FR2817427A1 - ONLINE TRANSACTION AND BACKUP PROCESS - Google Patents

Abstract

The invention concerns an online transaction method comprising a step which consists in preparing a digital file including at least an addressee's identifier, a transaction server identifier and a digital representation of the message to be transmitted; a step wherein said file is transmitted by the addressor to the transaction server and said file is recorded by the server; a step wherein said addressee is notified by the server of the availability of said file; and a step wherein said file is transmitted to the addressee in response to a request coming from said addressee. The invention is characterised in that the transaction server carries out a back-up step after receiving each digital file which consists in calculating a signature of said file, in transmitting said file over at least an archiving server physically independent of said transaction server, in verifying from a control server optionally separate from the transaction server the conformity between the signature calculated by the transaction server and the signature calculated by the archiving server, and sending a notification in case of positive verification, or an error message in other cases.

Description

<Desc / Clms Page number 1>

ONLINE TRANSACTION AND BACKUP PROCESS. The present invention relates to the field of transactions and secure backups in order to provide further proof.

 In the state of the art, processes and architectures are known for offering such services. An example is the Israeli patent application IL19960119430 (WO9817042) concerning a method for transmitting secure and recommended electronic messages. This process includes a step of archiving the transmissions making it possible to provide the sender of the message with proof of the delivery of his shipment.

 Another system known in the prior art is operated by the Canada Post Corporation and its operation is presented on its site at the URL address http: // www. CanadaPost. AC / CPC2 / eps / PosteCS / postecsf. html.

 The sender accesses the service via a computer station equipped with a browser and / or messaging software. It designates one or more recipients, the document and the delivery parameters, including security measures or a confirmation request. It then downloads the file to the protected server which it accesses via a secure SSL session. The server generates an email notification to each recipient, which includes a unique web address (URL) for accessing the document uploaded to the server.

 The secure server protects the confidentiality and security of shipments by means of an encryption system.

 The recipient receives a notification by email informing him that a shipment is pending on the server. To retrieve it, the recipient activates a link corresponding to the URL address in the e-mail message or

<Desc / Clms Page number 2>

 to cut and paste the address in his browser. He can then download this document intended for him.

 The disadvantage of the solutions of the prior art is the weakness of the convincing nature of the transaction. It may happen that the SSL session opened for the transmission of the document by the sender to the server is disrupted or interrupted with the acknowledgment of the operation, or that the download procedure by the recipient is disrupted, or that the server knows a failure.

This server is indeed a potential target for attacks by hackers. In these cases, the sender will not be able to prove the date and the nature of its sending, nor of the good reception by the recipient (s).

 The object of the invention is to remedy these drawbacks by proposing a solution comprising an advanced archiving step.

 To this end, the invention relates, in its most general sense, to an online transaction method comprising a step of preparing a digital file comprising at least one identifier of a recipient, the identifier of a transaction server and a digital representation of the message to be transmitted, a step of transmitting said file by the sender to the transaction server and recording of said file by the server, a step of notification by the server to said recipient of the availability of said file, and a step of transmitting said file to the recipient in response to a request from said recipient, characterized in that the transaction server performs a saving step after each reception of a digital file consisting of calculating a signature of said file, to be transmitted on at least one archive server physically independent of the transaction server said file, to be checked by shot from a control server

<Desc / Clms Page number 3>

 optionally separate from the transaction server, the conformity between the signature calculated by the transaction server and the signature calculated by the archiving server, and the sending of a notification in the event of a positive verification, or of an error message to the sender in other cases.

 Advantageously, the transaction server performs a time stamping operation on the sender's digital file consisting in calculating a digital fingerprint of a set comprising said digital file, the time stamping data and unique identifier of said digital file.

 According to a variant, the archiving server performs an operation of burning each file on a non-modifiable hardware medium, and transmitting to the control server a digital control code.

 According to another variant, the method comprises an initial step of calculating a unique digital key by the workstation of the transmitter, said unique key being associated with the message in each of the subsequent steps.

 Preferably, the transaction server transmits each file to a plurality of physically separate archiving servers, and in that it includes a control server verifying the conformity of the signatures calculated with each of said servers with the signature of the original file.

 According to a variant, the transaction server performs a step of calculating and writing a key based on a digital fingerprint of the file and of an identifier of the archiving medium.

 According to a preferred embodiment, the transaction server performs a step of generating a random key CAS1 and recording of said key by the archiving servers, and a step of scrambling the digital file coming from the sender to using said key

<Desc / Clms Page number 4>

 CAS1 random by incorporating random characters into said digital file.

 Advantageously, the transaction server performs a step of compressing the digital file.

 According to a particular implementation mode, the transaction server performs a step of cutting the digital file into n blocks and separate archiving of each of said blocks.

 Preferably, the transaction server performs a step of cutting the file into a plurality of blocks, generating the second random key CAS2, encrypting each of the blocks with the addition of the key CAS2 and the identifier of the next block.

 According to a variant, the encryption of said blocks is carried out according to a plurality of modes alternating randomly.

 According to a specific embodiment, the transaction server performs a step of encapsulating all of the digital elements before transmission to the archiving servers.

 The invention also relates to a computer system for implementing the method comprising a transaction server and a plurality of filing servers, interconnected by a secure communication means, and a control server for comparing a signature of a 'an original file calculated by the transaction server, and the signatures of peer files calculated by the archiving servers.

 The present invention will be better understood on reading the description of a nonlimiting exemplary embodiment which follows, referring to the appended drawings where: FIG. 1 represents the block diagram of a system according to the invention.

<Desc / Clms Page number 5>

The invention will be described in the following in the form of a nonlimiting exemplary embodiment.

 The system includes: computer equipment (1) operated by senders computer equipment (3) operated by recipients.

 This equipment is made up of computers comprising communication means for accessing a communication network, for example the Internet, via an access provider (10). The equipment (1) and (3) can be identical. They are represented by two distinct elements in FIG. 1 only to facilitate the description. The same user can alternatively be a sender or a recipient, and operate from the same workstation.

 The object of the invention is to secure communications (e-mail, document sending, fax, telephone, online conversations) by means of encryption procedures and transactions via a transaction server (3), and to ensure the traceability thanks to archiving servers (4,5).

 The transaction server (3) comprises a connection server and an electronic message server as well as an electronic message router. It is physically installed in a secure room, in a shielded cabinet comprising: two groups of interconnected computers in clustering according to the Raid 5 technology, cabinets for burning on glass discs according to the TRUE WORM technology (trade name). Etching is carried out by physical transformation of the material by permanent etching, in real time, of all

<Desc / Clms Page number 6>

messages passing through the servers, whether constituted by faxes, e-mails, telephones of the type
IP6v or any other form of electronic message.

 A time base permanently synchronized on three atomic clocks two secure routers an alarm center permanently monitoring the proper functioning of the system and its security of the stand-alone standby power supply remedying any possible disruption of the electrical network.

 This transaction server (3) communicates with two archiving servers (4,5) by a secure link by high speed optical fiber of virtual channel type.

 These archiving servers each include engraving equipment (14,15), as well as online printing equipment for all transactions.

 It is also connected to a control server (6) by a virtual channel. This control server includes a mail server and secure computer equipment.

 The control server (6) furthermore comprises a central unit permanently monitoring all the sites and only authorizing operation if all the sites are online and consistent (identical keys and programs on all the sites).

 Each recording of a digital file includes, during its archiving: an identification key

<Desc / Clms Page number 7>

 a digital fingerprint established according to the SHA1 standard or other digital fingerprint standard of equivalent or higher level a unique key calculated during the preparation of the file by the transmitter, from a proprietary algorithm a key from the record preceding the contact details of the sender contact details of the recipient date, time of dispatch date and time of reception date and time of reading names, sizes and formats of attached files; an acknowledgment code indicating the successful completion of the procedure.

 The unique key consists of a calculation based in particular on the key of the current record associated with the key of the previous record, this creating an incrementation sequence resulting in the impossibility of all modifications of a record in the chain .

 Of course, the various elements above included in the recording of a file can be encrypted.

 The files are kept on the archive media in encrypted form according to a proprietary algorithm, the original file can be encrypted beforehand by the issuer. The acknowledgment code is only issued when burning to all the archive servers is carried out and validated by the control server.

 Between each recording on the storage medium, the specific key is inserted.

<Desc / Clms Page number 8>

The archiving medium is, in the example described, made up of 12-inch glass disks with a unit capacity of 30 gigabytes with a guaranteed lifespan of 30 years, conforming to the Afnor NFZ42013 standard. They have a unique identification number engraved on the support and on its cartridge.

 The use of this infrastructure is as follows.

 The sender prepares a file from his usual workstation. This file is prepared by the usual application software, possibly supplemented by a plug-in type application downloaded from the transaction server before first use.

 The software application installed on the sender's workstation checks whether the recipient has a public key or not, from its own database or from public databases containing public keys.

 It then calculates on an owner key based in particular on the digital fingerprint of the document to be transmitted.

This key will then be inserted by steganography in the file, thus making it authentic.

 If the recipient does not have a public key, the system according to the invention will assign him a temporary key, and will communicate it to the recipient.

 The file is then encrypted with the usual or temporary key of the recipient.

 The file is then processed under the control of the transaction server, which notifies the recipient of a notice allowing it to access the file intended for it, and will notify an acknowledgment message to the sender, after validation of the transaction.

 A variant of notification consists of sending to the recipient, first after clicking on the

<Desc / Clms Page number 9>

 announcement message, only a small window forcing him to enlarge this window thus clearly indicating his desire to read the message, and forcing him to go down to the end of the message to access the button allowing him to bring the content of the mail and associated files in its usual mail manager. This method makes it possible to clearly attest to the will by the recipient to read the message, then to transfer it if this desire has been manifested again.

 Registration at the end of archiving takes into account the identification elements of the sender's machine: IP address, processor serial number, etc.

 The following description relates to an example of an owner key intended to make it impossible to modify any part or all of a file saved on the archiving medium.

- Caractères 2568 à 2587 : empreinte numérique DO & D The key has a length of 2787 characters. It includes the following sequences: - Characters 1 to 1858: identifier of the key of the previous record - Characters 1859 to 2018: digital fingerprint of the current file - Characters 2019 to 2035: date of the file in the form yyammddhhmmssccc - Characters 2036 to 2047: file size on
12 characters - Characters 2048 to 2547: file name over 500 characters - Characters 2548 to 2567: ENO & EN digital fingerprint

- Characters 2568 to 2587: digital fingerprint DO & D

<Desc / Clms Page number 10>

Caractères 2588 à 2607 : empreinte numérique TO & T
Caractères 2608 à 2627 : empreinte numérique NO & N
Caractères 2628 à 2787 : empreinte numérique cryptée de la clé n.

Characters 2588 to 2607: TO & T digital fingerprint
Characters 2608 to 2627: NO & N fingerprint
Characters 2628 to 2787: encrypted digital fingerprint of key n.

  0 indicates the previous element.

 Encryption consists in taking a digital fingerprint of the original file and in calculating a global CGIF key identifying the file from this fingerprint and elements such as the identifier of the sender, of the recipient, the date and the time. .

 We then generate a random key CAS1 and cut the original file into CAS1 blocks of variable length.

 We then generate a compressed file composed of the blocks reassembled in a different order.

 We then insert the key CAS1 of random characters to scramble the file.

 A redistribution in Cas-20% blocks is carried out, each block being encrypted with an algorithm chosen randomly from three determined algorithms. The algorithm and half of the encryption key of a block n is written at the end of the block n + 2 and the other half of its encryption key at the end of the block n + l.

 We end the operation by inserting the encrypted CGIF key then by assembling the blocks and by global polymorphic encryption according to an algorithm involving passive components implanted in the computer.

 The amplification certificates (certificate attesting to an identical reproduction to the original) are produced in a self-printable proprietary format based on a positive verification of the conformity of the recordings

<Desc / Clms Page number 11>

 performed on the different media and the compliance of the incremental key inserted in each record. This proprietary file format forming part of this patent can be extended to a wider use or the need for a non-modifiable and only printable file is felt.

 The opening of the file corresponding to the amplification certificate automatically causes: the verification of its non modification by the recalculation of its digital fingerprint and the comparison with that recorded the test of the printer connection the automatic decryption by packet in RAM and its sending to the printer for printing without going through the printer manager, with emptying of the memory as and when printing the printing of a stamp authenticating at the end of the document closing the program and possibly the file self-destruction.

 According to a possibility offered by the invention, in order to facilitate the verification and authentication of the content of the amplification certificates, said certificates could also be sent in another format, for example in the case where it is desired that the user can keep the certificate and insert it in a document. It will then be sent in the form of a self-secured graphic file according to the proprietary format set out below.

 The file comprising said certificate is converted into an encrypted graphic file, ideally in accordance with

<Desc / Clms Page number 12>

 force, with insertion of the following two additional elements: a key inserted by a shorthand process calculated from the following constituent elements of said file: digital file imprint, date and time of creation and / or modification of the file, file size and / or name of said file, an executable code performing, upon opening of said file, a verification of its non-modification by recalculation of the aforementioned key and comparison with the key inserted initially in the file, then automatic decryption of the file.

 If the file is modified, the executable code will insert a visible mark indicating that the said file has been modified. This mark will be inserted temporarily or permanently in the file and optionally, the contents of the said file may be completely erased.

 The amplifications of the recorded files will be sent in a proprietary format, called self-printing file, that is to say that these files cannot be opened or modified but only printed. The self-printing file is obtained from a positive comparison of the engravings made on the various recording sites.

 In the same way as previously, the self-printing file includes a key consisting of the following elements: digital file imprint, date of recording, file size, file name and securita key. In addition, the self-printing file is encrypted and includes a self-executing code causing the opening of said file a connection test, effective or not, to the printer as well as a self-executing code causing

<Desc / Clms Page number 13>

 decryption of part of the file then sending it to the printer.

 The self-printing file is not printed by the traditionally used printer spooler but through a proprietary driver sending the file to the printer in small blocks with a test, between each sending of said blocks, of the correct connection of the printer.

 In addition, the self-printing file can print a certification stamp at the bottom of each page or at the end of the file.

 Finally, the self-printing file erases all traces in the memories and writing supports of the computer and closes after its printing.

Claims (27)

1. Online transaction method comprising a step of preparing a digital file comprising at least one identifier of a recipient, the identifier of a transaction server and a digital representation of the message to be transmitted, a step of transmitting said file by the sender to the transaction server and registration of said file by the server, a step of notification by the server to said recipient of the availability of said file, and a step of transmission of said file to the recipient in response to a request from said recipient, the transaction server performing a backup step after each reception of a digital file consisting in calculating a signature of said file, characterized in that the backup step further comprises the steps of: - transmission to at least one server archiving physically independent of the transaction server said file, - verification from a s control server optionally separate from the transaction server for compliance between the signature calculated by the transaction server and the signature calculated by the archiving server, - sending a notification in the event of a positive verification, or a message 'error to the sender in other cases.  2-online transaction method according to claim 1 characterized in that the transaction server performs a time stamping operation of the digital file of the sender of calculating a digital footprint of a set comprising said digital file, the data d 'timestamp and unique identifier of said digital file. <Desc / Clms Page number 15>  3-online transaction method according to claim 2 characterized in that the archiving server performs an engraving operation of each file on a non-modifiable material medium, and transmission to the control server of a digital control code.  4-online transaction method according to any one of the preceding claims, characterized in that the transaction server transmits each file to a plurality of physically separate archiving servers, and in that it comprises a control server verifying the conformity of the signatures calculated with each of said servers with the signature of the original file.  5-online transaction method according to any one of the preceding claims characterized in that the transaction server performs a step of calculating and writing a key based on a digital fingerprint of the file and an identifier of the medium archiving.  6-online transaction method according to any one of the preceding claims characterized in that the transaction server performs a step of generating a random key CAS1 and recording of said key by the archiving servers, and a step of scrambling the digital file originating from the sender using said random key CAS1 by incorporating random characters into said digital file.  7-online transaction method according to any one of the preceding claims, characterized in that the transaction server performs a step of compressing the digital file. <Desc / Clms Page number 16>  8-online transaction method according to any one of the preceding claims, characterized in that the transaction server performs a step of cutting the digital file into n blocks and separate archiving of each of said blocks.  9-online transaction method according to any one of the preceding claims characterized in that the transaction server performs a step of cutting the file into a plurality of blocks, generating the second random key CAS2, encrypting each of the blocks with addition of the key CAS2 and the identifier of the next block.  10-online transaction method according to claim 9 characterized in that the encryption of said blocks is carried out according to a plurality of modes alternating randomly.  11-Online transaction method according to any one of the preceding claims, characterized in that the transaction server performs a step of encapsulating all of the digital elements before transmission to the archiving servers.  12-online transaction method according to any one of the preceding claims characterized in that it comprises an initial step of calculating a unique digital key by the workstation of the issuer, said unique key being associated with the message in each of the subsequent steps. <Desc / Clms Page number 17>  13-online transaction method according to claim 1 characterized in that the file is previously converted into a graphic file.  14-online transaction method according to claim 13 characterized in that the file includes a key inserted by a steganography process and an executable code.  15-online transaction method according to claim 14 characterized in that the key is calculated from a digital fingerprint of the digital file, the date and time of creation, the size of the file and / or the name of said file.  16-online transaction method according to claims 14 and 15 characterized in that the executable code performs, upon opening the file, a verification of the non modification of said file by recalculation of the key and comparison with the aforementioned key initially inserted in the file.  17-online transaction method according to claim 16 characterized in that in case of modification of the file detected by the executable code, the latter inserts a visible mark, temporary or final, indicating that said file has been modified.  18-online transaction method according to claim 17 characterized in that the executable code proceeds to the total erasure of the digital file if a modification of said file is detected by said code. <Desc / Clms Page number 18>  19-online transaction method according to claim 1 characterized in that the amplifications of the recorded files are sent in a proprietary format, called self-printable file.  20-Online transaction method according to claim 19 characterized in that the self-printing file is obtained from a positive comparison of the engravings made on the various recording sites.  21-online transaction method according to claims 19 and 20 characterized in that the self-printing file includes a key consisting of the following elements: digital file imprint, date of recording, file size, file name and securita key.  22-online transaction method according to one of the preceding claims characterized in that the self-printing file is encrypted and includes a self-executing code causing the opening of said file a connection test, effective or not, to the printer .  23-online transaction method according to claim 22 characterized in that the self-printing file includes a self-executable code causing the decryption of part of the file and then sending it to the printer.  24-online transaction method according to one of the preceding claims characterized in that the self-printing file is printed through a proprietary driver sending the file to the printer in small blocks with a test, between each sending of said blocks, the correct connection of the printer. <Desc / Clms Page number 19>  25-online transaction method according to one of the preceding claims characterized in that the self-printing file prints a certification buffer, for example at the bottom of each page or at the end of the file.  26-online transaction method according to one of the preceding claims characterized in that the self-printing file erases all traces in the memories and writing media of the computer and is closed after printing.  27-Computer system for implementing the method according to claim 1 characterized in that it comprises a transaction server and a plurality of archiving servers, interconnected by a secure communication means, and a control server for comparing a signature of an original file calculated by the transaction server, and the signatures of peer files calculated by the archiving servers.