TWI660324B - Method for producing electronic contracts certified by a user of a telecommunications operator - Google Patents

Abstract

An electronic form of contract authentication method in which a telecommunications operator authenticates and sends to a user of the telecommunications operator, not a customer, an email and / or short message service through a user of the operator The contract can be signed in a reliable way in response to the acceptance or rejection of this contract by email or short message service, producing evidence of changes at each moment, because the telecommunications operator has certified the entire process, so this contract can be considered legal Compliance contract.

Description

Method for users of telecommunications operators to establish certified electronic contracts

The object of the present invention is a method for a telecommunications business operator to receive, redirect, and deliver any electronic contract from this business operator to one or more non-customer receiving users of this business operator. Acceptance of certification and certification, resulting in the entire operation of the final operation, together with the date of issue, initial conditions, date and time of delivery, and the response of non-customer recipients to these conditions are digitally verified as credible business operators and third parties Signed and delivered to the customer's sending user and non-customer's recipient, and also generates a record of the entire transaction.

It is known that electronic communication has become a basic and necessary tool for any type of operation, legal and illegal. Communication is used for every type of movement, originating call, sending message, etc. from the sending office to the receiving office.

Telecommunications operators provide a basic architecture that manages, directs, and stores a large number of these communications. In addition, these telecommunications operators are restricted by the use of wireless spectrum or the use of telephone number numbering resources because the use of wireless spectrum is limited and the use of telephone numbering resources is also limited.

In addition, for the purpose of rating, maintaining records and invoices related to users The telecommunications operator keeps a record of the work performed by the user for the purpose of referring to and keeping records of any transactional data used in the invoice to the user. These records are retained for identification of subsequent ratings and / or tracking of user transactions.

In some cases, the judiciary requires telecommunications operators to provide records of completed electronic transactions and arbitrary information of natural or legal persons that can help determine the completion of interests, because business operators are considered to be trustworthy Third parties that provide this information.

Once the judiciary has located the required information, the business operator issues a certificate that clearly describes the required transaction data, frequency, receiving bureau, and any other type of information required by the relevant judiciary.

This method has recently been accepted as evidence by the Supreme Court (ATS 2501/2013, Supreme Court of Spain, Civil Court) when requested by any telecommunication operator and presented as evidence.

Several methods and systems for establishing online contracts are known in the art, most of which are based on the contracting party sending a link to a network environment monitored by a trusted third party, where several types of signatures can be stored, and where The contracting party accepts the conditions of the product or service provider. The disadvantages of these methodologies are that they are not effective in a closed network environment, avoiding being effective for people who do not have network access, Java applications that require digital signatures or their signatures limit the application environment, and generally imply the user ’s Sudden changes in the environment, which is not the case with the method according to the invention.

The purpose of the present invention is to provide a solution to the above disadvantages. The certification email and / or certified short message service (SMS) sent by the telecommunications operator completes the integration. This procedure generates a certified electronic contract between the two parties. It is initiated by a trusted third-party telecommunications operator, including data transmission, sending information, attachments, individual recorded numbers and information, and intermediate products and final results from transmission. Additional information about the status.

According to the above, the object of the present invention is a method for generating a certified electronic contract by a telecommunications operator through email and / or SMS. According to this method, the contract conditions are sent to a third party that is not a customer. The operator client receives a certificate and is responded by email or SMS, which contains the response content, date, time and its traceability, and adds a single transaction number.

The method for generating an authenticated electronic contract by a telecommunications operator of the present invention is characterized by including the following steps, and a database that combines at least one incoming mail server, outgoing mail server, outgoing component server, and incoming call that are interconnected with each other. Component server database, timestamp server, incoming SMS server, outgoing SMS server, and data processing unit as authentication servers:-Received in the mail server of incoming messages sent by customer users of business operators The contract conditions to the cliente@contrato.lleida.net type address prepared before. In the subject or subject of the message, there should be a non-customer receiving office action number, space, non-client receiving office email address, and the general subject or topic of the final message;-check that the user is authorized, has the credit to generate the contract, and then Import and record in the text database and received components;-In the data processing unit, start the electronic contract in the mail format sent from cliente@contrato.lleida.net address, with the information sent by the customer of the business operator attached Content, specially introduce the certified electronic contract in the subject or subject of the email ;-verify the initial phone number and its existence, the certified SMS sends the contract to this number;-sends the contract with the contract information containing the contract information via the outgoing email server -The non-customer receiver accepts this contract through a response to the SMS or email containing the response;-the non-customer receiving office accepts this response;-the mail contract that ultimately produces a certification, including the send, receive, date and number of releases and Information received, as well as digital signatures and timestamps of telecommunications operators Application;-Send credentials to sender via mail server.

As mentioned above, the purpose of the method of the present invention also provides advantages in that content can be sent or specified by e-mail, changes in the environment are not necessary, and the telecommunications operator generates evidence to send, receive, and receive content.

FIG. 1 is a flow chart showing a representative embodiment of the method purpose of the present invention for starting to generate an authenticated mail contract.

FIG. 2 shows a representative embodiment of the method purpose of the present invention. Authenticated SMS and mail are used to send requests and receive responses, and particularly show the flow chart of the SMS program.

FIG. 3 is a schematic flow chart showing a representative embodiment of the method purpose of the present invention for sending a request and receiving a response by mail and establishing, sending, and delivering a certified electronic contract.

Fig. 4 shows a representative embodiment of the method purpose of the present invention by sending a request and receiving a response by e-mail, and establishing, sending, and receiving without using SMS in the program Schematic diagram of a certified electronic contract.

FIG. 5 is a schematic flowchart of a case where a representative embodiment of the method purpose of the present invention does not receive a response from a user who is not a valid user of a telecommunications business operator or a user of a customer's receiving office.

Combining Figure 1, Figure 2, Figure 3, and Figure 4, where a series of schematic diagrams illustrate the purpose of the method of the present invention, a method for establishing a certified electronic contract by a customer of a telecommunications operator includes all of the following processes, starting with sending The user sends an electronic message to an electronic contract that is authenticated by the same sender and recipient or recipient.

The telecom operator's sending user customer will send an electronic message with a contract to accept and authenticate an incoming mail address managed by the incoming mail server. This address is in the form cliente@contrato.lleida.net. This message is a standard e-mail, but takes the form of at least one of the following as the subject or subject of the message: the action number of the receiving office at the address to which the contract was sent, the contract's e-mail address, and the final subject text.

When the message reaches the incoming mail server, verify that it is the email address that should generate the contract. Ignored if not configured to do so. If it is the address of an electronic contract capable of generating authentication, then it is verified whether the sender user is authorized, that is, whether it is in a whitelisting of vouchers that are allowed to generate vouchers. If not on this list, ignore this message.

Once the address has been verified to be correct and authoritative, the sender can generate credentials to verify the availability of the credit of the customer user. If the user does not accumulate enough credit to generate a contract, a warning is issued via the Internet informing the user that the service must be refilled (top-up).

If the user has a so-called valid status, for example, has enough credit, then the process of authenticating the mail is started by allocating internal messages in all components, adding the sender, receiver, receiving office telephone, attachment and serial number, and everything Put in the database of incoming components.

After that, all the information is sent to the authentication server, which is used to verify whether the phone number is provided in the contract request. If no phone number is provided, then the procedure moves forward to the procedure described in Figure 4, where the procedure is performed only by email. If the subject or topic contains information called the telephone number of the receiving office, complete the procedure detailed in Figure 2.

If the subject contains a phone call, create an e-mail message that contains easily identifiable content, such as from a message sent by a client of type cliente@contratos.server.com via the user and sent to the address contained in the subject. The text of the contract to be accepted, as well as the SMS that generated the certification, indicates that the phone will receive a conditional contract, and if the addressee is interested in accepting it, then a positive response via SMS or via email should be sufficient . The SMS and e-mail programs can be simultaneous, or they can be mailed first and then SMSed, depending on market conditions, network or customer needs.

This SMS is sent to the outbound SMS server of the telecommunications operator, so that through the interconnected network, it reaches the SMS server of the recipient operator, and the receiving office mobile phone that can be delivered to the contract recipient. This SMS may or may not respond. In the case of replying with any text, this message reaches the receiving office server of the mobile phone business operator, and is directed to the incoming information server of the business operator through the interconnected network. Once it arrives, it will enter the authentication server, and the authentication server will decide the time when the authentication electronic contract is generated according to the judgment policy.

In the mail program, the outgoing SMS server is sent to the telecommunications operator, and it is determined whether the mail can be delivered in the receiving office mail. If it cannot be delivered, the next step is the NOEX process described in detail in Figure 5.

The mail can be read and answered by the user under certain conditions. This response is sent through the mail server of the contract recipient, which sends it to the incoming mail of the business operator. Servers, which are sent to the authentication server in order.

Once a response is received from the user, the authentication server distributes this response data and introduces it into the response database. Next, the authentication server generates the information from all the receiving bureau business operator customer information, date, time, request and content sent by the business operator customer, plus the information obtained during the message transaction period previously stored in the request storage database, and the authentication server generates The first part of the certificate.

Then, using the data contained in the response database, the user's response is used to generate the second part. This certified electronic contract is kept in PDF format and digitally signed using the electronic signature of the operator of the business operator. Once this is done, perform a digital hash sum of this content (HASH sum) and request a timestamp from a timestamp agency (TSA) server, incorporate it into the generated PDF, thereby ending the PDF contract with a certified electronic contract Of the establishment.

Two copies of this certified electronic contract are eventually sent to the contract sender and contract receiver via the business operator's outbound mail server using their respective mail servers.

If the contract request from a telecommunications operator user does not include a phone in the subject or subject of the email, use the procedure described in the flow diagram in Figure 4.

Once received and verified to provide credit, an email contract is generated using the text contained in the email, and sent to the address previously included in the subject of the email and sent to the originating electronic server of the business operator. Outbound electronic server processes mail and sends them to Mail server for receiving office address. If it is not delivered, the outgoing mail server will start the NOEX process, or the process where the mail address does not exist. The NOEX program will be described in the schematic diagram of FIG. 5.

Mail and contracts with the sender cliente@contratos.operador.com are delivered to the server of the receiving office and are delivered to non-customer receiver users of the telecommunications operator. If the final receiving bureau does not give a response within the period determined by the customer who expects to generate a contract, usually this period is 24 to 48 hours, then the so-called NORESPMAIL procedure described in Figure 5 is started.

If the business operator's non-customer's receiving office responds to the contract, the response is sent to the mail server of the receiving office's mail, and it is sent to the business operator's incoming mail server. Once it arrives, the incoming mail server determines that it is a certified electronic contract and then sends it to the authentication server.

The authentication server assigns responses to all of its components and introduces them into the response or incoming component database. Once completed, the authentication server starts the final process. First, the authentication electronic contract is established with the outgoing components or the material content in the request database, where the material content includes the name and company name, and the time, date and receipt of the initial mail.

Once the first part is achieved by making a request, the second part continues to respond to the request from the database of incoming components or other responses, including the address of the receiving office of the non-customer source of the business operator, the date and time of the response With text and IP traceability, where messages have been received through IP traceability.

Once the contract is completed by request and response, the contract is digitally signed and the total number of digits is hashed. The total number of digits is sent to the time stamp server for inclusion in the certificate. Once a signed and signed contract is established using a digital signature timestamped by the telecommunications operator with a third party PDF file, one copy is sent via email to the operator ’s outbound server to the telecommunications operator ’s customer and is served through their email server; and another copy is sent through their email server Transmission to the receiver to the receiver, taking this procedure into consideration, accomplishes the object of the present invention.

The diagram in Figure 5 details the procedure when NOEX is not present or NORESPMAIL when the business operator does not receive a response to the initial email of the business operator. In this case, the authentication server uses the initial data to generate a certificate from the telecommunications operator, indicating that either there is no receiving office or no response. This certificate is sent to the mail server of the business operator's client, and finally to the client user.

Claims (4)

A method for establishing an authenticated electronic contract by a user of a telecommunications operator (operator) includes: the user as a sender establishes and sends at least one electronic message, and the electronic message is sent to a receiver or a receipt Person (addressee), where the electronic message contains at least one electronic contract in sequence, and at least one of the following information related to a destination of the electronic message in the subject line: the mobile number of an electronic message recipient An e-mail address with the recipient of the electronic message; receiving the electronic message in an incoming mail server of the telecommunications operator; determining whether the address of the user sent is in a location where certificates can be generated A database of addresses; decomposing the electronic message into at least one of: the sender, receiver, receiver, telephone number and attachment of the receiving office; adding an authentication server along with its serial number to the decomposed electronic message Message; create an email containing the contract in an easily identifiable way; create a short message service (SMS) message , Indicating the receipt of the contract; sending the email through an outbound message server of the telecommunications operator, and sending the SMS message established in the previous steps to the recipient through the telecommunications operator, to the recipient of the electronic message At least one of the receiving bureaus included in the subject line, wherein at least one of the email and the SMS message includes a request for acceptance of the contract; the recipient receives a response to the request for at least one of the email and the SMS message; Generate the first part of the voucher, which has all the consumer information, date, time, request and content sent by the operator of the receiving bureau business operator, plus the information obtained during the message transaction; Generating a second part of the voucher, which contains at least one response to the request received by the recipient; combining the first part of the voucher and the second part of the voucher to generate an authenticated contract; by the A signature of the telecommunications operator to place a digital signature on the certified contract; to achieve a digital summary of the content of the certified contract Hashing; adding a time stamp and a time stamp generating mechanism. The method for establishing an authenticated electronic contract by a user of a telecommunications operator as described in claim 1, further includes verifying whether the sending status is valid by performing the method to verify whether it is included in a user with a valid status In the library. The method for establishing a certified electronic contract by a user of a telecommunications operator as described in claim 1, further comprising: generating at least two copies of the certified contract; and sending a message through a mail server of the telecommunications operator Copy to the sender and receiver of the certified contract, respectively. The method for establishing an authenticated electronic contract by a user of a telecommunications operator as described in claim 1, further includes storing the decomposed electronic message with an identical serial number in an incoming database.