Patent Application
20200403796
The object of the invention is framed within the field of technologies of information and communication.
More specifically, the method described here is aimed at applications for certifying intervening parties, send, receipt and content of electronic documents.
The world of digital certification and contracts has already been developing for a number of years now; however, there is general confusion among the actors of the world of digital certification between the certification authorities, the digital companies, the e-delivery providers, the certification processes, the processes that are certifiable and the different methods. In addition, the digitally-signed documents only include information on who signs them and their content is maintained unmodified, but they do not contain the information on their sending, their delivery, their acceptance or rejection if other digital means are used to accept and to digitally sign a contract.
The most common method for contracts has been notice of appearance and concentrating all actions using one single CA for the certificates, the signatures and doing all of this in one single location. In itself, it is the method which a priori may be the simplest, but the problem emerges that the number of required certificates, locations where to sign and where, when preparing a notice of appearance, digital presence or periodic access is required to avoid missing notifications. In Spain alone, there are around 80,000 digital entities to which access is obligatory if you wish to operate nationally.
The previously cited drawbacks must be resolved and allow any digital certificate to be used which is configured in the proxy CA such that the process can be initiated at any time both by email and by SMS; there being a record of all the steps taken and such that it can be demonstrated at any time who the actors of the contract process are and when and to what point the contract process has progressed.
An electronic trust service consists of:
In this sense, an electronic identification and trust service (eIDAS) framework must be established, by means of implementing eIDAS, the electronic identification and trust services for electronic transactions are supervised. eIDAS regulates the electronic signatures, the electronic transactions, the bodies involved and their inclusion processes to provide a safe way for users to conduct business online and electronic transfer of funds or transactions with public services. Both the signatory and the recipient have access to a higher level of convenience and safety. Instead of depending on traditional methods, such as email, fax services or appearing in person to present paper documents, now cross-border transactions can be carried out, for example using “1 click” technology.
Therefore, the implementation of eIDAS establishes standards for which electronic signatures, qualified digital certificates, electronic stamps, time marks and other tests for authentication mechanisms allow electronic transactions with the same legal entity as the transaction carried out on paper.
In a first aspect of the invention, there is a platform for certification of electronic contracts, a platform which is implemented by means of a telecommunications operator, making use of a series of interconnected services. The platform can thereby have a configuration such that it implements a contract server which implements electronic contract email systems, an email management server with evidence collection, a database server stores the content of the original email, a time stamp server, a server for generating evidence collected during the contract process, a validation server responsible for ensuring the identity of the recipient by means of using a digital certificate contained in the browser of the receiver, a certified message server, responsible for sending messages and a server for generated documents intended for storing the electronic contract certificates generated by the document generation server.
It should be mentioned that as the platform is connected to a telecommunications operator (or communications operator throughout this document) and preferably implemented in the same, it allows certification tasks to be carried out without the need for network entities external to the communications operator.
In a second aspect of the invention, the object of the invention relates to a method in which a telecommunications operator or an e-delivery provider can send contracts by email to one or a number of recipients, certifying the content of the contract and with a link to a proxy server of a CA (certification authority) who will verify the digital certificate of the recipient and their identity, resending the communication to a contract server where the contract can be verified, accepted or rejected and generate proof of the transaction as a communications operator where the contract, the contracting entity, the certificate issued by the CA relating to the contracting entity and all the transactional data required to demonstrate the transaction are found.
The object of the invention provides a method for the certification of a contract carried out electronically, using robust identification at both ends; identification of the client by means of a digital certificate of signatures which the CA will check and identification of the provider by means of contracting the service to the e-delivery provider, the communications or telecommunications operator, certifying all the evidence of the electronic transactions.
According to what was previously stated, the object of the invention is a method of certification of an electronic contract with the characteristic of using a proxy of a third party certification authority to verify the identity of the contracting party using the digital certificate inserted into the browser of the contracting party, certifying the entire process by means of a telecommunications operator or a telecommunications provider which can also be called a communications provider or electronic communications provider, this always being an e-delivery provider. Lastly, the client of the transmitting electronic communications provider receives a certificate according to which the contract has or has not been made, including the original email, the contract, date, time and traceability of the same, a unique transaction number and the CA certificate with the identification data contained in the digital certificate contained in the browser which unequivocally identifies the contracting party.
The method of the invention can be used for certifications of contracts and their content and can be implemented using email or SMS messages.
In order to complement the description being made and with the object of helping to better understand the characteristics of the invention, in accordance with a preferred practical embodiment thereof, said description is accompanied, as an integral part thereof, by a set of figures where, in an illustrative and non-limiting manner, the following has been represented:
The method for the electronic contract object of the invention can be implemented in a platform associated with a communications provider also object of this invention and accessible to a receiving entity and a transmitting entity; to the receiving entity through a receiver or a receiving device (such as a smartphone or a computer of a receiver), and to the transmitting entity through a transmitter or a transmitting device (such as a computer or similar device of a transmitter) and a series of servers interconnected to each other, said servers can be:
The method for the certification of an electronic contract object of the second aspect of the invention has two possible embodiments distinguished from each other by using SMS messages, as emerges from
The method of the second aspect of the invention thereby allows the generation of a certified electronic contract to be carried out, where a transmitting entity, by means of an electronic transmitting device, such as their computer, accesses the contract server (Connectaclick server) by means of access to a data network such as the internet, being identified as a transmitter.
Once the user is authenticated, the data of the client to be verified, the electronic contract (hereinafter the contract) that they wish to execute and the telephone number or email address of the receiver who is called the receiver or recipient throughout this document are introduced. The selection of one or other type of message will determine the steps to be followed such that:
The process with certified SMS is initiated when the receiving electronic device of the recipient receives the message which has access capability and data communication such as a smartphone, said message contains a URL (internet address) which links to a proxy server of a CA server by way of which all the communication with the rest of the servers is carried out.
The process with certified SMS continues with access on the part of the recipient to said URL where the proxy server of the CA requests a digital certificate, from among the possible content in the browser of the receiving device in order to be used in the transaction.
If it does not have a digital certificate, it is not valid or it cannot access the same, the proxy server of the CA finalizes the process and shows that the process cannot continue, generating a non-compliance file called “CA pdf NOOK” and which is preferably in PDF format which will be stored on the generated PDF server; optionally, a time stamp from a TSU server can be added to said non-compliance file (CA pdf NOOK). If it has the certificate, a series of data are extracted which contain the certificate for its subsequent verification, generating a compliance file called “CA pdf OK” using said data, at the same time and as occurs with the non-compliance file, optionally a time stamp from a TSU can be added and it is subsequently stored in the generated PDF server.
In this way, when the data contained in the certificate of the browser match the data initially introduced, the contract to be signed is then shown. If the recipient does not accept the contract, for example refusing to sign, it is shown that the recipient has not accepted and the process is finalized, whereas if they accept the contract, they are asked for an email address of the recipient to send a copy for the recipient and the session is finalized with the recipient.
Once the session with the recipient is finalized, the evidence generation server, TSA server, generates a certificate of the transaction by means of compiling all the data relating to the transmission of data on the internet, the contract itself and its content, the generated PDFs of the proxy CA and any transactional data of the operation used. Once generated, the resulting certificate is signed with the digital signature of the communications provider and a time stamp by way of a time stamp server (TSU server).
The resulting certificate, once stamped, is sent to the Mailcert server responsible for transmitting the email, sending two copies of the certificate of the contract already signed and all the generated evidence, one to the transmitting entity and another to the receiving entity which will be received by the respective email servers in order to be collected by their respective users.
In some embodiments in which the method uses certified mail or certified email, the method is similar and is initiated when an incoming email server of the recipient receives the certified email initially sent, where said certified email can contain a contract to be signed, but which contains a URL (internet address) which points to a proxy server of a CA by way of which all the communication with the rest of the servers is carried out. The process with certified email continues when the recipient, receiver, accesses their email by way of their smartphone or computer and accesses the URL included in the email where the CA proxy server asks them what digital certificate contained in the browser of the smartphone or computer is going to be used in the transaction. If it does not have or does not have access to them, the proxy CA server shows that the process cannot continue and generates a CA pdf NOOK file in PDF format which will be stored on the generated documents server to which a time stamp (TSU) can be added. If the browser has the certificate, the data that it contains for its subsequent verification are extracted, generating a CA pdf OK file with the data, a time stamp from a TSU server can be added and will be stored on the generated PDF server. The process continues when the user accesses the Connectaclick server by way of the proxy CA where it is verified that the data contained in the certificate of the browser match the data initially introduced and the contract to be signed will be shown. If the recipient does not accept, it is shown that they have not accepted and it is finalized. If they accept the contract, they are asked for the email to send a copy and the session with the recipient is finalised.
Once the session with the recipient is finalized, the evidence generating server prepares the certificate of the transaction with all the internet data, the contract, the generated PDFs of the proxy CA and any transactional data of the operation used. Once completed, the resulting certificate is signed with the digital signature of the communications provider and a time stamp by way of a time stamp server (TSU server). The generated certificate is sent to a Mailcert server responsible for transmitting the email, sending two copies of the certificate of the signed contract and all the generated evidence, one to the transmitting entity and another to the receiving entity which will be received by the respective email servers in order to be collected by their respective users.
According to the foregoing, the method object of the invention provides the advantage of the digital evidence and certificates used being able to come from different CAs or certification entities, in possible alternative embodiments, a second CA can be used, being a provider of the proxy CA server and a third e-delivery provider who is responsible for ultimately packaging all the evidence of the contract, generating the certificate of the entire process of the contract.
| Number | Date | Country | Kind |
|---|---|---|---|
| 17382631.4 | Sep 2017 | ES | national |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 16122109 | Sep 2018 | US |
| Child | 17010504 | US |
