WO2010100344A1

WO2010100344A1 - Method and digital communication infrastructure secured and controlled in an asynchronous mode

Info

Publication number: WO2010100344A1
Application number: PCT/FR2010/000171
Authority: WO
Inventors: André Fabre; Gilles BARRÉ
Original assignee: Vending Automation; Alphacode
Priority date: 2009-03-05
Filing date: 2010-02-23
Publication date: 2010-09-10
Also published as: FR2942927A1; FR2942927B1

Abstract

The aim of the invention is to compensate for lack of continuity defects while enabling an industrially satisfactory interfacing using a method that is more secure and enables a better control of the subsequent processing than those currently known. For this purpose, the invention provides an infrastructure for asynchronous data communication between information systems with at least one server via a computer network, including: data extraction means (1) constituting a message to be transmitted from the origin information system; means (2) for time-stamping said message by means of an electronic signature of at least one intervener; encryption means (3); means (4) for encoding the result into an optical symbol; means for displaying and/or printing the symbol (5) on a sustainable medium; means for capturing the symbol by means for optical reading (6) and for symbol recognition (7); means for propagating the recognised data (8) in the computer network to one or more servers supplying the destination information systems; means for processing the message (10) in order to execute planned operations; and means for storing both the message and the processing results for traceability purposes (11).

Description

METHOD AND INFRASTRUCTURE OF DIGITAL COMMUNICATION ₅

SECURED AND CONTROLLED IN ASYNCHRONOUS MODE

TECHNICAL FIELD OF THE INVENTION

The invention relates to a method of computerized data communication between information systems by asynchronous communication, secure and controlled. It also relates to an infrastructure for implementing this method.

The field of the invention is that of electronic data interchange (EDI) with change of media, secure messages and processing control.

STATE OF THE PRIOR ART

In the case of digital data exchange between systems, there are many methods and protocols that ensure the collection, transmission and processing of data. However, the benefits of reducing human intervention, lowering the cost of processing and the level of transaction security are almost completely eliminated in the absence of digital continuity between the systems involved.

[0004] To overcome this, there are many solutions, at the network level by backup links, at the system level by restoration and backup modules, and at the application level by copying and manual data transport. on digital storage devices, with specific export and import procedures.

Outside of manual re-entry, non-digital media (print, on-screen display, etc.) are rarely used to transitorily transfer data between isolated systems. [0006] When this is the case, a graphic encoding is a widely preferred solution in order to be able to store enough information.

But no complete process currently allows to ensure - at the same time - the continuity of the transmission chain and the chain of security and control of subsequent processing.

SUMMARY OF THE INVENTION

The invention aims to remedy these shortcomings of lack of continuity by allowing the realization of an interfacing industrially satisfactory using a more secure process and ensuring better control of subsequent processing than those currently known. In particular, in situations where the real-time connection of the systems is impossible, the invention makes it possible to maintain a good level of automation of the recovery of the information to be transmitted and the appropriate levels of security and control.

To do this, the invention uses an optical encoding on persistent medium to overcome the lack of digital continuity between systems, whatever structural or transient.

[0010] The present invention has been particularly designed for recording a third party payment transaction. According to the approach followed:

- in a normal mode, the transaction is immediately validated by transmission and recording on a remote server in secure mode, but

- In the absence of telecommunication, the transaction becomes impossible to perform, the transaction is allowed in degraded mode by optical encoding.

More specifically, the subject of the invention is a method of asynchronous communication of data between information systems via a computer network to at least one server, in which the data exchange comprises the following steps: a first step of producing an encrypted message from a document to be processed, this first step being composed itself:

a phase of extraction of the data constituting the message to be transmitted from the original information system,

a time stamping phase of this message from an electronic signature of at least one speaker, and

a coding phase of the result of the preceding phase in an optical symbol;

a step of displaying and / or printing the symbol on a durable medium;

a step of reading this message by optical means, composed itself:

a phase of capturing the symbol by optical reading, and

a recognition phase of the symbol;

a step of transmitting and processing the information read, composed itself:

a phase of propagation in the computer network of the data recognized to one or more servers supplying the destination information systems,

a phase of interpretation of these data on at least one of these servers,

a message processing phase and execution of the planned operations, and

- a conservation phase for purposes of traceability of both this message and the result of its treatments.

In the present text, the term "symbol" or "graphic symbol" denotes the result of the encoding in the form of a graphic representation of a formula combining alphanumeric characters and binary data into respecting a symbology. The symbology used can for example produce a mono-dimensional code made of bars of variable widths (Code 2 of 5, DataBar, ...) or a 2-dimensional code made of squares spread over a regular matrix (Datamatrix, Dotem,. ..) colored or not.

[0013] According to more particular embodiments:

at least one additional security phase according to a desired security level is introduced and chosen from an authentication phase following the time stamp, a phase of encapsulation of the data stamped and possibly authenticated in a digital envelope encrypted in conjunction with decryption prior to data interpretation;

- The timestamping phase is performed with the electronic signature of a single speaker;

the coding phase involves the use of metalanguages which structure the message into distinct semantic units;

the recognition phase of the symbol is carried out either by optical reading as for the capture phase or on the reception of the captured pixels;

in the extraction, encapsulation and coding phases of the data, the same sealing operation is performed; this makes it possible to take into account, from the outset, distinct centers of interest and, at the time of subsequent processing of the propagation, decryption, message processing and preservation phases, to address several servers so that correlative processing continues. specific;

the propagation phase allows the routing of data to separate servers, either through a first server that redirects the data to multiple servers, or directly to multiple servers, allowing to treat the different data according to their nature and / or their destination.

The invention also relates to an asynchronous data communication infrastructure between information systems via a computer network to at least one server, implementing the method defined above.

This asynchronous data communication infrastructure between information systems via a computer network to at least one server, implementing the method defined above comprises data extraction means constituting a message to be transmitted from the original information system, means for timestamping this message from an electronic signature of at least one speaker, means for encoding the result obtained in an optical symbol, display means and / or printing the symbol on a durable medium, means for capturing the symbol by optical reading and recognizing the symbol, means for propagating in the computer network recognized data to one or more servers supplying the destination information systems, message processing means for executing the planned operations, and means of preservation for purposes of traceability of both this message and the result of his treatments.

According to particular embodiments:

at least one security means is provided and chosen from an authentication tool and a tool for encapsulating the data generated in an encrypted digital envelope in conjunction with a tool for decrypting this data on at least one of these servers ;

the recognition means are the optical reading means dedicated to the capture;

the extraction, encapsulation and coding means of the data perform the same sealing operation able to address several servers at the time of subsequent processing of propagation, decryption, message processing and preservation;

the propagation means are constituted to enable the routing of data to separate servers, either through a first server which redirects the data to multiple servers, or directly to multiple servers, making it possible to process the different data according to their nature and / or their destination.

BRIEF DESCRIPTION OF THE FIGURES

Other features and advantages of the invention will emerge on reading the description which follows, with reference to the single appended figure, which illustrates a diagram of data communication steps according to an embodiment of the method. according to the invention.

DETAILED DESCRIPTION OF AN EMBODIMENT [0018] The attached figure illustrates an example of use of the method according to the invention for payment in degraded mode.

There are many payment techniques based on real-time exchange of sealed information by means of electronic signature certificate. This information is taken into account by connecting to servers managing electronic safes where the exchange is cleared. Access to these servers is done by implementing strong user authentication mechanisms.

[0020] In the absence of an active connection with compensation servers, this type of transaction between third parties normally becomes impossible to achieve. In order for the transaction to remain possible in degraded mode, the data necessary for its subsequent registration (identity of the third parties involved, amount, currency, time stamp of the transaction, location of the transaction, nature of the transaction) are transiently materialized. . In detail, IΘ method operates according to the steps below. At the time of payment, the cashing device prints a specific ticket containing a graphic symbol by coding and printing (steps 4 and 5).

This encoding (4) can be performed with any 1D code, 2D or any size, whatever (s) is the symbology (s) used (s). For greater efficiency, the use of a symbology structured in separate semantic units by means of tags allows an economy of means in the encoding of data through the realization of metalanguages with a complexity according to the uses. The use of the "Dotem" encoding (see patent document FR0501552) is particularly indicated in the application of the present invention, making it possible in particular to gain in information density in a given space, to facilitate the generation and print speed.

This ticket or title gathers in a formula already encapsulated, authenticated and encrypted (steps 2 and 3) the extracted elements or data characterizing the transaction (step 1): third party identity involved, amount, currency, time stamp of the operation location of the operation, nature of the operation, etc. Encryption also ensures privacy and integrity control.

Each title is printed in at least two copies, one for the merchant and one for the customer. This operation is only carried out in the case where the payment device has not been able to establish a satisfactory connection with the secure servers of the payment system manager.

Then to make the transaction effective, one of the two participants or a holder of the title connects later to a website (Internet), allowing this type of operation and presents the graphic symbol on the title against a control capturing by optical reading, by means of its webcam (Internet camera), the image of this symbol (step 6). The recovery of this formula is facilitated by the fact that it is given a graphic appearance which allows its reading and recognition by optical (step 7). Reading the data associated with the document that all or part of the elements have been encoded is done by image capture and recognition (steps 6 and 7) without using OCR techniques which to be more and more effective do not simply answer to the set of needs that appear.

Reading can be done using means accessible to the general public, such as a webcam connected to the public network or a mobile phone equipped with a resolution camera sufficient or equipped with a specific optical drive.

Once read, the treatments operate similarly to the nominal case in secure servers. The content of the decoded formula is used late, but it operates without involving again the agreement of the third parties at the origin of the transaction and can only be done in a unique way.

After decoding (7), a proof of the transaction in an authentic and irrevocable manner is obtained. The transaction follows the chain of transmission in the computer network of the data recognized to the target servers following the indications entered (step 8) and decryption with interpretation at these servers (step 9), then processing to execute the payments (step 10). This chain of transmission and processing provides the compensation and then proceeds analogously to the nominal case by feeding from the information decrypted and interpreted. A history for reasons of conservation and traceability of the payment and the result of the processing is done by archiving the records (step 11) and the operation can not be repeated. His acceptance is unique.

It should be noted that certain phases have an optional character. Their use depends on the degree of security desired for the transmission of information. In addition, the phases corresponding to the processing chain can also accept a degree of modularity depending on the complexity of the propagation of the message.

The present invention has the following additional advantages. The method according to the invention defines the technological mechanisms to be implemented so that a paper medium or a display on a screen allows the continuity of a digital process, without any manual re-keying of the information being carried out, while ensuring the authentication of the original data thus processed.

The present invention thus provides a solution of continuity in the digital teletransmission chain from any printed physical medium (such as invoices, receipts, contracts, etc.) or from a display device such as a CRT screen, LCD or other device.

The advantages of the present solution are obtained from a document whose basic purpose does not allow per se such a wealth of treatment. For example, an invoice without particular marking would have only an accounting destination while, marked according to the invention, it can serve as a data source for customer loyalty operations, for warranty openings, etc.

The main uses of the present invention are as follows, described in a non-limiting manner.

It is advantageous to use the present solution of continuity in case of break in the digital transmission process, whether due to physical link breakage, data flow failure or any other cause related to the lack of active links between information systems, whether this connection does not exist at the time of the document's creation or is never planned. In these cases the transmission of information is impossible in real time and the data to be transmitted must be irrevocably recorded and reported later. The present invention facilitates irrevocable recording on a hardware medium and then facilitates its computer recovery by optical means for its final dematerialization. It is also advantageous to use this solution at the output of an information system in order to preserve the possibility of subsequently reverting the digital data stream to any computer system, even if not yet precisely defined at the time of writing. the implementation of this solution.

It is still possible to use this solution to simply desynchronize the data output of an information system and the input of these data in one or more other information systems.

The present invention also finds particularly relevant applications from cash receipts. Thus, a digital encoding optical reading for multifunctional use, added to the usual information allows the realization of new features such as those related to the management of the personal accounts of the recipients of said tickets, the management of their travel expenses, to various management features of the company producing the tickets, commercial animation features, games or electronic payment processes in degraded operating situations.

The present invention, because it allows secure data exchange, confers an enforceable contract force to an encoded printed document according to this invention. Such a document is legally analyzed as a private deed with electronic authentication. This invention can therefore be used in various commercial, administrative or management procedures that can be simplified by using an enforceable contractually enforceable document.

It should be noted that the authentication, sealing and encapsulation phases (as well as the corresponding decryption phases) are not implemented in the case where a particular level of security is not desired.

Despite the absence of connection, this invention allows to maintain a high level security services. Encryption of all or part of the transmitted form ensures confidentiality, the sealing of the data by means of the certificates of the parties ensures an integrity check and the identification of the parts of this authentic message. Non-repudiation follows. In addition, the processing of the message leads to the impossibility of replaying it.

The fact of encapsulating the message in a specific envelope also allows us to finely control subsequent uses that will be made, including the propagation in the computer network, the nature of the processing and their eventual archiving. The recovery of this formula is facilitated by the fact that it is given a graphic appearance which allows its reading and its recognition by optical means.

Once the reading has been performed, the processes operate analogously to the nominal case in the secure servers. The content of the decoded formula is used late, but it operates without involving again the agreement of the third parties at the origin of the transaction and can only be done in a unique way.

Examples of other uses.

[0044] 1) Promotional refund offer:

Currently to assert his right to reimbursement on the occasion of a promotional refund offer, the customer sends to a specialized company its ticket in original and a coupon usually taken from the packaging of the product subject to this operation within a specified time.

He receives in return a check or countervalue in the form of postal stamps.

The method described in this invention can be applied as follows: The manufacturer mentions the operation on its packaging At the time of purchase of the product subject to this offer, the distributor prints a ticket mentioning in the form of a graphic symbol

1. the identification of the product benefiting from the operation and the characteristics of the sale (time stamp, shop, sign, cash register, total amount of purchases) 2. Next, the customer goes to the manufacturer's website (or promotion website) which is indicated on the packaging.

3. He presents the graphic symbol on his ticket in front of a control capturing by his webcam the image of this symbol.

After decoding and decryption, this is sufficient to constitute authentic proof of purchase. Of course, a history of refunds made is maintained prohibiting several times the same coupon,

It should be noted that the customer is therefore invited to visit the manufacturer's website or may be asked to fill out a satisfaction questionnaire or to answer a marketing survey.

In some cases, the encrypted identification of the electronic means of payment used by the customer for this purchase may be included together with the other information in the symbol, in possibly encrypted form.

These payment features can then be used to make the automatic and immediate refund corresponding to the offer.

In these cases, a co-marketing operation is feasible between the manufacturer and the manager of the payment system involved.

[0045] 2) Opening of the warranty rights on a product:

Usually the opening of a guarantee implies a registration by the manufacturer of the product guarantee certificate duly stamped by the distributor with the proof of purchase.

This operation is usually forgotten by most consumers. It is possible to facilitate it by using the following method:

At the time of purchase of the product subject to this guarantee, the distributor prints a ticket mentioning in the form of a graphic symbol 1. the identification of the product benefiting from the operation and the characteristics of the sale (time stamp, shop, sign, cash register, total amount of purchases)

2. Then the customer goes to the manufacturer's website. 3. He presents the graphic symbol on his ticket in front of a control capturing by his webcam the image of this symbol.

After decoding and decryption, this is sufficient to constitute authentic proof of purchase. The guarantee is validated with the date of acquisition as indicated in the form prohibiting any dispute. The customer will only have to indicate his identity and the serial number of the product to complete the operation.

It should be noted that on this occasion, the customer is invited to visit the manufacturer's website where he can be asked to fill out a satisfaction questionnaire or to answer a marketing survey.

In some cases, the serial number may appear together with the other information in the symbol, in possibly encrypted form.

[0046] 3) Credit of loyalty points claimed late:

Loyalty systems based on the accumulation of loyalty points implies that the customer has at the time of purchase an identifier attesting to its membership in this program (badge, number, ...). Otherwise, the points he could have received are irretrievably lost. In order to overcome this drawback, the method described in this invention can be applied as follows:

At the time of purchase of the product subject to this advantage, the distributor prints a ticket mentioning in the form of a graphic symbol

1. the identification of the product benefiting from the operation and the characteristics of the sale (time stamp, shop, sign, cash register, total amount of purchases) 2. Then, the customer goes to the website related to the loyalty operation

3. Logs in using his usual credentials.

4. He presents the graphic symbol on his ticket in front of a control capturing by his webcam the image of this symbol.

After decoding, this is sufficient to constitute authentic proof of purchase. The loyalty account is then credited with the points corresponding to the characteristics of this purchase.

Claims

A method for asynchronous data communication between information systems via a computer network to at least one server, wherein the computer data exchange comprises the following steps:

a first step of producing an encrypted message from a document to be processed, this first step being composed itself:

a data extraction phase (1) constituting the message to be transmitted from the original information system,

a phase of time stamping (2) of this message from an electronic signature of at least one speaker, and

a coding phase (4) of the result of the preceding phase in an optical symbol;

a step of displaying and / or printing (5) the symbol on a durable medium;

a step of reading this message by optical means, composed itself:

A phase of capturing the symbol by optical reading (6), and

A recognition phase of the symbol (7);

a step of transmitting and processing the information read, composed itself:

^• a phase delay in the computer network data recognized to one or more servers supplying the destination information systems (8), A phase of interpretation (9) of these data on at least one of these servers,

a message processing phase and execution of the planned operations (10), and

- a conservation phase for purposes of traceability (11) both of this message and the result of its treatments,

characterized in that at least one additional security phase according to a desired security level is introduced and selected from an authentication phase (2) following the timestamp and an encapsulation phase (3) timestamped and possibly authenticated data in an encrypted digital envelope in conjunction with a decryption (9) before the interpretation of the data.

2. Asynchronous communication method according to claim 1, wherein the timestamping phase (2) is performed with the electronic signature of a single speaker.

3. Asynchronous communication method according to any one of claims 1 to 3, wherein the coding phase (4) comprises the use of metalanguages which structure the message in separate semantic units.

4. Asynchronous communication method according to any one of the preceding claims, wherein the recognition phase of the symbol (7) is performed either by optical reading as for the capture phase or from the reception of the captured pixels.

5. Asynchronous communication method according to any one of the preceding claims, wherein, in the extraction phases (1), encapsulation (3) and coding (4) data, the same sealing operation is performed .

An asynchronous communication method according to any one of the preceding claims, wherein the propagation phase (8) allows the routing of data to separate servers, either through a first server that redirects the data to multiple servers, or directly to multiple servers, allowing different data to be processed according to their nature and / or destination.

7. Asynchronous communication infrastructure for data between information systems via a computer network to at least one server, for implementing the method according to any one of the preceding claims, characterized in that it comprises means for extracting data. data constituting a message to be transmitted from the original information system, means for timestamping this message from an electronic signature of at least one speaker, means for encoding the result obtained in an optical symbol, means for displaying and / or printing the symbol on a durable medium, means for capturing the symbol by optical reading and for recognizing the symbol, means for propagating in the computer network recognized data to one or more servers supplying destination information systems, message processing means for carrying out the planned operations, and means of ins traceability of both this message and the result of its treatments.

8. asynchronous communication infrastructure according to claim 7, wherein at least one security means is provided and selected from an authentication tool and a tool for encapsulation of data generated in an encrypted digital envelope in connection with a decryption tool of this data on at least one of these servers.

9. Asynchronous communication infrastructure according to claim 7 or 8, wherein the recognition means are the optical reading means dedicated to capture.

10. Asynchronous communication infrastructure according to any one of claims 8 to 9, wherein the extraction means, encapsulation and coding data perform the same sealing operation able to address multiple servers at the time of subsequent processing of propagation, decryption, message processing and preservation.

11. asynchronous communication infrastructure according to any one of claims 7 to 10, wherein the propagation means are constituted to allow the routing of data to separate servers, or through a first server that redirects the data to multiple servers or directly to multiple servers, allowing the different data to be processed according to their nature and / or their destination.