EP1344191A2

EP1344191A2 - Electronic franking seal or stamp and corresponding electronic seal or stamp issuing system

Info

Publication number: EP1344191A2
Application number: EP01998940A
Authority: EP
Inventors: François MERCIOL
Original assignee: LA POSTE
Current assignee: LA POSTE
Priority date: 2000-11-30
Filing date: 2001-11-22
Publication date: 2003-09-17
Also published as: WO2002045027A2; FR2817382A1; WO2002045027A3; FR2817382B1

Abstract

The invention concerns an electronic stamp or seal, a method for issuing such an electronic stamp or seal. The electronic stamp comprises at least a two-dimensional image (1) and a coded information structure (2) inserted in said image. The invention is applicable to postal franking, to sealing electronic documents or files and/or physical documents.

Description

ELECTRONIC POSTAGE SEAL OR STAMP AND ELECTRONIC SEAL OR STAMP TRANSMISSION SYSTEM

CORRESPONDING

The invention relates to an electronic postage seal or stamp, such as a postage, and a corresponding electronic seal or stamp issue system.

With the proliferation of information and / or data exchanges via data transmission networks, it has become necessary to ensure a rationalization and a secure authentication of these exchanges, both as regards the exchange of messages or electronic files on the network as the transmission of documents or missives by post or by carrier.

At present, securing and authenticating electronic messages on the network requires the implementation of encryption / decryption techniques accompanied by signature processes, signature verification and non-repudiation.

Such techniques, based either on RIVEST SHAMIR and ADLEMAN algorithms, RSA algorithm, or on the DES algorithm, for Data Encryption System, appear well suited to encryption / decryption and signature / signature verification of transmitted texts.

However, these techniques cannot be easily adapted to the development of seals electronic or electronic postage stamps.

The development of seals or electronic postage stamps is of major interest in ensuring authentication and non-repudiation of the sending of documents or missives, regardless of the confidential or non-confidential nature of the content thereof.

Consequently, the subject of the present invention is the implementation of an electronic seal or stamp making it possible to ensure a high degree of inviolability by third parties of the electronic seal or stamp obtained, and, consequently, authentication of the seal or electronic stamp affixed to any object. Another object of the present invention is also the implementation of an electronic seal or stamp making it possible to ensure a high degree of inviolability by third parties of the electronic seal or stamp obtained, and, moreover, authentication and a non-repudiation of both the electronic seal or stamp and the content and origin of any document or missive bearing such an electronic seal or stamp.

Another object of the present invention is also the implementation of an electronic postage stamp with a high degree of inviolability and a system for issuing such electronic stamps, this electronic postage stamp being likely to be produced and affixed directly by any authorized end user, from a specific domestic installation incorporating such an emission system. Another object of the present invention is also the implementation of an electronic postage stamp of high degree of inviolability making it possible to incorporate, in this stamp, any additional information relating to specific services such as routing and tracking the freed item.

Another object of the present invention is finally the implementation of a system for issuing seals or electronic stamps that can be easily integrated into any specific domestic installation, such as a microcomputer and a color printer for example.

The electronic stamp, object of the present invention, is remarkable in that it comprises, at least, a two-dimensional image, and an information structure coded and inserted in this image.

The system for issuing electronic stamps which is the subject of the present invention comprises at least one host computer provided with an interfacing member and a card provided with a microprocessor, a secure memory accessible in read / write mode, this card being capable of exchanging information with the computer via the interfacing member.

This electronic stamp issuing system is remarkable in that the card includes at least one unique number characteristic of the issuing system and stored in the secure memory area, and, installed in the non-volatile memory area, a program for issuing and management of electronic stamps, this program allowing at least the counting of electronic stamps issued and distributed by this computer. The electronic stamp and the system for issuing electronic stamps which are the subject of the present invention find application in the production of electronic stamps for postage, of envelopes or packaging ready to post or of electronic seals making it possible to authenticate both the origin of the shipment as, if applicable, the authenticity and origin of the content of the object on which the seal is affixed.

The electronic postage stamps and the transmission system ^electronic objects of the present invention will be better understood on reading the description and studying the drawings below in which: Figure 1 shows, by way of example non-limiting, an electronic stamp in accordance with the object of the present invention; FIGS. 2a to 2c represent, by way of illustration, the various data fields entering into the information constituting the information structure coded and inserted in the image constituting the electronic stamp object of the invention when, in a nonlimiting manner, this electronic stamp is more particularly intended to constitute an electronic postage stamp; FIGS. 2d to 2e represent, by way of illustration, the different data fields entering into the information constituting the coded information structure and inserted in the constitutive image of the electronic stamp, object of the invention, when, in a manner nonlimiting, this electronic stamp is more particularly intended for constitute an electronic seal for sealing a document or a missive; - Figure 3 shows, purely by way of illustration, an embodiment of the process for generating an electronic stamp according to the subject of the present invention, as shown in Figure 1; FIG. 4a represents a system for issuing electronic stamps in accordance with the object of the present invention in a hardware architecture using a home computer installation of a user; FIG. 4b represents, by way of illustration, a card of the microprocessor card type comprising at least one program for issuing and managing electronic stamps in accordance with the object of the present invention; FIGS. 5a to 5c respectively represent specific processes for personalizing the microprocessor card, loading prepaid stamps and consuming stamps in prepaid mode respectively; FIGS. 6a to 6c represent, by way of illustration, different steps necessary for the implementation of the specific processes for personalizing the card, purchasing electronic stamp booklets and then consuming these electronic stamps, this server system being managed by an authorized body, such as an administration or a courier operator for example. A more detailed description of an electronic stamp in accordance with the subject of the present invention will now be given in connection with FIG. 1 and the following figures.

Referring to FIG. 1 above, it is indicated that the electronic stamp object of the present invention advantageously comprises a two-dimensional image, bearing the reference 1 in the above-mentioned figure, and an information structure 2 coded and inserted in this image.

The aforementioned two-dimensional image can be constituted by any image of the BITMAP type or coded in bit mode and representative of a specific view for example. By way of nonlimiting example, it is indicated that, in FIG. 1, the image taken into account represents a view of Mont Saint-Michel, a site particularly known and classified as World Heritage of Humanity.

More specifically, it is indicated that the information structure coded and inserted in the aforementioned image can advantageously be constituted by a bar code for example. Given the quantities of information to be included in the stamp, that is to say in the two-dimensional image, and according to a particularly advantageous aspect of the electronic stamp which is the subject of the present invention, the bar code used is a code to two-dimensional bar. Among the two-dimensional bar codes that may be used, it is indicated that the most common bar codes are for example the PDF417 code, the Asteck code or the DataMatrix code.

More specifically, it is indicated that the aforementioned two-dimensional bar code, when this bar code used is the PDF417 code, can be reduced to a succession of coded lines and, ultimately, a one-dimensional bar code consisting of a succession of lines placed end to end. We observe in particular in FIG. 1 various fields represented in the aforementioned information structure, which will be explained later in the description.

In general, it is indicated that the electronic stamp object of the present invention can be configured so as to constitute an electronic postage stamp for example. In addition, the electronic stamp object of the present invention can also be configured so as to constitute an electronic seal making it possible to seal any document, such as a contractual document or a missive for example. The elements of information making it possible to constitute the information structure coded and inserted in the aforementioned image will firstly be described in connection with the following figures 2a to 2c, in the case where the electronic stamp object of the invention is intended to constitute an electronic postage stamp.

As shown in FIG. 2a, the aforementioned information includes, to constitute the coded and inserted information structure, secure franking information AS, franked object tracking information SU and finally, routing information for ROUT prepaid object. In the aforementioned FIG. 2a, the information previously mentioned is represented by the data fields, carriers of this information. Preferably, as also shown in FIG. 2a, the secure franking information and the field AS comprise at least, advantageously, a unique identification number, denoted IDN, of the system for issuing the electronic stamp considered, a number sequence of stamp issuance by this issuing system, introduced in the SEQ field, and finally, the face value of the postage corresponding to the VF data field for example. With regard to the unique identification number of the system for issuing the electronic stamp IDN, it is indicated that this number may correspond to a number of machine for producing electronic stamps in accordance with the object of the present invention, this number of production being established and delivered by the organization or entity empowered to market and distribute the aforementioned electronic stamps or to grant such marketing to authorized third parties.

As regards the face value of the postage supported by the VF field, this face value, in accordance with an advantageous aspect of the electronic stamp object of the present invention, can be expressed in number of postal units of account, for example. The expression of the face value of the postage considered in postal units of account makes it possible to rationalize the distribution of electronic postage stamps, objects of the present invention, independently of the actual value of each postal unit of account expressed in currency national. In addition, as shown in FIG. 2a, the secure postage information includes at least one reference to the requested routing service, supported by the ACH field, the routing service being able to be coded according to the required routing service. by the user of the electronic stamp object of the invention considered, according to a normal, slow routing, requiring monitoring of the conveyed object coated with the electronic stamp object of the invention, by registered mail, with insurance or other.

In addition, as shown in FIG. 2a, the secure postage information can advantageously include an electronic signature value of all or part of the secure postage information.

In FIG. 2a, the global field relating to secure franking information AS has been represented as consisting of the concatenation of the previously mentioned fields. Under these conditions, the electronic signature value S is obtained by a signature operation S of all of the fields making up the field relating to the secure franking information AS from which the signature value itself is removed.

Under these conditions, it is understood that for a signature operation S, the electronic signature value S is obtained according to the symbolic relation:

S = S (AS *).

In this relation, it is indicated that AS * corresponds to the field AS relating to the postage information secure, of course without taking into account the signature value S.

Under these conditions, all of the fields subject to the AS * signature operation verify the relationship:

AS * = AS-S.

It is understood that in an operating process for calculating a signature S, this signature can be calculated from the fields of unique identification number IDN, of emission sequence SEQ, of face value of postage VF, of service of ACH routing, plus other fields likely to in fact constitute secure postage information, the signature value S after calculation then being concatenated with all of the aforementioned fields to finally constitute the field AS relating to secure postage information previously cited. The field relating to the electronic signature value S can then be inserted between the field relating to the reference to the requested routing service ACH and any additional field entering into the constitution of the field relating to secure postage information. The concatenation position of the field of the electronic signature value S can be any one of the aforementioned fields.

It is further understood, with reference to FIG. 2a, that the above-mentioned secure franking information may advantageously include a field supporting the date of issue of the electronic stamp, this date being expressed in the form year, month, day, if applicable hour, minute and second, this information being noted YY: MM: DD: HH: mm: ss. In addition, the secure postage information may include auxiliary information, linked to the service requested, this auxiliary information being supported by the AUX field in FIG. 2a.

Finally, and in a particularly advantageous non-limiting variant of implementation, the secure franking information AS may also include information making it possible to characterize the identity of the sender, such as the name of the sender, if applicable. where applicable, its geographic or other address. The corresponding field is marked CEX in FIG. 2a. To obtain the configuration of the fields represented in the aforementioned figure, it is indicated that the data relating to the various fields IDN, SEQ, VF, ACH, CEX, field of date of emission and auxiliary field AUX, being available, the calculation of the value electronic signature S is made on the aforementioned fields and the value of the signature S is then inserted between the field relating to the reference to the ACH routing service and the field relating to the information characterizing the identity of the sender CEX . As far as the signature calculation operation S is concerned, it is indicated that this operation can be carried out using a public key and private key algorithm, for example, such as the RSA algorithm, for RIVEST SHAMIR AND ADLEMAN, or by any other specific algorithm. Preferably, the signature key is a key whose value is linked to the IDN identification number. With regard to the auxiliary information linked to the requested service, it is indicated that this information may, without limitation, correspond to information on the date and / or the delivery schedule of the object conveyed, this date and this schedule of delivery may be indicated by the sender for example, taking into account the latter's knowledge of the recipient's habits. Other auxiliary information can of course be used. With regard to the routing information of the franked object, information supported by the ROUT field of FIG. 2a, it is indicated that, as represented in FIG. 2b, this information can advantageously include either a standard address corresponding to the regulations in force decreed by the International Postal Union, an address linked to the value-added service, this type of address being commonly designated by universal address. In FIG. 2b, the standard address is denoted S_ADD and the universal address is denoted U_ADD. These types of address will not be described in detail, because they correspond to elements known from the state of the art.

In accordance with a remarkable aspect of implementation of the electronic stamp, object of the present invention, it is indicated that the unique identification number IDN of the issuing system and the number of sequence for issuing the stamp by this issuing system SEQ in fact constitute a unique identification number for each stamp issued. This unique identification number is noted UNT in Figure 2a. Consequently, and in accordance with a particularly advantageous aspect of the electronic stamp, which is the subject of the present invention, the postage-paid item tracking information SU includes at least the unique identification number of each stamp issued, which of course makes it possible to ensure the follow-up of the aforesaid prepaid object, regardless of where it is in the waiting or control position. The content of the SU field relating to the tracking information of the franked object is represented in FIG. 2c.

A more detailed description of the structure of the data fields and of the information contained in these data fields allowing the implementation of an electronic stamp conforming to the object of the present invention when this electronic stamp is intended to constitute an electronic seal , will now be given in connection with FIGS. 2d and 2e.

In general, with reference to FIGS. 2d and 2e above, it is indicated that the structure of the aforementioned data fields to constitute an electronic stamp intended to form an electronic seal, is substantially preserved with respect to the structure of the fields of data, support of information allowing the implementation of an electronic stamp intended to constitute an electronic postage stamp.

In particular, the location of the aforementioned data fields can be strictly identical to that of the corresponding data fields for the implementation of an electronic postage stamp. On the other hand, depending on the nature of the data entered in the different fields, the electronic stamp object of the The present invention may more particularly be intended to constitute an electronic seal allowing the sealing of any document, as will be described below. In general, it is indicated that for the constitution of an electronic seal, the secure postage information is, ultimately, replaced by secure electronic seal authentication information. The overall structure of the corresponding data fields being preserved, in FIG. 2d, the field AS represents the support of the information for authentication of electronic seal secure, the tracking fields SU of sealed object and routing ROUT of this sealed object being able to however, be kept and for this reason bear the same references SU and ROUT.

Although retaining a similar data field structure, the secure electronic seal authentication information constituting the AS field, as represented in FIG. 2d, can then include the unique identification number of the system for issuing the electronic stamp constituting an IDN electronic seal, the issue sequence number of this stamp by the issue system, field SEQ, to of course also constitute the unique identification number of the UNT electronic seal.

Regarding the face value of the VF field, this can then be advantageously replaced by the market value of the document sealing service, this market value being noted W and may correspond to the price paid by the customer to use the service of document sealing by affixing the electronic seal, object of the present invention, to any document considered.

As also shown in FIG. 2d, the field relating to the reference to the routing service can be kept in the form of an ACH field to ensure the routing of the sealed object.

The fields relating to the date and the AUX auxiliary data can be kept in the same way as in the case of an electronic postage stamp.

With regard to the information characterizing the identity of the sender, and in the more specific case of FIG. 2d where the electronic stamp, object of the present invention, constitutes an electronic seal, the CEX field making it possible to identify the the sender in the case of the electronic postage stamp can then advantageously be replaced by any certain value identifying the sender such as a specific code introduced by the latter and known only to the recipient, or where appropriate an electronic signature to authenticate the origin of the entity or person sending the sealed object. For this reason, in FIG. 2d, the corresponding field is denoted SEX, this field being deemed to correspond to an electronic signature of the sender.

Referring to Figure 2d, it is thus understood that any sealed object, that is to say on which the electronic seal, object of the present invention, is affixed, thus makes it possible to authenticate the origin of the affixing of the electronic seal considered with a very high degree of certainty.

It is indicated in particular that the electronic signature value S can then be calculated on all of the fields AS *, which then necessarily include the field relating to the identification code of the user authorized to affix this electronic seal and in particular to the electronic signature of the latter. It is understood in particular that the recipient of the sealed object coated with the electronic seal, object of the present invention, can then successively verify the signature value S upon authorization from the organization providing the sealing service for the sealed object, and of course, under the usual conditions of signature verification, verification of the user's identification code or of the latter's electronic signature. The operation of calculating the electronic signature of the sender and verifying the signature of this electronic signature by the recipient will not be described in detail, because this operation corresponds to an operation known from the state of the art in terms of calculation. , respectively signature verification. Finally, for the purpose of constituting an electronic seal for sealing a document, such as a missive or a contractual document for example, the secure electronic seal authentication information may also include an encrypted value representative of the content of the document. sealed. As shown in FIG. 2 above, the numerical value, representative of the content of the sealed document, can be calculated from a hash function making it possible to reduce any content of a document, such as a contractual document or a missive, to a condensed value of predetermined substantially fixed format. Such hashing functions are usually implemented within the framework of signature calculation operations, respectively of signature verification within the framework of the RSA algorithm previously cited in the description. Under these conditions, when the electronic seal is affixed, the user sending the document calculates the abovementioned condensed value, denoted HCONT. This value, representative of the content of the sealed document, can then be associated, as shown in FIG. 2e, in a nonlimiting manner, with secure franking information, franked object tracking and routing supported by the fields AS, SU , ROUT previously mentioned in the description.

The condensed information relating to the content of the document, HCONT, can then advantageously be concatenated for example with the market value of the sealing service W, to constitute a composite field W-HCONT for example.

During the production of the electronic stamp constituting an electronic seal in accordance with the object of the present invention as shown in FIG. 2e, the electronic signature value S of the set of fields AS * is then calculated taking into account, not only the electronic signature of the sender or the identification code of the user authorized to affix the electronic seal, represented by the SEX field, but also from the W-HCONT composite field.

Under these conditions, the electronic signature value S is not only representative of the sender, or user authorized to affix the electronic seal, but also of the content of the document sealed by means of the abovementioned electronic seal.

Under these conditions, the electronic stamp constituting an electronic seal in accordance with the object of the present invention, as represented in FIG. 2e, makes it possible not only to authenticate the origin of the affixing of the electronic seal, but also to guarantee non-repudiation by the editor of the document, that is to say the sender, of the content of this sealed document on which the electronic seal, object of the invention, has been affixed.

With regard to the information for tracking the sealed object SU and for routing the latter ROUT, it is indicated that this information can be advantageously maintained, in particular when the sealed document consists of an electronic file transmitted over a network. Indeed, when, for example, the establishment of a multi-party contract, the writer of the contract can, for example, indicate in the routing information field the successive addresses of the parties who must accept the conditions and obligations indicated in the contract and of course give their consent to them. This consent can then be implemented by the affixing of an electronic seal by each of the parties, the routing information being updated by each party concerned successively. A more detailed description of the calculation of the coded information structure occupying a two-dimensional area of the image constituting an electronic postage stamp or an electronic seal in accordance with the object of the present invention will now be given in conjunction. with figure 3.

In general, it is indicated that the information structure inserted in the initial image, BITMAP image, can be formed from all or part of the image information of the aforementioned two-dimensional image.

The coded information constituting the aforementioned coded information structure can be encrypted from all or part of the image information, in order to make it possible to establish a link between the coded and encrypted information structure and the two-dimensional image. constituted as a reference image.

Under these conditions, as represented in point a) of FIG. 3, to develop an electronic stamp in accordance with the object of the present invention, one starts with an electronic vignette or starting BITMAP image bearing the reference 1 in which one cleans an FI insertion window of determined dimensions. By way of nonlimiting example, the insertion window FI can be produced by uniform colorization of an area of the starting image constituting the insertion window FI.

In addition, on the initial image provided with the insertion window FI, a part of image PZ is defined whose dimension is substantially greater than that of the insertion window FI. From the image part PZ and the information contained in the image information area, specific image information is then calculated to be inserted in the two-dimensional area occupied by the structure of coded information, c 'is to say through the FI insertion window. This calculation is carried out and represented in point b) of FIG. 3 by application of a two-dimensional hash function to the image part file PZ. This calculation checks the relationship:

3 _xy (PZ) = H.

The value H represents a two-dimensional digest of dimensions substantially equal to those of the insertion window FI for example.

Step b) is then followed by a step c) consisting in calculating the signature value S according to the relationship previously given in the description S = S (AS *). AS * designates the specific information data associated with the electronic stamp or seal.

Following step c), the data structure to be inserted in the window FI is then calculated from a two-dimensional coding function (2, applied not only to the electronic signature value S but also to the digest value of image H, the values S and H being combined.

The coding calculation function Q naturally corresponds to the two-dimensional bar code previously mentioned in the description. In particular, when the PDF417 code is used, it is possible to reduce to a one-dimensional coding of successive lines, constituting the value H calculated in step b), the values S and H can then be concatenated. The two-dimensional code value is then inserted into the insertion window FI in step e) and the electronic stamp or seal is obtained, object of the present invention as shown in step f) and corresponding substantially to the electronic stamp or seal shown in Figure 1.

Regarding the practical methods of implementation and calculation of electronic stamps as shown in Figure 3, it is indicated that, when using the barcode PDF417, the truncated option can be used, which allows to delete in the coded information structure, inserted in the insertion window FI, the two right columns of the code, as shown in FIG. 3. The information contained in the aforementioned deleted columns is redundant and their deletion does not results in no loss of information.

As regards the choice of the image part PZ, it is indicated that this choice can be made randomly, however excluding the image part corresponding to the insertion window FI.

The information of the information structure inserted in the FI insertion window can then be structured as follows:

- structure version, -

- coordinates of the upper left corner of the PZ image part;

- size of the image part, width, height; - result of the hash function calculation based, for example, on threshold values of the basic colors red, green and blue.

The structure version information can be coded on one byte, the left corner coordinates on two bytes, the size of the image part on also two bytes, the hash function calculation results on eleven bytes, and l all of this information occupies a total of sixteen bytes. The information structure thus obtained, as shown in FIG. 3 in step f), thus comprises three lines of information relating to postage, service, routing and routing. ^'' Regarding the franking line, this can be structured as follows:

- identification number of the IDN transmission machine, number coded on four bytes;

- transmission sequence number of the electronic stamp SEQ coded on four bytes;

- value in hundredths of monetary unit of account, hundredth of euro for example, coded on two bytes, the aforementioned value in hundredths constituting a postal unit of account; - date of issue or creation of the electronic stamp coded on two bytes;

- characteristic area of the image, that is to say the PZ image part used for the calculation of the data structure, coded on sixteen bytes as mentioned previously; - calculation of the electronic signature value of the stamp coded on two bytes corresponding to the value S.

Regarding the service line, this includes information depending on the services offered by the messaging provider. By way of nonlimiting example, the service line may include the date of issue of the stamp as well as a list of services retained by the sender and coded by means of a service number as well as additional information. This additional information may correspond to the AUX auxiliary data field previously mentioned in the description. This auxiliary or additional information may include: the sending of acknowledgment of receipt to the address of the sender authorized, by contract, to produce electronic stamps in accordance with the subject of the present invention;

- request for information on folds or unaddressed letters or other information. With regard to the routing information contained in the ROUT field, this can be formatted according to conventional formats, which will not be described in the present description.

A more detailed description of an electronic stamp issuing system in accordance with the object of the present invention will now be given in connection with FIGS. 4a and 4b.

In general, it is indicated that the system which is the subject of the present invention is implemented from a so-called domestic installation, advantageously comprising a host computer 0 provided with a member interfacing, denoted 01, and a card fitted with a microprocessor. The card bears the reference C. In addition, the domestic installation comprises a printer I connected to the computer 0. The interfacing member can be constituted either by a microprocessor card reader, a chip card of the bank card type , or by a PCMCIA type interface. When the interfacing member is constituted by a bank card reader, the card C is a bank card, also called a smart card. When, on the contrary, the interfacing member is a PCMCIA type interface, the card C is itself constituted by a PCMCIA card.

In general, the card C is provided with a microprocessor, a secure memory accessible in read and a non-volatile memory accessible in read / write. The card C is capable of exchanging information with the computer O via an interfacing member 01. It is understood in particular, as described in a nonlimiting manner in FIG. 4b, that in the case where the card C is a card of the smart card type used with a card reader of the bank card reader type, the card C can advantageously include a non-volatile memory bearing the reference 10, such a memory usually comprising a ROM type memory 10a, a secure memory 10c and a programmable memory 10b. In addition, the card C is then provided with a signature calculation system SI bearing the reference 11, a RAM type working memory bearing the reference 12 and a microprocessor 13, the microprocessor 13 being directly connected to an I / O input / output member bearing the reference 14. The operating mode of these various elements will not be described in detail since it corresponds to elements known from the state of the art. It is simply indicated that the signature calculation system is secure and includes all the key parameters allowing the calculation, respectively the signature verification if necessary.

More particularly, and in order to ensure the production of electronic stamps in accordance with the object of the present invention, the card C comprises a unique number characteristic of the emission system, the IDN number previously mentioned in the description, this number being stored in the secure memory area 10c shown in FIG. 4b. In addition, the card C includes a program for issuing and managing electronic stamps, this program being denoted PEG and which can be stored either in ROM memory 10a or in non-volatile programmable memory 10b. The aforementioned program, PEG allows at least to count the electronic stamps issued and distributed by computer 0.

In accordance with an advantageous aspect of the system for issuing electronic stamps, which is the subject of the present invention, it can be adapted taking into account the functionalities of the card C, this card can be constituted either by a disposable card after use, or by a rechargeable card, or by a card itself producing its own electronic stamps or electronic seals. In the case of a disposable card, it is indicated that the structure of the card C as shown in FIG. 4b can be simplified, insofar as the signature calculation system SI bearing the reference can be eliminated.

Under these conditions, the end user purchases an electronic stamp book in a kiosk, these electronic stamps being, of course, stored in non-volatile programmable memory 10b. Under these conditions, the end user uses the postal units included in the card and corresponding to the face value of the electronic stamps stored in the latter. Each electronic stamp stored in the card refers to the unique stamp identification number U-N-T previously mentioned in the description. When franking, the user inserts card C into the card reader and proceeds to the franking operation via computer 0. The franking operation amounts to requesting, from computer 0, a pre-signed stamp available and stored in the programmable memory 10b. Following the transfer of a determined stamp into the memory of computer 0, this stamp is marked as consumed in the card and the PEG program for issuing and managing updates the number of stamps available in the card. In this case, the PEG issuing and management program simply ensures the count of the number of stamps remaining stored in the card following use.

In the case of a reloadable card, when reloading the card, which may also not include the signature calculation unit, a verification 11, can be done through the server SV to which the host computer O is connected.

The user first connects to the SV server in order to personalize the C card. Following the connection, the SV server assigns a unique number to the franking machine, i.e. an IDN number stored in secure memory 10c. This number can advantageously be associated with a consumption account. In the event of fraud, this account becomes invalid for the production of electronic stamps. Card C is then considered to be a container for programmable stamp booklets. All electronic stamp booklets loaded into card C then refer to this container. The end user can then reload this card from other notebooks using the PEG issuance and management program previously mentioned. To carry out franking, for example, the PEG transmission and management program consults the card to determine how many stamps there are per value stored in the non-volatile programmable memory 10b. Depending on the choice of the user, an available stamp whose amount corresponds to the service chosen by the user is returned, transmitted to the host computer O and, of course, erased from the card; the count of the remaining stamps is updated.

In the case of a card C itself producing its own electronic franking stamps or electronic seals, it is indicated that, preferably, when the card is constituted by a smart card, this card can consist of a multi-application card. In addition, and for the production of an electronic seal transmission system, the card C can advantageously consist of a card of the PCMCIA type, which is then inserted into the PCMCIA interface of the host computer O. Indeed , this type of card and the PCMCIA interface allowing the connection of the latter to the host computer are endowed with greater computation and data transmission capacities than chip cards and smart card readers of the banking type. Consequently, and for the calculation of electronic seals and the issuance thereof, more powerful calculation means may be preferred.

In all cases, card C producing its own electronic stamps can be assimilated to an electronic wallet whose particularity is to manage in fact the postal account unit.

Under these conditions, card C has a unique franking machine number which is assigned once and for all to the aforementioned card C by the service or courier service provider and, of course, empowered to issue such a unique number. postage meter, IDN number.

When reloading the card C through the server SV, the PEG transmission and management program proceeds to increment the consumption counter, the credit granted to the user holding the card C. This counter stores the number of postal units available on this card following reloading. Of course, the card C in this situation is then provided with the signature calculation system SI bearing the reference 11. It is the same when the card C is a PCMCIA card. To carry out the franking operation, the PEG program indicates the amount chosen and the date of franking, information given by the user, respectively by the host computer O.

The card C then performs the calculation of the electronic signature value S, this calculation having the purpose of signing the electronic postage stamp from all the information of the stamp, that is to say, as mentioned previously in description, data field A *. The signature operation, as mentioned previously, is carried out using a signature key stored in secure non-volatile memory, that is to say the memory 10c represented in FIG. 4b, this signature key being noted K _s .

All the information coded in the different data fields constituting the information structure inserted in the FI insertion window of an electronic stamp, respectively of an electronic seal, object of the present invention, of course allow the implementation of functions or services, which will be indicated below:

- Case of the control of a false unit:

When the identification number of the IDN issuing system does not correspond to a number issued by the courier service provider, or when the signature value S of the electronic stamp is incorrect, then fraud can be declared. - Duplicate check case:

Electronic stamps are dated and may have a limited duration of use. Consequently, it is possible to keep numbers previously used in databases for a period limited to the range of use. In addition, in the case of disposable stamp books, corresponding to disposable cards, or in the case of electronic stamp issuing cards, electronic stamps can advantageously be issued in ascending order of the UNT number assigned to them. Management optimization then consists in memorizing the last number used by a given transmission system. If an already consumed number or an expired date is observed on an electronic stamp, then fraud may be suspected. The messaging service provider can then use any means to stop such fraud.

- Case of a single address: Some providers have local distribution points, such as post office, town hall, health insurance funds, tax collection center, for example. An end user of electronic stamps conforming to the object of the present invention can then send a letter, without however knowing the exact geographical address of all its distribution points. For example, to request a change of subscription or subscription contract for electric power distribution, a customer can send a letter to the electric power distribution service as a recipient. Arrival at the depot, the missive is analyzed from the electronic stamp according to the place of deposit and the address, read in the bar code, that is to say in the information structure inserted in the electronic stamp is interpreted using routing tables for single addresses. The address of the electricity distributor is then transformed into a distribution point corresponding to the antenna closest to the subscription requester. - Case of a temporarily transferred address:

Mr. MARTIN lives in city A and spends a month traveling in city B. He indicates his temporary change of address to his courier service provider. The latter updates temporary address transfers.

Mr. DUPONT living in a city C addresses a letter to Mr. MARTIN during this period to his address in city A. At the point of deposit of this letter, the latter is analyzed, the address of Mr. MARTIN being recognized and an interrogation of the tables of transfer from the region of city A verifies that the routing can be carried out. If so, the aforementioned mail is routed to city B, thus avoiding transit through city A. The case of an address transferred definitively is substantially similar. - Case of postage paid or sealed object tracking:

The end user chooses an amount of sealing service corresponding to the market value W previously mentioned in the description and allowing the execution of this service. The affixing of stamp or electronic seal is then carried out and, at each connection to the SV server, the PEG transmission and management program updates a local database concerning the tracking of franked or sealed objects.

More specific indications relating to the information given by the SV reload server will be given below.

The consumption data sent by the end user affixing the electronic stamp in the case of a rechargeable prepaid card can advantageously be structured as follows: information on the nature of the stamp book; stamp signature list; - information concerning the graphics used and of course authorized by the messaging service provider.

The stamp book information line includes: - the number of the issuing system, also designated by contract number, coded on 4 bytes, this number being allocated to the end user for its issuing system on a contractual basis ; the number of the first stamp of the reloaded notebook, coded on 4 bytes; the number of stamps in the book, coded on 2 bytes; the date of creation of the electronic stamp book, coded on 2 bytes. The signature line is subsequently made up of the signatures of each numbered stamp. The information line on the graphic design of the stamp in question includes: the coordinates for placing the bar code in the graphic design, that is to say the insertion window FI, coded on 2 bytes; the information of the characteristic area chosen for recognition, that is to say the PZ image part coded on 16 bytes, as mentioned previously; - specific URL coordinates where the graphic design of the chosen stamp can be downloaded for example; the name of the graphic design of the electronic stamp in question.

Different indications will now be given in connection with FIGS. 5a to 5c and 6a to 6c relative to the process implemented in order to ensure the personalization of the card C according to the end user, the loading of prepaid stamps, respectively the process consumption in prepaid mode. The process for personalizing the card C represented in FIG. 5a consists in downloading the card and then initializing the data on board, as mentioned previously in the description, and finally assigning a contract number , that is to say an IDN identification number giving the card C, and finally the installation constituting the issuing system, its identification number for issuing electronic stamps. With reference to FIG. 6a, the abovementioned operations of FIG. 5a, in relation to the server SV, can be carried out by the transmission 1 of a proof of purchase from the host computer O to the server SV, this proof of purchase may consist of an acknowledgment message of an amount corresponding to the purchase of electronic stamps. Following the administration of the proof of purchase, the SV server transmits a message for the supply of an applet and a unique machine number, that is to say the IDN number identifying the system of transmission to the host computer O. The process of personalizing the card 3 is carried out, as shown in FIG. 5a. Following these operations, the assembly constituted by the host computer O, the printer I and the card C, can then proceed to the issue of electronic stamps. The process for loading prepaid stamps is shown in Figure 5b. It consists, at the level of the card C, in a reception of a book of stamps, in a control of the limits of the card, limits in number of electronic stamps or in value in postal units, in a stage of recording of the graphics new, when new graphics are proposed by the courier service provider, followed by a check of the contract number, that is to say the IDN identification number of the issuing system, and the sequentiality of the stamps downloaded , and finally, in a step of updating the data of the card C.

These operations, in relation to the server, are represented in FIG. 6b, the operation of loading prepaid stamps which can consist in the sending of a message, by the host computer O to the server SV, of indications of the quantity , value and graphics stamps, the response from the server SV to the host computer O by the sale of the stamp book, the transfer by the host computer O and the card C of the process for loading prepaid stamps, as represented in FIG. 5b, and finally, on request, when stamps are issued by the printer I.

Finally, the consumption process in prepaid mode is shown in Figure 5c. It consists in proceeding with card C in a step of requesting the different possible values, followed by a step of requesting the available graphics by values, then of a consumption step by choosing a value and a graphic , and a step of updating the card data. The electronic stamp or electronic seal chosen is then returned to the host computer O by the card C. These consumption operations in connection with the server SV are shown in FIG. 6c.

In the above-mentioned figure, the end user, from the host computer O, for example transmits an authorization request RA to the server SV, which responds with an authorization agreement message AA to the latter when the conditions of use and authorization of stamp issuance are satisfied by the aforementioned end user. The host computer O then performs, in conjunction with the card C, the consumption process in prepaid mode represented in FIG. 5c and the host computer O then orders the issue of the stamp or of an envelope pre-stamped by the printer I.

We have thus described an electronic stamp or a particularly efficient electronic seal, insofar as the use of a specific graphics, graphics authorized by the service provider, as a support for postage or the affixing of an electronic seal, allows you to benefit from the advantages of the classic stamp or seal. On the one hand, the use of a specific graphic corresponds to the brand image of the courier service providers and also makes it possible to concretely materialize the postage. Such a process corresponds substantially to the consumption habits of customers and of course makes it possible to retain a philatelist clientele for example.

In addition, the electronic stamp or the electronic seal, object of the present invention, includes a unique identifier allowing of course the identification of each stamp issued. Such an identifier is used for marking franked, respectively sealed objects, and naturally offers a significant element for tracking objects in transmission networks, postal or messaging networks, respectively Internet or other networks.

The identification number of each stamp or electronic seal also makes it possible to detect the replay, that is to say the fraud corresponding to the successive printing of the same stamp on several supports of objects or envelopes.

Finally, the physical form of the electronic stamp or seal, which is the subject of the present invention, is in no way linked or fixed in the examples described. In particular, it is of course possible to edit electronic stamps or seals at the request of the customer or end user by a procedure for choosing graphics. specific by the latter, enabling this graphic design by the authority or organization providing a messaging service or sealing objects, then, following this graphic design authorization, determining the parameters for calculating the electronic seal or stamp in the conditions previously described in the description in conjunction with FIG. 3.

Claims

1. Electronic stamp, characterized in that it comprises at least: a two-dimensional image, and - an information structure coded and inserted in this image.

2. Stamp according to claim 1, characterized in that said information structure is constituted by a two-dimensional bar code.

3. Stamp according to claim 1 or 2, characterized in that, to constitute an electronic postage stamp, said coded and inserted information structure comprises: secure postage information; - postage paid tracking information; postage object routing information.

4. Stamp according to claim 3, characterized in that said secure franking information comprises at least: - a unique identification number of the electronic stamp issuing system; - a stamp sequence number for this stamp system; the face value of postage in number of postal units of account.

5. Stamp according to claim 4, characterized in that said secure franking information comprises at least, in addition: a reference to the requested routing service; an electronic signature of all or part of the secure postage information; a date of issue of the stamp; auxiliary information related to the service requested.

6. Stamp according to claim 3, characterized in that said stamped object routing information comprises either a standard address or a universal address.

7. Stamp according to one of claims 4 to 6, characterized in that said unique identification number of the issuing system and said stamp sequence number of issuing by this issuing system constitute a unique identification number of each stamp issued.

8. Stamp according to claims 3 and 7, characterized in that said stamped item tracking information comprises at least said unique identification number of each stamp issued.

9. Stamp according to one of claims 3 to 8, characterized in that said secure postage information includes information characterizing the identity of the sender.

10. Stamp according to one of claims 1 to 9, characterized in that said coded information structure occupying a two-dimensional area of said two-dimensional image, said information structure inserted in this image is formed from all or part of the image information of said two-dimensional image, said coded information being encrypted from said whole or part of the image information, which makes it possible to establish a link between said structure encoded and encrypted information and said two-dimensional image constituted as a reference image.

11. Stamp according to claim 10, characterized in that said all or part of the image information is formed from an image information area of dimension substantially greater than that of an insertion window constituting the two-dimensional area occupied by said coded information structure.

12. Stamp according to claim 11, characterized in that said image information is obtained from a two-dimensional hash function applied to the image information area.

13. Stamp according to one of claims 1, 2 or 10, characterized in that, to constitute an electronic seal, said coded and inserted information comprises: authentication information of secure electronic seal; tracking information of the sealed object, on which the electronic seal is affixed; routing information of the sealed object, on which the electronic seal is affixed.

14. Stamp according to claim 13, characterized in that, to constitute an electronic seal, said secure electronic seal authentication information comprises at least:

- a unique identification number for the electronic seal issuing system; a transmission sequence number of the seal by this transmission system; - an identification code of the user authorized to affix this electronic seal, which makes it possible to authenticate the origin of the affixing of said electronic seal.

15. Stamp according to claim 14, characterized in that, in order to constitute an electronic seal for sealing a document, said secure electronic seal authentication information furthermore includes an encrypted value representative of the content of said document, which allows, on the one hand, to authenticate the origin of the affixing of said electronic seal and, on the other hand, to guarantee non-repudiation, due to the editor of this document, of the content of this sealed document on which said seal electronic has been affixed.

16. System for issuing electronic stamps, this system comprising at least one host computer provided with an interfacing member and a card provided with a microprocessor, a secure memory accessible for reading and a non-volatile memory accessible in read / write, this card being capable of exchanging information with said computer by the intermediary of this interfacing member, characterized in that said card comprises at least: - a unique number characteristic of said transmission system and stored in secure memory area; and located in a non-volatile memory area, a program for issuing and managing electronic stamps, said program making it possible at least to count the electronic stamps issued and distributed by said computer.

17. The system of claim 16, characterized in that said interfacing member and said card are PCMCIA standard.

18. System according to claim 16, characterized in that said card is constituted by a smart card of the bank card type and said interfacing member by a smart card reader.

19. System according to one of claims 16 to 18, characterized in that said program for issuing and managing electronic stamps further comprises a program for creating electronic stamps, said creation program allowing at least the allocation to each stamp created with a transmission sequence number, said unique number of the transmission system and said transmission sequence number constituting a unique identification number for each electronic stamp issued.

20. Method of issuing a stamp or an electronic seal from an electronic sticker and specific information data of this stamp or electronic seal, characterized in that this process consists of: in this electronic thumbnail a window for inserting a coded information structure and in defining in this electronic thumbnail a specific image information zone; b) calculating, from the information contained in said image information area, specific image information; c) calculating a signature value of said specific information data; d) calculating, from a combination of said specific image information and said signature value, an encoded information structure value; e) inserting said coded information structure into said transmission window, said coded information structure being representative of both said specific information data and of said electronic sticker, the assembly formed by said electronic sticker provided with its insertion window and by said coded information structure inserted into said insertion window constituting said stamp or electronic seal.