example in the form of a spreadsheet file containing these elements, in an orderly manner. It is observed that, during the same document composition session, a plurality of documents can be composed manually or automatically. When the document is ready to be transmitted, the transmitting user validates its transmission to the recipient. The preservation service 104 keeps any document composed in a non-volatile memory whose access is reserved to the issuer of the document. The conditions of access to this memory are defined with the sending user, according to known techniques, for example subject to providing a username (in English login) and a password, or subject to electronic authentication. It can be observed that the sending user can mandate a third-party archiver 132 to automatically copy each document he has composed. The preservation service 104 assigns each document it receives a secure time stamp. The traceability service 106 guarantees the traceability of the different steps performed on a document. For this purpose, it calculates a certificate of integrity on the basis of the document composed in such a way that the integrity certificate makes it possible to detect any modification of the compound document. For example, the health certificate is based on a hash function that provides a condensate. The integrity certificate is, on the one hand, associated by the preservation service 104 with the document stored in memory and, on the other hand, associated with an identification of the composed document, for example an identification of the sending user. , the recipient user and the timestamp of the end of the composition of the document, these elements being kept by a trusted third party, for example a bailiff. The communication service 108 makes a copy of the document to be transmitted to the recipient in a nonvolatile memory only accessible by this recipient, subject to compliance with the access conditions defined by the trust attributes of the document, with timestamp of the copy. After the access by the recipient, a third party archiver 134 mandated by this recipient can access the copy of the document and copy it. The ampliation service 110 selects the communication channel with the recipient (for example by e-mail, SMS, fax or postal mail) and communicates to the recipient at least one message warning him of the presence of a document to his attention. This communication takes place, preferentially, in several steps whose scheduling is defined by the attributes of the document to be transmitted. Generally, this communication begins, at a date defined by the issuer and represented by at least one attribute of the document, in the form of an electronic message sent to an address of the recipient. For example, this e-mail message takes the form of an e-mail sent to the e-mail address (known as an e-mail address) or an SMS short message (an acronym for Short Message System) sent to the address. telephone number (ie the telephone number, usually mobile) of the recipient. The attributes of the document can provide that, in the absence of access, by the recipient, within a time period defined by at least one attribute of the document, to the document intended for it and which is kept by the communication service 108, which warns then the ampliation service 108, at least one other message is transmitted to the recipient, by the communication service 108. Failing access, by the recipient, in a second time defined by at least one attribute of the document which is intended or at the end of the second period, according to the instructions of the issuing user represented by the attributes of this document, the ampliation service 110 transmits the document to the third party printer 136 for the transmission of the document in the form of postal mail with or without request for an opinion, or acknowledgment of receipt. The verification service 112 verifies, during each communication between two services that all the necessary procedures have been correctly performed, and that all the information (document model, document variable information, document attributes, time stamp, good reception and acknowledgment of receipt sent to the issuing service, for example) concerned by these procedures are sufficient and have been processed. Each verification carried out by the verification service 112 gives rise to a report transmitted to the traceability service 106, with a view to its traceability. The scheduling service 114 orders all the tasks performed by the various services, some of these tasks being, as we have seen, set according to the attributes associated with the documents.

  The operation service 116 orders the operations performed on each document and, in particular, calls to external services, for example third-party archivers, authentication, traceability, printer, time stamp providers. The networks 118 and 122 of trusted third parties operating registrars 120, or not respectively, provide the data necessary for verifying the validity of authentication certificates of users or third parties, according to techniques known per se, especially in relation to the public key infrastructure known as PKI (acronym for public key infrastructure for public key infrastructure). Registrars are bodies of the trusted third party. They ensure the records and the update of the civil states with the personal digital objects for the composition, transmission and legal preservation of the documents or structured files. Each registrar is committed to protecting these trustworthy attributes and their confidentiality. With its registration office, the trusted third party then ensures the strong personal authentication of the users and the use of the digital objects entrusted for a moment, said production time to the service providers chosen by each sending user. It ensures a control of the result of the operation carried out by the service provider or document management operator, and, on this occasion, it checks the restitution of the attributes or objects of confidence which can only be kept by the trusted third party. The sending user 124 and the receiving user 128 are connected to their secure private office 126 and 130, respectively, these offices being virtual and implemented remotely with secure access means (for example, by name entry). user and password, use of keys transmitted over mobile phone or strong authentication, depending on the variants or modes of operation chosen by the customers or imposed by the procedures and levels of the attributes assigned to the documents).

  The third party printer 136 performs the printing of the document to be sent by post and its enveloping and the delivery to the postal services, with or without request for an acknowledgment of receipt (the latter being returned directly to the transmitting user). Preferentially, during registration, a user provides identification elements (surname, first name, e-mail address, telephone address, postal address) and is given a username (in English login) and a password. To authenticate, it is sent to his address, a password, for example random or depending on the elements it has provided, the user must enter the password on his private virtual office to confirm his registration , which has the effect that his phone address is verified. Then the user accepts a proof convention indicating the level of authentication he wants to have when accessing his virtual private office. Examples of confidence attributes that can be assigned to a document and that can be implemented in the different services illustrated in FIG. 1 are given below. - the digital identity (also called login), identification attribute, used for the composition, - the password or authentication certificate, identification attribute, used for the composition, - the form and / or structured file , task or scheduling attribute, used for the composition, - the internal procedure and / or the additional information, control attribute and / or validation, used for the composition, - the external procedure and / or obligatory mention, attribute of control and / or validation, used for composition, dematerialization and communication, authorization, identification attribute, serving for composition and communication, - secret code and / or proxy, identification attribute, serving for dematerialization, - the partner (recipient) file containing the addresses of a recipient, identifying attribute, used for the composition, the dematerialization and the ampliation, the ca notification address rnet with recipient addresses, identification attribute, used for dialing, communication and ampliation, - the matching current account, identification attribute, used for dematerialization, trunk number -electronic asset, identification attribute, used for dematerialization, digital identity rating based on the online declaration and supporting documents or paper certificates returned to the registration office (identity card, crossed check) ...) with the statement certified as the original. The original notation becomes dynamic because it varies according to the constitution of the personal file, its evolution, and the quality of the exchanges carried out, as exposed with regard to the figure 4. The failures with the correspondence, like the returns do not live at the address indicated, may thus degrade the credibility of the legal domicile or the principal residence retained in the civil status and in the address book or partner file of the issuing user, - the certification authority public, identification attributes, used for dematerialisation, - the time stamp, used for the composition, the dematerialization, the communication and the ampliation and - the type of document, which can have one of the following meanings: confidential, critical , recommended with acknowledgment of receipt or simple.

  Among the third parties whose services are not represented in FIG. 1, they preferably comprise the following three types, generally in ASP mode (acronym for Application Service Provider for application service providers): - CRM (acronym for customer relationship management for customer relationship manager) that provides an assessment of the trust that can be placed in a user, the CPM (acronym for commercial paper management for commercial document manager) that performs the factoring, the transfer or the securitization. the TRM (acronym for treasury relationship management for treasury relations manager) which performs the functions of vouchers and can be connected to a proximity server specialized in transfers without funds movements for the settlement of bills and whole assets with a notification to the treasurers of the legal persons, the scales of their exchanges.

  FIGS. 2A and 2B illustrate steps followed in registering users with secure communication services implementing the various aspects of the present invention. FIG. 2A shows a step 202 during which a user who is not yet a member accesses information describing the service offer, for example on a site of the web. If he decides to become a member of one of the proposed services, he proceeds to step 218. For guest users, during a step 204, a user who is already a member provides an identification of a guest member whom he wishes send secure documents. This identification includes at least one email address of the guest. During a step 206, the identification of the guest member is compared to the identifications of members already listed in the database of members to verify that he is not already a member. During a step 208, it is determined whether the guest member is already referenced in the user database. If the invited user is already a member, during a step 210, this membership status is notified to the inviting user and the invited user is notified that the inviting member wishes to register it. The enrollment phase of the invited user then ends in step 212. If the invited user is not already a member, during a step 214, his identification is added to this database and is assigned a pre-registered status and a minimum rating corresponding to members declared by third parties. Then, during a step 216, an email is sent to the invited member to indicate which member invites him to register for the secure communication service, that the document receiving service is free and to which email address, known as the URL (acronym for universal resource locator for universal service locator) it must go, for example by clicking on a link inserted in the email, to register free of charge to the communication service secured. During a step 218, the prospective member accesses the site of the web (in English Web) corresponding to this URL address and, during a step 220, proceeds to its pre-registration. For this purpose, during step 220, he provides or validates his name, first name, postal address (professional and / or personal), his landline number, his fax number, his mobile phone number. During the validation of this information, he accesses his membership number and a membership contract, the general conditions of the document reception service and his user name, which he may modify. Step 220 is time stamped and the information provided is stored in the user database during a step 222. During a step 224, the future user chooses a mode for receiving his password. for example, between fax, minimessage or postal mail. During a step 226, a password is assigned to the user, stored in the user database and transmitted to the user according to the reception mode that he has chosen with an invitation to validate your registration with access to your secure virtual private office.

  When accessing this office, the new user provides his username and the password that was transmitted to him during the step 228. During a step 230, the user determines his he wants to use other services offered than simply receiving documents. If not, it goes to step 240. If it wishes to use more than the document receiving service, the user chooses, during a step 232, the parameters of the services he wishes to use. In particular, the user provides the identity, the postal and electronic addresses of authorized persons, within his organization, to issue or receive documents, powers for these persons, contact information of the potential third-party archiver. he wishes to see a copy of the documents issued or received, the means of payment of the services he wishes to use, the personal signature elements and the signature levels he can and wishes to implement. For all these additional services, during a step 234, a written performance contract is sent to the user by electronic and postal means, the return, by mail, a signed copy being requested. During a step 236, the contract return, signed by the user, is received, verified and recorded and the services chosen by the user become accessible to him, starting from a step 238. step 240, during which the new user decides whether he wishes to have strong authentication. If so, during a step 242 it carries out its strong authentication in a manner known per se. If no, or at the end of step 242, step 204 is accessed so that the new user can invite new members. FIG. 3A shows that, after registering, during a step 300 detailed in FIGS. 2A and 2B, the user having access rights to the recommended document sending service can decide to send a document to a recipient. In this case, after being identified, during a step 302, the user issuing a recommended document provides identification of the recipient of the document. Note that if this recipient is not referenced in the database of users of the service, it is notified to the issuer and a detailed registration step is performed from step 204 in FIGS. 2A and 2B. . During a step 304, attributes are associated with the sending and receiving users. Then, during a step 306, the sending user can constitute a document template, step 306, or access a corresponding document template, ie a generic template available to all users. transmitters or a template that it has provided and has been validated, step 308. In each of these cases, document attributes are associated with the document template, in step 310, by default, and / or by choice. of the user.

  During a step 312, the sending user composes the document to be transmitted to the recipient, that is to say that he provides additional data for editing a document. Then, the sender user selects a security level required for the transmission of the document to the recipient, in a step 316. These data, documents, delivery conditions and coordinates of the sending and receiving users are assigned confidence attributes. attached to the model, to the sender and / or to the recipient, during a step 318. The document to be transmitted is validated by the sender user, during a tape 320 and the end of the composition of the document is timestamped, during a step 322. Then, the document is signed by the sending user during a step 324.

  Then, the composed and signed document goes through a validation function of its content, composition procedures and attached attributes, during a step 326. If this verification is negative, the sending user is warned of the problem and a problem. alert is sent to the service manager. If the composition check is positive, a unique fold number and a barcode are assigned to the composed document in step 326. Then, in step 328, the composed, signed, and verified document is transmitted , with its attached information and attributes, to the transmitter's electronic safe, step 330.

  During a step 332, the procedures followed during the archiving phase and their results are checked. During a step 334, a legal deposit of the document and attachments is made to a third party, for example a bailiff, who returns a legal deposit number.

  During a step 336, a copy of the document archived in the electronic vault of the issuer is stored in a memory at the disposal of the recipient, memory called current account. A message is then transmitted to the recipient, immediately or on the date chosen by the sender, by the channel that the recipient has chosen, to warn him of the presence of a document to his attention and a message is sent by e-mail , to the issuer to inform him of the provision of the document to the addressee, during a step 338. During a step 340, the verification of the procedure and the results of the step of communication.

  If the recipient attempts to access the document, for a predetermined time, step 342, the recipient is authenticated, step 344. If at the end of the predetermined time the recipient has not attempted to access the document or if his authentication has failed, we proceed to a step 358. On the other hand, if, before the end of the predetermined period, the addressee has tried to access the document and has been authenticated, during a step 346, the addressee accesses the document and -ci is made available to a third party archiver of the choice of the recipient, step 348. The access to the document is time stamped during a step 350 and stored during a step 352, the document transmission procedure s then finishing at step 352.

  In step 358, the end of the predetermined time is timestamped and, in step 360, the document is transmitted to a printer. The printer performs the printing, step 362 and mailing 364, taking into account any request for acknowledgment of receipt expressed by the issuer. During a step 366, the procedures followed and the results of the amplification phase are checked. Upon receipt of the notification of receipt or the notification of non-delivery of the document by the postal services, in the case where these are returned to the service provider, this event is time stamped, step 368 and stored, step 370 the procedure then ends at step 372.

  All the storage steps described above are carried out in the safe of the issuer, in the current account of the recipient and with the third party ensuring the traceability of the steps of transmission of the document. Preferentially, the acknowledgment of receipt is also the subject of a legal deposit which is notified both to the sender and the recipient. Alternatively, the paper receipt is returned directly by the postal services to the issuer of the document.

  It can be seen in FIG. 4 that, after the step of pre-registering a user, step 400, the attribute representing the level of trust related to this user takes the value of 1, step 402. After step d User registration, step 404, the confidence level takes the value of 2, step 406. Upon receipt of the user-signed service contract, step 408, the confidence level takes the value of 3, step 410 .

  It is then determined whether the user performs a step of providing a strong electronic authentication, during a step 412. If yes, the level of confidence associated with the user takes the value of 4 during a step 414. If not or at the end of step 414, during a step 416, it is determined whether a long duration, for example greater than three months, has elapsed since the last use of the services by the user. If this is the case, during a step 418, the level of trust associated with this user is decremented by 1, it being noted that each new use of the service by the user restores his previous level of confidence. Otherwise, or at the end of step 418, in a step 420, it is determined whether mail sent to it has not been delivered to the addressee. If it is the case, during a step 422, the level of confidence associated with the user is decremented by 1. If not or at the end of step 422, in a step 424, it is determined whether the user has challenged the issuance of a document. If so, the level of confidence associated with the user is 0. Otherwise, or at the end of step 426, we return to step 412. As can be understood with reference to FIG. 4, each user is assigned a dynamic confidence level, which changes over time, according to events that affect its relationship with the services offered. This level of trust associated with a potential recipient of a document is used to assist the sending user or the automatic service in choosing the conditions for identifying or issuing a document to the recipient, for example the time between the electronic communication a notification of the presence of a document at the disposal of the recipient and the transmission of the document to a printer or the level of authentication required to be able to access a document. Thus, the device object of the present invention and the method it implements guarantee the entirety of the aforementioned processes so as to ensure that no holes of security, confidentiality, and authenticity exist throughout the entire process. exchanges and transactions between the network of trusted third parties and the service provider. Moreover, any anomaly can be regularized retroactively either on the same computer site or on two distant sites. The mode of operation guarantees interoperability in the event that the various operations of the documentary value chain are performed by several providers around the network of trusted third parties, for example, billing provider and legal archiving provider.

  The implementation of the present invention thus provides, by its mode of operation: - a guarantee of security (certification, encryption), - a guarantee of confidentiality (content ciphers and container), - a guarantee of dynamic identity, - a guarantee of file integrity, - a guarantee of conformity (procedures and mandatory information), - a guarantee of legality (legal or tax provision EDI, XML, signature), - a guarantee of legal value probative (registration trusted third party) - a guarantee of traceability (logging of operations), - a guarantee of matching or backing of mail (legal files), - a guarantee of interoperability (between trusted service providers), the verification server 112 records the completed tasks (provides a summary list of tasks) by the four modules (document composition service 102, preservation service 104, communication service 108 and an ampliation service 110), regardless of their geographical locations (centralized or relocated) with the requests vis-à-vis the trusted third party to verify: - the identity of the holder, - the identity of the authorized representatives, - personal authorizations (specific tasks), - the deposited forms, - the procedures of the forms, - the login / password, - the partner files or counterparts, - the choice of signature (SEP, SEA, SEQ, explained later) and - the proxy for encryption with the secret code. If the documents are processed in a dispersed and deferred way with the broken lots, the consolidation of the tasks makes it possible to note the anomalies, and to find the documents in backlog. The present invention implements the notion of value period, which means that the delay, for example twelve hours, validity of a mail to be transmitted to an insured, for example, can automatically expire unfinished tasks and trigger an alert to the issuer of the document.

  The lists of tasks or jobs Iists are transmitted in very secure mode by the technology flowtrack, which ensures the controls of the operator authorized to perform a task, the pair of machines in communication with each other, the task of encryption and blocking in case of non-compliance). This technology makes it possible to schedule the tasks with the necessary confidence attributes with respect to each operator and operator function with a time stamp, a fingerprint, for example of the shal type, the transmission torque (trusted third party / operator ) and the name or function of the machine or addressed server (dialing, switching, archiving, amplification, communication). Any anomaly in the scheduling issues an alert or stop scheduling. The processing of scheduling flows is parallelized to manage the scalability of documentary processing with probative legal value. Preferentially, certain information is in no way recorded (for example those of the user name and password type or the encryption / secret code proxy) but the system stores (in English log) the result of the operation or control. Of course, this information is time stamped. The most critical operations can be framed in the log memory: the start of an operation, the end of an operation and the result status. This reinforces the validity of the information. For example, for the timestamp of a signature of a document, we timestamp the condensate, or hash, of the document (and we obtain a proof of safe possession) then we sign the condensate and we timestamp the result (and so we gets a precise signature interval). It is observed that if one uses a mechanism of a type known to those skilled in the art under the name of syslog, it is preferable: to implement a secure communication protocol (even if everything is in the same clean room) with control of the "identity" of the machines concerned, - to "sign" the stored data or logs, by a symmetric signature procedure, the signature key being generated at regular intervals and exchanged by an encrypted process, to counter-sign the data stored at a regular time interval with an asymmetric signature. The symmetrical and counter-signature, asymmetrical signatures can be recorded in a specific log which makes it possible not to disturb the content of the log information. The centralized logs must be registered on two different machines in real time. Memorizing centrally does not allow not to memorize locally, on the machine that performs the operation. On the other hand, the local logs do not need to be reinforced.

  Finally all participating machines must be synchronized in time (in English time-synchronous). In gives, throughout the end of the description, additional information to the information given above, to constitute particular embodiments or variants of the embodiments set forth above. The dematerialization system is a set of subsystems obeying a method of processing computer data ensuring: - the creation of a multitude of different documents: forms, structured files, 10 - the verification of discriminant sensitive characters: the attributes of trust, rules, procedures, switching management information: exchanges in double part, - symmetrical preservation of evidence: bilaterality of archived originals and - distribution of requested services: copies, sharing of data. In the case of implementation of an architecture centered on a web server (in English web-centric) with delocalized legal functions, the uniqueness of the platform is provided by two agents acting in the same center. Data Center) in order to take no operational risk on the transfer of information. The registration of digital identities and management rules by person or by company is web-centric or supra-national, as are the composition of documents and the switching of messages necessary for management. On the other hand, from the legal or contractual point of view, the electronic original referring to the national legal provisions, and the hard copy printed near the addressee, conform to archiving measures and local material contingencies, which justifies a specialized cross-border correspondence network. Only certain trusted functions can be relocated to a network of secure correspondents without interfering with the relocated operational modules. These include functions related to timestamping and certification of digital identities referring to national revocation lists. Preferably, the symmetry of the proofs of archiving and the commutation of the messages in double part, that is to say by producing two documents on the basis of the original document, are applied and guarantee the authenticity of all the original documents. For the combination of the dematerialization functions distributed over two agents hosted in the same Data Center, one of the agents is assigned to the trusted third party network, said RTC. The principle of neutrality of the trusted third party means that it has the attributes of trust of the persons acting without doing itself their documentary operations with probative legal value which are entrusted to the second agent. This first RTC agent is above all a registrar custodian of trust attributes involved in e-mail or in dematerialized transactions. It is also this first agent that follows the revocation lists of digital identity certificates, as well as the time stamps (timestamp by atomic clocks). On each dematerialisation process, and in the sequence of the missions carried out by the service provider agent, it communicates the attributes of trust which enter into the configuration of the operations: composition, preservation-archiving, communication and ampliation. Depending on the anomalies raised in these circumstances by the service provider agent, the first agent may change the rating of the digital identity or review the status of certain doubtful procedures in effect (systemic regulation). The second agent is assigned to trust missions. It manages the end-to-end dematerialization process: the composition of structured files, the archiving of documents and exchange proofs, - the switching of messages or PDF images and the production of copies by any means.

  Among these four modules, which contribute to the dematerialization of documents and electronic transactions, there is an audit trail with confidence and compliance checks and anomaly reports. All these mentions are listed to preserve the traceability of each original between these modules and with the local correspondents solicited.

  The dematerialization process thus described effectively ensures that the three dimensions of the legal document based on a structured paper content (written or printed), organized exchange procedures and the handwritten signature of the parties, are faithfully transposed into an electronic version with legal value. probative. The three electronic dimensions with probative legal value are gathered as follows: - the people, by the strong electronic authentication, the document, by the certification of the structured file and the procedures, by traceability, signature and archiving. For each user, the dematerialization is done simply through a private correspondence office made available by the network of trusted third parties.

  Each user holds, for dematerialization, documents sent or received from a current correspondence account for the switching of messages, and an electronic safe for the legal archiving of proofs of correspondence.

  By entrusting to his trusted third party, through a secure communication network, his trusted attributes, each user can delegate powers over all the correspondence tasks concerning the composition of the documents, their transmission, their conservation and the amplification. .

  The originality of this functional architecture also allows for a mobile and collaborative management of dematerialized documents by individualizing with the internal procedures and the electronic signatures all the tasks of dematerialized correspondence. Correspondence tasks are carried out safely regardless of the country and its regulatory constraints. It is observed that there is a real legal and functional interoperability in the dematerialization of documents because traceability can be controlled end-to-end, and the legal archiving of electronic evidence can be relocated according to authentication and preservation measures. force at national level.

  Dematerialization is organized on two independent structures: a system of trust in exchange agreements (measurement and transmission systems) and - a document management system (creation and services). The trust system is based on digital identity registration technology, personal attributes, revocation lists, and time stamps. The management system includes four operational modules that embed the generic codes, ie the digital identities and trust attributes of the parties to the transaction, be it a simple file-mail, or a structured contract-file. Dematerialization is carried out, on an operational level, by a service provider divided into four modules: composition of documents, preservation of originals, switching of messages, and amplification of the proofs. Document Management exploits each operational module by summarizing all the tasks performed with the corresponding trust attributes on an audit trail. This traceability makes it possible to systematically check by an exhaustive list the internal procedures, the external rules and the measures of legality and confidence.

  The chain of security and trust exists thus by construction thanks to the combination of modules / tasks / trust attributes summarized on each sequential list, time stamped, deposited in electronic safe, and sequestered in a usher.

  With respect to the enrollment of a guest user by another user, a registered subscriber to the trusted third party network RTC, the latter entrusts the trusted third party his partner file or correspondent file, that is to say his the address book. The trusted third party is mandated by the member to send invitations to open a current correspondence account to all his counterparties in his address book. This proposal addressed to the addressee, or guest, concerns the use of a private correspondence office, free of charge for incoming mail. Invitations are sent: - either by secure e-mail (if the address book indicates it), - or by post mail via Posteasy: simple letter with a prospectus, - or by SMS (if the carnet address indicates the mobile number), - or by a combination of the three. If this proposal is suitable for the recipient, he / she is prompted to log on to the registration and opening interface of the current correspondence account: the URL is indicated for logging in. Naturally, by accepting the invitation and its correspondence office, the recipient of a first registered letter with electronic acknowledgment of receipt can instantly read his mail and download it.

  The invitation is nominative. It contains an invitation number. It indicates the name of the inviting user. The proposal to open the current correspondence account includes: A. free services: 1. A private correspondence office to receive secure mail or documents: - with instant notification of discounts via e-mail or SMS, - with Acknowledgment function with probative legal value, - with the PDF Image or XML Pivot download function and - with the audit trail for each certified correspondence-mail. 2. An archiving space for incoming documents kept in the Data Center (maximum free duration of 2 years) B. Paid services: with a 50% price reduction the first year 1. Sending outgoing mail or documents 2. Legal archiving outgoing mail or documents (3 years) 3. Sharing folders collaboratively in a Data Center 4. Management of secure emails registered in Data Center, then time stamped and sequestered at a bailiff.

  If the invitation suits him, the guest enters in two stages. During a pre-registration phase, the guest declines his identity on the pre-registration form: - last name, first name, - physical / postal address and - telephone address: fixed telephone, fax, electronic fax, mobile. Then, the form asks him to approve the general conditions of services (also named by their acronym CGS): one describes the model-mail services of which the third of correspondence ensures the secure transmission with probative legal value: - simple letters or documents hybrids, - hybrid letters or recommended documents and - dematerialized letters or recommended documents. He is then asked to choose a personal login to access his correspondence office and correspondence current account. The guest is told that he or she will immediately receive a password by the means of communication of his / her choice: - by mobile phone, - by fax or - by sealed postal mail. Then, during a registration phase, when he has his password, the holder can complete the registration at his private office and his correspondence account. It is observed that there are, on this office, free management functions in options. For example, this office provides access to a section for the registration of users by the holder of the correspondence account. Access to the correspondence current account history also makes it possible to track all mail changes with their sending or receiving statuses. If the first session, pre-registration has been interrupted, the guest must reconnect with their username and password. It supplements, if necessary, the civil status by giving the exact identity of the administrator of the current account of correspondence (it is the holder). The administrator specifies for the reception operations concerning each model service (types of mail) the authorized persons (the authorized representatives): last name, first name, address, mobile, e-mail, fax. The administrator specifies, for each designated person, the authorized operations, for example among the sending of documents by registered letter with acknowledgment of receipt, the reading of documents, the downloading of documents and the historical consultation.

  The administrator assigns each proxyholder a personal username and password and is responsible for informing those individuals of such personal access data. Alternatively, the registrar can transmit separately the username, with the authorizations, by secure postal mail, and also a password, for example on the personal mobile of the recipient, in the form of mini-SMS. The administrator may specify, for paid transactions, the authorized persons: surname, first name, address, mobile, e-mail, fax (same authorization procedure and secure information).

  Paid transactions on model services (for example, types of mail) concern document composition / validation, expedition by all means, and faithful and durable archiving. The holder of the office and secure correspondence account also chooses one of the means of payment at his disposal.

  The administrator checks the personal signature tab to obtain a secret code: - either by SMS, - or by fax, - or by post.

  It is observed that the secret code is a strong authentication for the acknowledgment of receipt made by the recipient vis-à-vis his correspondence third party who has his power of attorney to encrypt, timestamp and legally archive this receipt. To complete the registration, it is proposed to the holder to consult the membership agreement to the trusted third party network, which sets the rules for the exchange of mail or electronic documents with probative legal value. To validate his contract of membership to the trusted third party network, it is sufficient that he activates his secret code on the interface to sign his membership form. The registration ends. A true copy of the membership contract indicating the membership number and the current correspondence account number is sent by registered letter with acknowledgment of receipt to the declared postal address. The trusted third party acting as registrar will confirm the digital identity if: - the acknowledgment of receipt is returned signed via the Post Office and - the paper-certified copy (LRAR) is returned signed by the member with the supporting documents national identity or civil status requested, also hand signed certified true.

  The trusted third party issues, according to the quality of the registration obtained, a membership certificate with a numerical identity rating (IN) of 1 to 3+. The registration interface in his office of correspondence specifies that if the member has obtained a notation for his digital identity equal to or greater than 3, he may request, in addition, a free member certificate of electronic signature, or a certificate Qualified signature paid because issued by a public certification authority. Regarding the confirmation of the registration, the inviting person is instantly informed of his registration. His address book is completed with the guest's membership number. He is aware of the digital identity notation of his counterparty. If the registration fees are at his expense, they are debited on his financial account of correspondence. The recipient of an all-electronic registered letter, called an LRAR, or a letter followed, receives a notification explaining to him that he can acknowledge receipt and read his document instantly by registering immediately. As soon as his registration is completed, he fills in the acknowledgment of receipt on the interface of his office: - he checks the document number to open and - he enters his secret code.

  As soon as the document opens, he can read the contents. The third party correspondence archives in an electronic safe the recommended document with its encrypted and time stamped receipt. If the recipient has not responded to the notice of delivery of digital LRAR, accompanied by a personal invitation, the document is automatically processed in hybrid mail with a paper trail sent by mail as soon as the response time exceeds two to three days. The agreement between the parties (shipper / supplier and consignee / customer) provides for the following information: 1. The identity of the parties: - legal person: statutes, printed Kbis, appointed administrator, attorney, authorized personnel, addresses ( mail / billing), contact information (telephone, fax, mobile) - qualification of the parties: - for the mail (issuer and recipient reciprocally), - for the invoice (supplier, customer) and - for the other contracts (specify). - other information: - power of attorney: designate the person and his / her function 2. The nature of the Exchanges: - mail templates: files (structured or not), - billing templates: file (structured or not) and - contract templates: files (structured or not). 3. The nature of the signature: - signature on issue: - mail, - invoice and - other contracts. - signature at the reception: - mail, - invoice and - other contracts. 4. The choice of trusted service providers: options for each party For the dematerialization par excellence, the one that is recognized by the best rating issued by an audit firm and independent expertise (metric evaluation system), it It is essential that the three systems of digital composition, electronic communication, and legal archiving are integrated in the same trusted third party and in the same Data Center. The operational and systemic risk is almost zero under these conditions since the least error is corrected by the platform whereas between several providers, the analysis of the error and the risk of litigation differs the solution of several hours or days between the parts.

  Regarding the appointment of trusted third parties, their mandates are chosen by the parties with their remote management objects. The dematerialization of the recommended or monitored documents is generally carried out by a neutral trusted third party (in accordance with the regulations in force) so as to establish: - the probative value of the document, the acknowledgment of receipt and the legal archiving of the evidence. In this mission, the trusted third party intervenes in the correspondence between the stakeholders in three phases: 1. The composition and / or validation of the document - issuer authentication and integrity check, - document verification or structured file , - composition of the original registered and - validation and personal signature. 2. The transmission and reception of the message - certification of signed messages, -commutation of messages (bilaterality), - electronic communications (notification, download) and - timestamp of recorded messages. 3. The preservation and return of evidence - control of legality and compliance, - legal deposit in electronic safe, - activity monitoring and attestation of evidence and - sequestrant bailiff and restitution. The issuer transmits to the trusted third party either a signed document or a structured data file. In both cases, the trusted third party verifies compliance and reports any anomalies. The original of the document is accompanied by a registration number or a barcode before being signed for transmission to the addressee. The recipient is notified by SMS, fax, e-mail, or e-mail to view the document on his Secure Mapping Account. The dematerialized recommended document is kept in legal deposit in two electronic safes (C.F.E.) to ensure faithful and durable archiving. The recommended document is then transmitted by message switching to the two secure matched current accounts. The recommended document, received by the addressee, is subordinated, for its reading, to the prior signature of an acknowledgment note. This dematerialized invoice confirms the receipt with the references of the registered deposit (registration number, registration number in current account of correspondence and number of legal deposit in electronic safe). On the other hand, the document tracked is only the subject of a notification and a current account of correspondence and its reading requires an authentication with the personal signature of the recipient having the necessary authorization. For the transmission of documents, the sender and the addressee must be members of the secure correspondence network RCS.If the addressee is not registered, he receives an invitation informing him of the delivery of a recommended document and specifying the free reception services. Electronic signatures with a level 3 rating are generally intended for shipping and acknowledgment (notion of electronic signature).

  In particular embodiments, an adherent electronic signature (SEA) is implemented with a private certificate reserved for exchanges in the secure correspondence network (Partners file). We also propose or recognize the existence of a qualified electronic signature (SEA) that is intended for all exchanges in the public domain and in the network of subscribing users. A member may either use a pre-existing signature used for other personal applications (eg tax returns), or be granted a qualified signature issued by a certification authority to whom the device object of the present invention has transmitted the file. if the notation is 3+. The RTC ensures the legal archiving and the return of the dematerialized documents on the durations chosen by the members (1 to 10 years). The difference between the recommended document and the document followed exists at the level of the notification and the acknowledgment of receipt: - for the registered document, the notification includes the number of the legal deposit in electronic safe and the registration number in the account matching current. The authenticated recipient and, appearing on the partner's file of his correspondent, must fill the dematerialized form of the acknowledgment of receipt by indicating the number of the legal deposit inscribed on the notification, and by using his personal signature (SEP), member (SEA) or qualified (SEQ). The recommended document can not be read without having filled in the dematerialized bill of lading. - the notification of the document followed has only one registration number. The following describes the dematerialization procedures for documents of correspondence with probative value, letter followed (LS) or registered letter (LR).

  Organized correspondence is based on two principles: the compliance and legality of electronic mail, on the one hand, and the prior agreement to a secure network or correspondence network (RCS). As explained above, the procedures for registering in the secure correspondence network envisage either spontaneous application or the invitation procedure.As regards the conformity and legality of e-mail with probative value, these concepts are apply to the structured or unstructured file from which the e-mail document prepared by the sender or sender is composed Correspondence letters are letters (LS) or registered letters (LR). prepared either on the user's workstation or directly on the platform of the trusted third party correspondence, this is ie prepared in a Data Center on templates available to users. These letters are created either in "free text", what we usually call "unstructured file", or on the contrary, these letters are created in "structured file". The advantage of the structured file is to respect a form containing the necessary data that are located with tags in particular fields; some of these data are mandatory information such as the name or the address of the recipient, and all these fields are subject to consistency checks. The other advantage of a structured file is to subordinate the creation, publication, transmission and archiving of the document to verifications of conformity or legality which are entrusted to the trusted third party in the interest of both parties. involved in correspondence. All these constraints are naturally listed in the exchange agreement signed by both parties before starting their organized correspondence.

  The structured file can be created and validated on the sender's workstation before sending the document entrusted to the trusted third party. In the other case, the data is prepared on the workstation and communicated to the trusted third party who merges them on the document model deposited at home. In this case, the sender informed of the composition made by the trusted third party can remotely validate the original of the document before it is sent to the recipient's address by the selected transmission means. In this case, the trusted third party who is the depository of the form and who receives the data to compose the original document, verifies that the mandatory information is completed before proposing the shipment of the document to the signature of the issuer.

  The correspondence agreement signed by each of the parties, independently of each other, makes them adhere to the secure correspondence network R.C.S. They are therefore members of the RCS network. On this occasion, the contract for the provision of services between the sender and his trusted third party, indicates precisely whether each member uses for the outgoing mail (sending dematerialized documents) structured forms with mandatory information, and if the service provider is responsible for the composition of the original documents, or only responsible for the control of their legality or their conformity. Generally, the letter is a mail based on an unstructured file. But most large companies are currently organized according to business rules, regulatory constraints, and new provisions of the laws on financial security, to exchange forms with structured files and controls with their partners or their regular counterparts.

  The composition and / or verification of these forms is entrusted to a trusted third party of correspondence which thus guarantees the legality or the conformity of the documents for both parties. For structured files, the composition is made by the issuer and, in this case, the correspondence trust third limits its service to verify the existence of the mandatory information, or the trusted third party acts as a provider of composition of the document and, in this case, it merges the data received from the issuer into the electronic form of which it is the depository; the result of its composition is first verified by the trusted third party and then validated by the issuer in order to perform the expedition of the document by all means and the archiving of the proofs of this correspondence. The concept of security control relates to the remote identification of parties and the integrity of the data communicated. In addition to the examinations (mandatory information, file partners, addresses or final destinations of the document) to make on the very nature of the computer file from which the original document is established, the trusted third party must remotely control the identity of the issuer by authenticating his electronic signature. He must also check the integrity of his message. It must finally authenticate the recipient and check whether he has signed a prior agreement secure electronic correspondence with his counterpart via the network RCS (membership of secure network correspondence).

  The delivery of dematerialized mail to the recipient assumes that both parties have already defined and agreed in advance the terms of "receipt" of electronic documents: the electronic mailbox hosted and guarded by a trusted third party in its Data Center is the best solution and security. Without a mailbox that is hosted and secured by a trusted third party, proof of receipt can not be established easily and instantly. And any anomalies of correspondence can not be detected, notified, and corrected effectively. The dematerialization of documents is by definition based on the reduction of the risks of litigation and recourse to the courts; the very challenge of the validity of a document and a dematerialized correspondence ruins the chain of trust and its provider. Dematerialization is organized preventively, ensuring that the entire management and signature process does not contain any security holes. In case of malfunction, there is also provided an anomaly detection system, and for each of them, there is provided an instant correction device which is implemented in the same Data Center. In other words, the correction device is not subject to any external authority in order to avoid suspense and delays that are incompatible with the security that must protect the sequence of electronic transactions.

  The security and legality control therefore affects not only the content of the message with its mandatory information, but also the container. The check also covers the electronic correspondence envelope from which the trusted third party will authenticate the identity of the sender, which sends, and the recipient, who receives or acknowledges receipt. The secure email address to receive the yes mail to acknowledge receipt must be an official address, ie an address verified and registered by a neutral trusted third party. Each address is recorded in the contract of adhesion for the issuer and declared for the recipient in the file partners which initiates by invitations the registration of the declared counterparties. The partner file is kept by the neutral trusted third party as specified by the regulations in force. Without this control of legality concerning the identity of persons, their address of correspondence, their signature and the structured contents of their messages (document mail and document acknowledgment of receipt or coupon answer), the probative value of each electronic document can not be established surely and the archiving without control of legality exposes the parties to disputes on the day of its restitution. Prior membership in the secure correspondence network R.C.S requires the establishment of a correspondence agreement with probative value. In fact, the correspondence of hybrid letters or mail (paper and PDF irnage), and of totally "dematerialized" documents is based on the principle of a "correspondence agreement". The organized exchange agreement is based on the need to obtain, at first sight, the membership of counterparties or its regular or professional correspondents. This adherence to the rules of exchange and secure correspondence often refers to a community standard (EDI, XML, ...) and to established practices spared the third-party correspondence trust. It is thus established that the correspondence of letters of probative value is based on the need to include each counterparty or recipient on his "partners file" and to obtain his consent on the rules of exchanges established. These provisions have priority before starting any correspondence movement. Any natural or legal person who sends a letter to a new counterparty, that is to say a person who has not yet subscribed to the membership contract (secure network of correspondence), generally uses the trust services of his / her third party correspondence to submit or propose to the new recipient this contract of adhesion. In this way, both parties accept identical or symmetrical exchange rules at the same trusted third party.

  Both parties shall enjoy the same rights and benefits to administer proof of electronic correspondence: each proof found by the trusted third party of correspondence is established and maintained symmetrically and bilaterally. And the evidence thus recorded is time stamped and sequestered by a bailiff to be enforceable against third parties. The legality check on the correspondence file and the contract of adhesion between the parties to an electronic mail are fundamental elements to establish the probative value of a "dematerialized" document, ie without recourse to evidence material.

  To facilitate the checks of legality and mutual adhesion, the use of the third party trusted correspondence is practical because it is organized to perform these steps and these checks in the interests of both parties. With respect to insurance companies, this security and operational risk reduction model is likely to limit risk premiums.

  Since the rights of individuals, their signatures and file structures can change at any time, the use of the trusted third party is practical because it is committed to controlling these developments. The procedures manual for electronic documents with probative value (letters followed or recommended) successively deals with each of the dematerialization constraints in the order of the factors implemented to guarantee legality and security throughout the entire correspondence chain: - preparation -composition: identification and structured file, - transmission-reception: certification and identification and -archivage-restitution: validation and conservation.

  The contract of adhesion to the convention of "dematerialized correspondence" includes: - the personal inscription, - the identification, - the personal attributes, - the composition of the documents, - the models of correspondence, - the electronic signature, - the partner file, - secure services (trusted third party, third party correspondence, third-party archiving) and - invitation from partners. Regarding the dematerialized correspondence procedure, it includes: - the initial issue, - the original: creation of the document, - legal deposit, archiving: electronic safe (CFE), - message switching : two current correspondence accounts (CCC), - the notification to the addressee, - the acknowledgment of receipt (AR), - the original of the Royal Decree, - the archiving of the Royal Decree, - the surrender of the Royal Decree in CCC, -information to the sender, - consultation, downloading, - failure procedure: alternative hybrid document, - types of mail: recommended document or tracking and - matching: recommended electronic file. Each legal or natural person is registered with the secure correspondence network R.C.S., with his civil status, his telephone number and his Internet address. The trusted third party keeps the directory of its members who are thus in a closed and secure community. With regard to Remote Identification, the registration and registration of personal identities may include those of users or employees assigned to certain correspondence functions. The authorizations are nominative to prepare the data, validate the document, transmit, receive, read or consult, and download. The personal attributes are the discriminating characters generally used to establish the civil status and to qualify the person registered: identification of the legal entity (Kbis), identity card, bank identifier, tax or social are the most used evidence. But for a registered company, it is also the individual and social function that should be specified: manager, corporate officer, director, managing director. The representative of the company that registers with the secure correspondence network RCS to use a current correspondence account, is qualified as an administrator of the application and, as such, can give authorizations for the correspondence functions. All these characters, deposited at the trusted third party to identify people and then authenticate them remotely, are called trust attributes. The trusted attributes are deposited with the trusted third party to enable him to identify the person remotely from his certificate or secret code. These two identification objects carry certain attributes to establish the link between people and their rights in the correspondence and correspondence correspondence account management application. Attributes are also associated with certain personal items of correspondence such as forms with their particular management procedures.

  With regard to the composition of the documents, if they are data that are received by the trusted third party, this means that the member has previously decided with his service provider to entrust him with the composition of the document on the basis of a file. structured model whose model has already been deposited at home. In any case, the trusted third party checks the legality and compliance by verifying the identity of the issuer, the integrity of the data received, the existence of the recipient in his partner file (existing member with contact details without anomalies) and verifies that all mandatory information exists in the document. The composition of the document consists in merging the data on the corresponding registered model, possibly including a bar code and the notation of each partner having a correspondence current account. The rating is a safety index that indicates the value or quality of the record of each person or holder of a current account correspondence. The notation of the identity of each of the parties makes it possible to warn each party of the possible risks existing on the identity of the counterparty, in particular if the registration procedure is in progress or if the rejection of a simple or recommended postal mail in question the accuracy of the domicile or administrative domicile. Insofar as the trusted third party processes hybrid and dematerialized matches, it can detect a number of anomalies that vary the notation of personal identity, the so-called dynamic identity (DLI).

  Regarding correspondence templates, each member may deposit his / her document templates. These are generally contractual documents respecting a formalism with business rules, mandatory or complementary information, and consistency checks. For each form, it is possible for the member to designate the persons responsible for transferring the data, to validate the composition of the document, and to order its transmission with a signature. The trusted third party may also receive documents ready for dispatch, and in this case its role will be limited to verifying the existence of identities / registration numbers / correspondence accounts of stakeholders before making the shipment.

  In certain cases, if the original documents sent by the sender are intended to be archived for a long time at the archival trusted third party, the service provider undertakes to re-test the legality and conformity tests on the basis defined in the agreement. dematerialized correspondence. In this way, one avoids archiving null and void documents. In other cases, the trusted third party acts as a full-fledged document composition provider, and usually intervenes on a template referring to a structured file for which it is responsible for filling all the mandatory information from the data. communicated by the issuer. The letters followed or recommended are usually documents that do not refer to a structured file. The legal and contractual constraints now lead shippers to entrust more and more often to their trusted third party the care of structuring their mail or their dematerialized documents to avoid any dispute or legal dispute later. In any case, companies that do not comply with the dematerialization standards can not claim any compliance with the financial security laws that require them to demonstrate that operational risks in the administrative field are well controlled. . In the absence of certification in this area, companies are thus getting closer to certified third-party trusted providers. (TAJ, etc ...). With regard to the electronic signature, each member has the choice between three signatures to be authenticated remotely and to ensure the integrity of the document durably. Since the trusted third party creates the document in its "Data Center" on the basis of the securely transmitted data, the integrity of the document created in the "Data Center" is not in question. Indeed, the transmission movement being done in the Data Center between two current correspondence accounts, there is no risk of delivery (in English delivery risk). In addition, since the traceability of the exchanges is organized on a bilateral basis (management in double part, that is to say with a copy of the original document in the recipient's current account), any internal error or malfunction will be immediately detected and will be regularized retroactively without difficulty. On the other hand, the integrity of the original document must be ensured durably by the preservation in legal archiving referring to the norm, for example the AFNOR norms. For the document created, transmitted and archived in the same Data Center, authentication of the issuer from its signature is therefore essential. In this respect, in embodiments, a dual authentication device is used for the signature of a document. The issuer is first authenticated by his password to access his current correspondence account (CCC) or to access his office of correspondence: on this interface he can validate, sign and schedule the shipping his document. At this level of signature, it can activate a second secret code to authenticate itself and allow its trusted third party to encrypt the electronic document with its signature certificate which is qualified or secure. Authentication is thus reinforced.

  Authentication with integrity control via a mobile phone and the signature deported in a clean room (signature of the trusted third party) contribute to reinforce authentication and integrity in a context of complete mobility. The signatures are, below, listed in the order of their probative force: For the SEP personal electronic signature, the member has a personal authentication code (pin code) and a secret code exclusively reserved for the exercise of the qualified signature that is used by the trusted third party to sign by proxy and thus to encrypt the documents to be sent. In this way, the integrity of the original document is ensured during legal archiving. The membership agreement provides for this trust service and specifies that all these signature operations are registered, time stamped and confirmed to the member. All signature transactions are also recorded in a signature log that is sequestered every day by a bailiff. Each dematerialized document transmission session is the subject of a traceability report which is integrated into the correspondence current account and matched to the document itself. The traceability report of each original document contains all the registration and time stamp information concerning the acts of authentication and the acts of encryption, each time specifying the nature of the electronic signature used. For the SEA member electronic signature, the secure correspondence network, distributes to the members who request it in their registration form, a private electronic signature certificate exclusively reserved for correspondence and archiving movements in the network of third parties. trust and intermediary operations managed by the member-partners. Each electronic certificate bears the personal attributes of the member or delegate (proxy). These attributes have therefore been previously registered and validated by the trusted third party, based on the declaration of civil status and the receipt of certified vouchers conforming to the original by the holder of the current correspondence account. All transactions made with this certificate are registered and sequestered at the bailiff. The revocation or "suspension" list of a certificate is kept on an isolated server in the same "Data Center", but its exploitation has been entrusted to an independent third party so that in certain situations the trusted third party can not not judge and party. The certificate can be downloaded remotely to be installed by the user on his workstation or on a USB key. As the membership procedure takes several days, the time to collect the documents in the file, the adherent certificate can not be issued on the day of registration, but only after the date of issue of the certificate of membership. For this reason, if the registrant does not already have a qualified public certificate as explained in the following paragraph, the person can sign his electronic registration only with the first signature called personal electronic signature SEP. For the SEQ Qualified Electronic Signature, the subscriber can purchase and use a qualified electronic signature certificate that is distributed by a certificate authority that issues certificates and customizes them according to the personal attributes that have been given to them. by the person himself or by the delegated trusted third party who is a registrar. In this case, the member will have to indicate in his membership form the existence of this certificate in order to inform the trusted third party of the steps which obliges him for each signature to systematically consult the revocation list (certificate canceled or suspended) issued by the certifying authority. The third party of correspondence is the one that ensures the electronic communications, and this by switching messages between the two current secure correspondence accounts, with routing options (delivery by mail, e-mail or secure electronic fax). For each transmission, the certification of the exchanges and the notification of the document to the recipient are services rendered by the third party of correspondence (verification of the validity of the signature certificates at the origin of these exchanges). The archiving third party first ensures the legality control of the document that is transmitted and then only, faithful and durable archiving is carried out with the proofs of correspondence. The archiving third encrypts the document with its qualified signature to preserve the integrity of the original document, and this to deposit it in the electronic vault of the member with a serial number and a time stamp. He can then return each document at the request of its owner. The invitation of a partner can also be made spontaneously at the time of the transmission of a document to a person not yet identified and registered. It is in the partner file directory at the sender, but so far no invitation procedure has been successful. In this case, the invitation / accession procedure is launched simultaneously, and the recipient will not be able to read the document until the registration formalities have been completed. It may therefore take a few days without the document being able to be opened in the current account of correspondence reserved for the use of the addressee. If no membership has been registered within eight days, the electronic document is re-materialized by the trusted third party, placed in an envelope, and sent by mail. But the recipient whose electronic document is kept in his temporary correspondence account, does not have access to this account until the membership is regularized. If the recipient refuses the invitation to join or fails to complete his file within the specified time (two to eight calendar days), the electronic document is re-materialized, that is to say printed by the third party printer and sent by mail. The paper document is accompanied by an explanatory note on the functioning of the secure correspondence network and on the advantages of the correspondence current account reserved for its temporary use. If his membership is regularized within thirty days, he retains the advantage of keeping the first electronic document sent to his current correspondence account. Beyond one month, if the registration formalities are not completed, it is considered that the procedure has failed and the temporary correspondence current account is closed. The reception services, in letter followed or recommended all electronics include the management of the acknowledgments of receipt, the reading of the received documents, the downloading, and the short-term preservation, for example one year. Shipping services have many options for composing, transmitting, and legal archiving. The holder of the current correspondence account indicates whether the trusted third party is chosen as a provider of structured documents or not. In the first case, he gives him his forms with the rules for the management of his structured files (mentions, tags, validation procedures and signature). In the opposite case, if the documents are already prepared, the trusted third party has only the load of the transmission and the faithful and durable preservation. Eventually, the sender may ask the trusted third party to exercise a legality and compliance check before sending and archiving. The personal electronic signature is a simplified signature with a specific secret code. The signature proceeds from an authentication from the combination between the login, the password and the secret code reserved for the encryption of the signed document. The encryption of the message is entrusted to the trusted third party who uses his own qualified certificate to perform this operation. The holder of the correspondence account therefore agrees to give a proxy to the trusted third party only to encrypt its documents so that their integrity is ensured in the Data Center, and for the requested archiving and restitution period. The confidential code implemented for the remote signature is a six-digit number.

  He can read it in different ways: - his mobile phone number (by SMS SMS), - his professional fax number and - his postal address. The secret code transmitted to activate the personal signature which is not signaled in reception within a limited time, becomes inoperative. This delay depends on the communication channel used. For example, this time is: - for the mobile network: 5 minutes, - for the fax: 10 minutes and - for the mail: 3 days. In the event of failure, the procedure must be resumed at the level of choice of the electronic signature. Beyond the deadline, if the recipient of the secret code has not signaled good reception by the chosen channel, the interface indicates that it must resume the procedure at the level of the choice of the communication medium used to restart my transmission secret code. The person who forgets his personal signature secret code may request the creation of a new secret code for his personal signature by reminding the code of his pre-registration of the file (example: 2005.12.18.21.32.Milou) The second signature electronic is the private certificate distributed by the trusted third party: member electronic signature (SEA). This certificate is given only when the registration formalities are completed, that is to say when the trusted third party has received the paper proof (s) of the online registration. These proofs must all be certified by the hand of the member. His signature will be verified by comparison with the acknowledgment of receipt that the post returned to him. In fact, the SEA member electronic signature may be given to the holder of the current account for correspondence as soon as he has received his RCS membership certificate by e-mail. The third electronic signature may be chosen with a certificate distributed by a public certification authority (CA). This is the qualified electronic signature (SEQ). Either the person already has it on their workstation or they ask the trusted third party to get one. This request can not be successful until the membership agreement and the return of supporting documents are formally validated by sending a confirmation of the membership form. In the latter case, the file of registration of his civil status instructed by the trusted third party, will be given by him to the certification authority to customize the signature certificate registered in his name. If the person already uses a qualified certificate on their workstation, they will indicate the name of the certification authority so that the correspondence trusted third party can consult it systematically to check on their revocation list. always valid and active. The membership contract can be signed by the first signature called Personal Electronic Signature (SEP). The contract of adhesion can not be signed again with the member electronic signature (SEA) because it is available only after having obtained the certificate of adhesion. However, this certificate is sent only if all the documents in the file are collected and validated by the trusted third party, which takes a certain amount of time. No member electronic signature (SEA) or qualified electronic signature can be requested without a personal identification and membership rating lower than the certified qualification (Level 3). Under certain conditions, the membership contract can be signed by the third signature with a qualified certificate, ie that which is provided by a certification authority (CA): it is only when this certificate of signature is already installed on the user's workstation at the time of registration. When the membership contract is finally signed, it is registered in the current account of correspondence of the new member, it is even the first exchange in incoming mail that he can open or consult. At this stage, the membership contract is registered with the mention or notation: registered member (ADE). This is the second level of remote identification (level 2 notation). The first level of identification recognized by the trusted third party is the one corresponding to the pre-registration: only the restricted or limited civil status has been completed either by the information provided by the inviting person (confirmed member) or by completed by the new member in the preparatory phase. The preparatory phase is that specifying the civil status with the approval of the contract of adhesion but without mention and choice of an electronic signature. This level is defined as a declared member (or ADD): Level 1, which only allows the removal of letters or documents that are followed. There is no explicit acknowledgment of receipt with an electronic signature but the member has accepted the membership contract. It may subsequently continue the accession procedure to raise its level or identification marking. The certificate of adhesion is formalized and signed by the trusted third party only if the following final formalities are completely respected: The member is invited to send the paper proof of his civil status: photocopies of KBIS, card of identity, Passport, Bank Statement of Identity (RIB) or crossed check. On the photocopy of his civil status, he is asked to affix his handwritten signature by writing certified true to the original, and this by mentioning the date. Upon receipt of the supporting documents by post, the trusted third party verifies that they comply with the statements contained in the electronic membership contract. The trusted third party then verifies that the signature affixed to the acknowledgment coupon of the registered letter sent by the trusted third party is perfectly identical to that certifying the conformity of the photocopies of his civil status.

  If this verification is positive, the trusted third party constitutes the member's electronic file by matching the paper documents (proof of civil status) that will be scanned, with the existing electronic originals, namely the signed adhesion agreement and the hybrid registered letter with its AR (scanned).

  The electronic file is archived in a safe and all proofs of correspondence are sequestered also in a bailiff. At this stage, the trusted third party issues a certificate of membership, the mention of which is as follows: - for a complete file without defect, ADC Level 3 certified member and - for an incomplete file, ADE registered member Level 2.

  On a certain number of criteria specific to the trusted third party, it is possible to reach a maximum level 4 rating. This rating is automatically recognized by the member who has physically presented himself in the third Posteasy registrar. of confidence: it is the recording in opposite. The qualification for level 4 is: certified member plus or ADC +. The rating of the members is systematically included in each correspondence document to inform each counterparty (transparency). There is, for this purpose, a security zone in each correspondence that specifies the references of the two signatures used (SEP, SEA, SEQ) as well as the current notation of the two adhering parties. The notation of identity is one aspect of the present invention. Depending on the quality of the completed registration file, a notation is given to the identity of the holder of the current correspondence account. This notation makes it easy to identify possible anomalies that limit the certification of the trusted third party or which leads to certify with reservations. The downloading of the adherent signature: as soon as the registration contract is validated and confirmed, the trusted third party invites the member to download the signature certificate (SEA or SEQ) which he has requested and which has been reserved for him. Technically, it is a simple applet (in English applet) java (registered trademark) compatible with most computer configurations of the market. If some information about the partner's situation has changed, the trusted third party keeps the inviting user informed and their partner file is automatically updated. In principle, dematerialization relies on the services of a trusted third-party document provider, secure electronic communications operator, and archiver of proof of correspondence. Its services relate to: - strong authentication of the parties to the correspondence, - the encryption or the encrypted fingerprint of the document (Sha1 or.sig), - the structured file with its mandatory information, - the switching of secure message and - on the legal archiving of evidence (1-4). The transmitter sends its data stream by FTPS (secure communication protocol). As a member, he is known to the trusted third party. He has filed or not filed forms or structured files. It is authenticated by its login and password. If it is a server that sends the data stream, there is often a server certificate level 4. The validation of the fold, by the sender, for transmission requires a signature (secret code or certificate). The SEP personal electronic signature is sufficient for this type of operation. The issuer authentication is manifest and the encryption can be operated on the platform in data center with the qualified certificate of the trusted third party. The trusted third party then builds a compressed file (ZIP) containing the document, the signature and the certification. If the issuer does not have a digital certificate, it is the trusted third party that encrypts by proxy. The signature of the trusted third party on the basis of strong authentication gives the validated document an encryption with the qualified certificate of the trusted third party. The compressed file is deposited in the electronic safe of both parties. The legal deposit of the original of the document is time stamped and accompanied by a legal deposit number (DL number) of archiving. Message switching implements the CCC symmetrical current correspondence accounts of both parties. The true copy or duplicate of the original document is posted to the correspondence account. The fold database is filled in: fold number and legal deposit number with the timestamp. The fold format, for example in PDF (registered trademark) is put in the CCC of the issuer and he is informed immediately by notification (e-mail, fax or mobile phone). The notification is a notarized message and therefore saved as e-mail, electronic fax or SMS. The sender can see that the fold has been sent. The recipient is notified, for example by e-mail, of the delivery of a fold with its legal deposit number: in any case he can not read it without having given his acknowledgment of receipt. It is specified to him that the document sent is a fold / document followed dematerialized (DSD) or a fold / document dematerialized recommended (DRD). The acknowledgment of receipt is a document in its own right. This document is either a reply coupon established in the name of the recipient, or a more formalized document that uses the electronic signature to strengthen non-repudiation.

  With the deposit number, the authorized person (recipient) connects to the interface. With his username (Login) and his password, the recipient accesses his current correspondence account (C.C.C.). To remove the recommended document, it is asked for the legal deposit number (DL). The recipient uses his personal electronic signature to sign the AR acknowledgment. His personal electronic signature includes a secret code to reinforce his remote authentication and to enable the encryption of the AR from the qualified certificate of his trusted third party (proxy). If the recipient has downloaded an adherent or qualified digital certificate (distributed by a certification authority), he / she can directly and globally sign his / her AR by encrypting the message himself.In short, the electronic signature encodes the acknowledgment document. recipient who has just registered and who has little control over IT, we recommend the simplified procedure of electronic signature SE: in personal signature SEP, the recipient uses his secret code activation.Activation allows strong authentication and entrusts to the trusted third party the encryption of the AR (with a time stamp) This simplified procedure is comparable to the two others: - in signature adherent, he gives his private certificate and encrypts the AR by himself, - in qualified signature, he gives his public certificate and encrypts the AR by himself In all signature solutions, the validity of the certificate used is verified. To avoid being a judge and a party, the signature servers are entrusted to an independent third party. The trusted third party verifies that the legal deposit number of the delivered document appearing in the RA is correct. The trusted third party then checks for the signature (.SIG) that the certificate used by the recipient to acknowledge receipt is valid. If both of these checks are positive, the trusted third party composes the original RA document. It indicates in the signature log for this original the nature of the certificate used with a timestamp. Each signatory, by activating his electronic signature receives a confirmation e-mail with the references of the signature log.

  The signature log includes: fold / document number, legal deposit / document number, legal deposit number / AR, both membership numbers, both signature references with their time stamp. The original of the AR acknowledgment is archived in the electronic safe. Following the archiving of the coupon or AR voucher, the duplicate or certified copy, for example in PDF format, is submitted in CCC. Both parties are notified by email / SMS of the acknowledgment slip in CCC. The authorized persons can then consult and download the AR. The recipient can then read and download the original of the recommended document. On each current correspondence account, the recommended document and the acknowledgment of receipt are arranged side by side (matching, electronic file management). The traceability of operations is transmitted and sequestered by a bailiff in two phases: -composition document, archiving, correspondence current accounts and -composition of the acknowledgment of receipt, archiving, correspondence current accounts. If anomalies are identified by the trusted third party at the time of entry of the Acknowledgment, they are notified to the addressee of the recommended document (list of anomalies, timestamp, receiver bailiff with time stamp). If the recipient of the recommended document has not completed his acknowledgment receipt within two to eight days, the trusted third party materializes, through the third party printer, a paper document in an envelope and sends this envelope by post to the physical address of the recipient. The recommended document in hybrid format is to deliver the mail in paper format via mail to the recipient. The recipient takes note of the document after signing the paper slip acknowledgment (AR). He may then consult the true or faithful copy in his correspondence account as soon as he indicates on the interface the number of the statement of the acknowledgment of receipt he has received. Otherwise, in chronological order, he can consult all his incoming folds with the paper RAs that were recovered by the trusted third party and scanned. Pairing is used to create a recommended file by reconciling paper and digital documents. Once the trusted third party has retrieved the acknowledgment of receipt signed on paper by the recipient, the latter being delivered to him by post, he can scan it and bring it closer to the electronic document sent. The trusted third party also scans the paper document AR to store in the two current correspondence accounts the handwritten signature of the recipient and the barcode that is associated with the registered letter.

  By entering the AR billing number, the sender and the recipient can open the files, for example in PDF format, of the recommended file (the document and the AR postmarked by the post office). The difference between the recommended dematerialized document and the follow-up is at the level of the acknowledgment of receipt. For the recommended document, the trusted third party makes the recipient compose an acknowledgment of receipt which is a full mail. The dematerialization of the reply coupon therefore respects the formalism of dematerialization. There is a structured format to fill out online by mentioning the legal deposit number and using one of the three electronic signatures. This document is legally archived in electronic safe with a time stamp and its own deposit number. And no reading of the recommended document can be made by the recipient until he has signed the acknowledgment of receipt.

  For the letter followed, simply the simple authentication of the recipient when he connects to his account to let him take notice of the mail. There is no document to be completed to comply with the legal formalism of the acknowledgment of receipt for the recommended correspondence.

  There is only one answer coupon that is optional. Acknowledgment of receipt is administered by producing only the timestamp information at the time of the recipient's access to his correspondence current account, as well as the timestamping of the opening of the file, for example at PDF format containing the incoming document.

  All the steps of the membership procedure are time stamped: - either at the level of connections / communications with the trusted third party, - or at the levels of composition, switching and archiving. Each document has a fold number, a legal deposit number and an acknowledgment number. Each signature is logged on an appropriate audit trail. Electronic communications can be processed by mobile phone, electronic fax, by mail (hybrid mail), or by telephone (server or call center). All the operations appearing in the dematerialized treatment plan of a membership, or of a dematerialized correspondence (LRAR or LS), are recorded and timestamped to feed the general audit track (PAG) sequestered day-to-day in a bailiff. The message recording movements on the current correspondence accounts are made bilaterally with a serial number. Archiving movements in electronic vaults are carried out bilaterally with a legal deposit number. Each time stamp is realized systematically by crossing two atomic clocks including that of Meudon. For the timestamp, we use the NTP protocol (acronym for net time protocol for Internet time protocol) to synchronize with the atomic clock of Meudon.

  In the internal network, the clocks of the servers are themselves in synchronization with the clocks of the two gateways. In the contract of adhesion to the network of secure correspondence each part is warned and accepts that the service is interrupted from midnight to thirty seconds to midnight plus thirty seconds to neutralize any edge effect between two dates, the synchronization tolerance being considered here equal at thirty seconds.

Claims (11)

  1 - Method for securing data transfer, characterized in that it comprises: a step of creating a document by a document issuer, a step of identifying at least one recipient of said document, a step storing a copy of the document in a first memory accessible by the sender of the document but not accessible by a recipient of the document, for each recipient of the document, a step of storing a copy of the document in a document second memory accessible by said recipient of the document but not accessible by the issuer of the document and - a step of transmitting to each recipient of the document, information representative of the existence of a copy of the document at its disposal in a said second memory. 2 - Process according to claim 1, characterized in that it comprises a step of time stamping each step of storing a copy of the document. 3 - Process according to any one of claims 1 or 2, characterized in that it comprises a step of authentication of the recipient and, in case of positive authentication, a step of access, by said recipient, to the copy of the document available in the second memory. 4 - Process according to claim 3, characterized in that, during said step of authenticating the recipient, an acknowledgment of receipt is constituted and in that said method includes a step of storing, in each of the first and second memories, of said acknowledgment in relation to a copy of said document. 5 - Process according to any one of claims 1 to 4, characterized in that the first and second memories are in the same data center. 6 - Process according to any one of claims 1 to 5, characterized in that it comprises a step of transmitting, to a third remote memory, a copy of the document. 7. Process according to any one of claims 1 to 6, characterized in that it comprises a step of authentication of an operator, a step of associating, in memory, a file with a copy of the document, a step of time stamping said association step and a step of assigning, to said file, an identifier of said operator and timestamp data of said association step. 8 - Process according to any one of claims 1 to 7, characterized in that, during the step of creating a document, said document is assigned attributes representative of the recipient's authentication conditions. 9 - Process according to any one of claims 1 to 8, characterized in that, prior to the step of creating a document, it performs a step of authenticating the issuer of the document. 10 ù Process according to any one of claims 1 to 9, characterized in that it comprises a step of association with the document of a certificate of integrity making detectable any subsequent modification of said document, said integrity certificate being memorized , in the first and second memories, in relation to the copies of said document. 11 - Device for securing data transfer, characterized in that it comprises: means for creating a document by a document issuer, means for identifying at least one recipient of said document, - a means of storing a copy of the document in a first memory accessible by the sender of the document but not accessible by a recipient of the document, - for each recipient of the document, a means of storing a copy of the document in a document second memory accessible by said recipient of the document but not accessible by the issuer of the document and means for transmitting to each recipient of the document, information representative of the existence of a copy of the document at his disposal in a second memory .20