DIN CEN TS 15130-2006 Postal services - DPM infrastructure - Messages supporting DPM applications English version CEN TS 15130 2006《邮政服务 DPM基础结构 支持DPM应用文电》.pdf

1、Juli 2006 Normenausschuss Browesen (NB) im DINPreisgruppe 17DIN Deutsches Institut fr Normung e.V. Jede Art der Vervielfltigung, auch auszugsweise, nur mit Genehmigung des DIN Deutsches Institut fr Normung e.V., Berlin, gestattet.ICS 03.240!,_fu“9606782www.din.deDVornormDIN CEN/TS 15130Postalische D

2、ienstleistungen Infrastruktur fr Elektronische Freimachungsvermerke (DPM) Nachrichten zur Untersttzung von Anwendungen der DPM;Englische Fassung CEN/TS 15130:2006Postal services DPM infrastructure Messages supporting DPM applications;English version CEN/TS 15130:2006Services postaux Infrastructure D

3、PM Messages supportant les applications DPM;Version anglaise CEN/TS 15130:2006Alleinverkauf der Normen durch Beuth Verlag GmbH, 10772 Berlin www.beuth.deGesamtumfang 46 SeitenDIN CEN/TS 15130:2006-07 2 Nationales Vorwort Die vorliegende europische Technische Spezifikation wurde vom CEN/TC 331 Postal

4、ische Dienstleistun-gen, dessen Sekretariat vom NEN (Niederlanden) gefhrt wird, unter Beteiligung deutscher Experten erarbeitet. Der fr die deutsche Mitarbeit zustndige Arbeitsausschuss im DIN Deutsches Institut fr Normung e. V. ist der NB-1.6 Postalische Dienstleistungen. Eine Vornorm ist das Ergeb

5、nis einer Normungsarbeit, das wegen bestimmter Vorbehalte zum Inhalt oder wegen des gegenber einer Norm abweichenden Aufstellungsverfahrens vom DIN noch nicht als Norm herausgegeben wird. Zur vorliegenden Vornorm wurde kein Entwurf verffentlicht. Stellungnahmen werden erbeten vorzugsweise als Datei

6、per E-Mail an nbuedin.de in Form einer Tabelle. Die Vorlage dieser Tabelle kann im Internet unter www.din.de/stellungnahme abgerufen werden; oder in Papierform an den Normenausschuss Browesen (NB) im DIN, 10772 Berlin (Hausanschrift: Burggrafenstr. 6, 10787 Berlin). Diese Technische Spezifikation le

7、gt die Infrastruktur fr Elektronische Freimachungsvermerke (DPM) fest, indem ein konsistenter und vollstndiger Satz von Nachrichten zur Untersttzung von DPM-Anwendungen festgelegt wird. Aufgrund der sehr spezifischen Anwendung wurde von den interessierten Kreisen kein Bedarf an einer Deutschen Sprac

8、hfassung erkannt, sodass diese europische Technische Spezifikation vom DIN in der Englischen Fassung verffentlicht wird. Die Ausnahmegenehmigung zur Verffentlichung der Englischen Fassung aufgrund des Prsidialbeschlusses 1/2004 wurde eingeholt. Vornorm TECHNICAL SPECIFICATION SPCIFICATION TECHNIQUE

9、TECHNISCHE SPEZIFIKATION CEN/TS 15130 April 2006 ICS 03.240 English Version Postal services - DPM infrastructure - Messages supporting DPM applications Services postaux Infrastructure DPM Messages supportant les applications DPM Postalische Dienstleistungen Infrastruktur fr Elektronische Freimachung

10、svermerke (DPM) Nachrichten zur Untersttzung von Anwendungen der DPM; This Technical Specification (CEN/TS) was approved by CEN on 7 May 2005 for provisional application. The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested t

11、o submit their comments, particularly on the question whether the CEN/TS can be converted into a European Standard. CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available promptly at national level in an appropriate form. It is

12、 permissible to keep conflicting national standards in force (in parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached. CEN members are the national standards bodies of Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland, F

13、rance, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and United Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCHES KOMITEE

14、 FR NORMUNG Management Centre: rue de Stassart, 36 B-1050 Brussels 2006 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. CEN/TS 15130:2006: ECEN/TS 15130:2006 (E) 2 Contents Page Foreword3 Introduction .4 1 Scope 5 2 Normative referenc

15、es 6 3 Terms and definitions .6 4 Requirements.10 5 Description of the models (system architecture and interaction diagrams).14 Annex A (normative) Implicit certification process.38 Annex B (normative) Message structure40 Annex C (informative) Development principles.43 Bibliography 44 Vornorm CEN/TS

16、 15130:2006 (E) 3 Foreword This document (CEN/TS 15130:2006) has been prepared by Technical Committee CEN/TC 331 “Postal Services”, the secretariat of which is held by NEN. According to the CEN/CENELEC Internal Regulations, the national standards organizations of the following countries are bound to

17、 announce this CEN Technical Specification: Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzer

18、land and United Kingdom. Vornorm CEN/TS 15130:2006 (E) 4 Introduction The purpose of this document is to define a consistent and complete set of messages between vendors and posts infrastructures in support of DPM applications. It is assumed that the reader of this document is familiar with computer

19、-related technologies normally used to design and implement applications requiring an interaction between computer systems. This document makes use of industry-accepted technical standards and concepts like public key cryptography and communication protocols. This document defines the significant co

20、ntent and the format for data exchanges and messages, consistent with current industry practices. Also, consistent with the concepts of extensibility and flexibility, this document allows for extensions supporting specific (local) implementations using additional data elements. Vornorm CEN/TS 15130:

21、2006 (E) 5 1 Scope This document specifies the information exchanges between various parties infrastructures that take place in support of DPM applications. It complements standards that address the design, security, applications and readability of Digital Postage Marks. The following items will be

22、addressed by this document: identification of parties participating in exchanges of information described by this document; identification of functions (interactions, use cases); definition of parties responsibilities in the context of above functions; definition of messages between parties: message

23、 meaning and definition of communication protocols to support each function; definition of significant content (payload) for each message; security mechanisms providing required security services, such as authentication, privacy, integrity and non-repudiation. This document does not address: design

24、of DPM supporting infrastructure for applications internal to providers and carriers; design of DPM devices and applications for applications internal to end-users. NOTE Although there are other communications between various parties involved in postal communications, this document covers only DPM-r

25、elated aspects of such communications. Vornorm CEN/TS 15130:2006 (E) 6 2 Normative references The following referenced documents are indispensable for the application of this document. For dated references, or references to a version number, only the edition cited applies. For undated references and

26、 where there is no reference to a version number, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 9798-3, Information technology Security techniques Entity authentication Part 3: Mechanisms using digital signature techniques ISO 10126-2, Banking Procedures f

27、or message encipherment (wholesale) Part 2: DEA algorithm 3 Terms and definitions For the purposes of this document, the following terms and definitions apply. 3.1 ascending register value numerical value that is equal to the total accumulated value of postage that has been accounted for and printed

28、 by the mailing system (usually used in the context of a postage meter or a franking machine) 3.2 authentication verification of the identity of a person, process or the origin of the data being exchanged 3.3 control sum sum of the descending register value and ascending register value in a mailing

29、system 3.4 cryptographic material information used in conjunction with cryptographic methods of protecting information 3.5 cryptographic key information that uniquely determines a bijection (one-to-one transformation) from the space of messages to the space of ciphertexts 3.6 Cryptographic Validatio

30、n Codes CVC value, cryptographically derived from selected postal data, which may be used in verifying the integrity of such data and authenticating its origin 3.7 data integrity property of a communication channel whereby data has not been altered in an unauthorized manner since the time it was cre

31、ated, transmitted, or stored by an authorized source 3.8 descending register value numerical value equal to the total value of unused postage remaining in the mailing system (usually used in the context of a postage meter or a franking machine) Vornorm CEN/TS 15130:2006 (E) 7 3.9 Digital Postage Mar

32、k DPM postmark printed or otherwise attached to a mail item and containing information that may be captured and used by mail handling organizations and the recipient 3.10 DPM signature verification key public key that is used for the DPM signature verification 3.11 DPM signing Key DPM signature gene

33、ration key private key that is used for digital signing of DPM information 3.12 DPM verifier verifier postal equipment that is used for DPM verification 3.13 Exchange Validation Codes EVC code, known to or agreed between a mailer and a licensing post, which when applied to a postal item by the maile

34、r may be used by the licensing post to authenticate the origin of the item and, under appropriate circumstances, to verify the integrity of agreed upon DPM data 3.14 implicit certificate informational element that binds an entitys identity with its public cryptographic key allowing the verification

35、of the digital signature by another entity using only information contained within the certificate itself NOTE In Digital Postage Mark verification systems based on public key cryptographic schemes, the verification key is public and can either be retrieved from a database (explicit certificate) or

36、it can be computed from the information contained in the Digital Postage Mark (implicit certificate). 3.15 key management infrastructure systems, policies and procedures used to create, store, distribute and update cryptographic keys 3.16 license formal permission to account for postal charges and c

37、reate an agreed upon evidence of payment for such charges given to qualified mailers by posts, carriers or their authorised agents 3.17 license number informational element (typically numeric or alphanumeric code) that represents the fact that a mailer has obtained license from the post or a carrier

38、 authorising the mailer to account for postal charges and to print evidence of a paid postage 3.18 licensing post postal organisation responsible for issuing licenses to qualified mailers Vornorm CEN/TS 15130:2006 (E) 8 3.19 MAC key DPM MAC key Message Authentication Code (MAC) key used for the prot

39、ection of the Digital Postal Mark (DPM) in DPM systems based on symmetric key cryptographic schemes 3.20 mailer person or organization using the services of a post 3.21 mailing system system which is used to account and evidence charges for postal services NOTE Variations of a mailing system include

40、: franking machine or postage meter; personal computer with specialized software; on-line software service 3.22 Message Authentication Code MAC value, cryptographically derived from selected data, which allows data integrity and implicit data origin to be verified NOTE Since MACs are based on shared

41、 secret schemes they allow for weaker (implicit) data origin verification than digital signatures that are based on public key cryptographic schemes. 3.23 non-repudiation security service which prevents an entity from denying previous commitments or actions 3.24 parametrisation process of supplying

42、a system or a device with all input information required for proper operation, involving assignment of specific numerical values to named variables used in computation of output values such as data elements of DPM 3.25 post postal administration postal authority organization which has been designate

43、d by the UPU member country or territory as an operator responsible for fulfilling part or all of the members obligations arising from adherence to the UPU convention and agreements 3.26 postal code numeric or alphanumeric value that is uniquely indicative of a geographic location of an element of p

44、ostal processing and delivery network, including postal processing facilities, retail offices, delivery units and individual recipients mailboxes 3.27 privacy confidentiality security service used to keep the (meaningful) content of the information from all but those authorised to have it Vornorm CE

45、N/TS 15130:2006 (E) 9 3.28 public key cryptography cryptographic system that uses two keys: a public key accessible to all parties and a private or secret key known only to one party (either the sender or the recipient of the message depending on the use of the system) NOTE An important element of t

46、he public key system is that the public and private keys are uniquely related to each other and it is computationally infeasible to compute private key from the knowledge of public key. 3.29 Public Key Infrastructure PKI system of digital certificates, certificate authorities, and registration autho

47、rities or agents that allows for authentication of all parties involved in communication and data exchange processes 3.30 symmetric key cryptography encryption system in which the sender and receiver of a message share a single, common secret information (key) that is used both to encrypt and decryp

48、t messages that are being exchanged 3.31 time stamp value of the current time stored by a system to indicate when a certain transaction took place 3.32 Universal Coordinated Time UCT universal time, taking into account the addition or omission of leap seconds by atomic clocks each year to compensate

49、 for changes in the rotation of the earth (Greenwich Mean Time updated with leap seconds) 3.33 vendor provider and/or operator of mailing systems 3.34 World Wide Web Consortium W3C international consortium of companies involved with the development of open standards for internet and the web 3.35 XML Extensible Mark-up Language subset of SGML constituting a particular text mark-up language for interchange of structured data 3.36 XML schema XML schema is an