1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationPostal Services Hybrid Mail FunctionalSpecification for postal registered electronic mailPD CEN/TS 16326:2013National forewordThis Published Document is the UK implementation of
2、CEN/TS 16326:2013.The UK participation in its preparation was entrusted to Technical CommitteeSVS/4, Postal services.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions of acontract
3、. Users are responsible for its correct application. The British Standards Institution 2013Published by BSI Standards Limited 2013ISBN 978 0 580 76199 7ICS 03.240Compliance with a British Standard cannot confer immunity fromlegal obligations.This Published Document was published under the authority
4、of theStandards Policy and Strategy Committee on 31 January 2013.Amendments issued since publicationAmd. No. Date Text affectedPUBLISHED DOCUMENTPD CEN/TS 16326:2013TECHNICAL SPECIFICATION SPCIFICATION TECHNIQUE TECHNISCHE SPEZIFIKATION CEN/TS 16326 January 2013 ICS 03.240 English Version Postal Ser
5、vices - Hybrid Mail - Functional Specification for postal registered electronic mail Services postaux - Courrier hybride - Spcifications fonctionnelles pour le courrier recommand lectronique Postalische Dienstleistungen - Hybride Sendungen - Funktionale Spezifikation fr elektronische Posteinschreibs
6、endungen This Technical Specification (CEN/TS) was approved by CEN on 7 February 2012 for provisional application. The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their comments, particularly on the question wh
7、ether the CEN/TS can be converted into a European Standard. CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in f
8、orce (in parallel to the CEN/TS) until the final decision about the possible conversion of the CEN/TS into an EN is reached. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia,
9、 France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCH
10、ES KOMITEE FR NORMUNG Management Centre: Avenue Marnix 17, B-1000 Brussels 2013 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No. CEN/TS 16326:2013: EPD CEN/TS 16326:2013CEN/TS 16326:2013 (E) 2 Contents Page Foreword 4Introduction .51 S
11、cope 62 Normative references 63 Terms and definitions .74 Symbols and abbreviations 85 Coordinate system.85.1 Conceptual models 85.2 Operation scenarios . 115.2.1 Mailer and addressee/mailee both using an Email Client Interface and subscribing to PReM Service provided by different postal operators 1
12、15.2.2 System workflow of mailer and addressee/mailee using an Email Client Interface and subscribing to PReM Service provided by different postal operators 135.2.3 Mailer and addressee/mailee both using Web-based Interface and subscribing to PReM Service provided by different postal operators . 155
13、.2.4 System Workflow of mailer and addressee/mailee using Web-based Interfaces and subscribing to PReM Service provided by different postal operators. . 175.2.5 PReM implementation 195.2.6 Interoperation between PReM System and non-PReM System . 196 Roles in PReM . 207 Functional specification . 217
14、.1 Introduction . 217.2 Functional description . 217.2.1 CheckIntegrity . 217.2.2 LogEvent 217.2.3 PostMark 217.2.4 RetrieveResults . 217.2.5 Sign 217.2.6 Verify 217.2.7 SendMessageToDestination 217.2.8 RejectMessage 247.2.9 SubscribeNotification . 247.2.10 UnsubscribeNotification 267.2.11 ReceiveNo
15、tification. 268 DATA STRUCTURES AND FORMATS. 278.1 Introduction . 278.2 Message format . 278.3 Evidence types 278.4 Evidence format 308.5 Signature format . 309 Policy considerations . 309.1 Introduction . 309.2 Identity management and authentication models . 31Annex A (normative) PReM XML Schema V1
16、.00 . 32Annex B (normative) PReM Web Services Description Language (WSDL) V1.0 . 47PD CEN/TS 16326:2013CEN/TS 16326:2013 (E) 3 Annex C (informative) Relevant intellectual property rights (IPR) . 54C.1 Introduction 54C.2 IPR advised 54Bibliography 55PD CEN/TS 16326:2013CEN/TS 16326:2013 (E) 4 Forewor
17、d This document (CEN/TS 16326:2013) has been prepared by Technical Committee CEN/TC 331 “Postal services”, the secretariat of which is held by NEN. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN and/or CENELEC shall not be he
18、ld responsible for identifying any or all such patent rights. Keeping pace with the changing communications market, postal operators are increasingly using new communication and information technologies to move beyond what is traditionally regarded as their core postal business. They are meeting hig
19、her customer expectations with an expanded range of products and value-added services. Standards are important prerequisites for effective postal operations and for interconnecting the global network. The European Committee for Standardization, their Technical Committee 331 “Postal Services“ develop
20、s and maintains a growing number of standards to improve the exchange of postal-related information between postal operators, postal handling organisations, customers, suppliers and other partners, including various international organisations. This functional specification has been developed in clo
21、se relationship with the following technical standards: CEN/TS 15121-1:2011; ETSI TS 102 640-1. The use of this Technical Specification as a basis for any implementation is at the risk of the user. Any party intending such use is strongly advised to seek close contact with the appropriate working gr
22、oup, so that it can be kept informed of ongoing work. The CEN/TS 16326 was originally published as a UPU standard S52-1and was adopted by CEN under the current Memorandum of Understanding between UPU and CEN. According to the CEN/CENELEC Internal Regulations, the national standards organisations of
23、the following countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta,
24、Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. PD CEN/TS 16326:2013CEN/TS 16326:2013 (E) 5 Introduction This document describes the functional specification for a postal operator to build or implement the postal register
25、ed electronic mail (abbreviated hereinafter to PReM) system which can be offered to the customers of the postal operator as part of the Secure electronic Postal Services (SePS). PReM is an electronic version of the traditional postal registered mail service. It uses state-of-the-art cryptographic te
26、chnologies to provide strong role authentication, protection of message confidentiality and integrity and to add non-repudiation attributes to evidence of events and operations. Therefore, the goal of a PReM is to enhance the traditional e-mail service so as to provide an end-to-end trusted electron
27、ic communication service, encompassing both evidence of submission and delivery between authenticated parties. The service is embodied in the secured and trusted exchange of electronic mail, as every step of the process is logged for future evidence tracing and any entity involved is authenticated.
28、The PReM service comprises the following features: secured message forwarding and delivery: ensures the PReM Message confidentiality (encryption) and integrity (no modification); and authenticity and non-repudiation of users (mailer and addressee) and postal operators (origin and destination). In ad
29、dition, PReM messages will be securely transported from mailer to addressee/mailee; evidence generation: all significant events within a complete operation cycle are traceable. Types of evidence and evidence formats are described in 7.2; event notification: notification that a particular event/opera
30、tion has occurred will be generated and sent to corresponding parties; archival of evidence: storage of generated evidence for future attestation. The implementation of part or all of this functional specification might involve the use of intellectual property which is the subject of patent and/or t
31、rademark rights. Since the specification was developed in close relationship with ETSI TS 102 640, these might include rights held by ETSI. It is the responsibility of users of the standard to conduct any necessary searches and to ensure that any pertinent rights are in the public domain, are licens
32、ed, or are avoided. CEN/TC 331 cannot accept any responsibility in case of infringement, on the part of users of this document, of any third party intellectual property rights. Nevertheless, document users and owners of such rights are encouraged to advise the Secretariat of the UPU Standards Board
33、or the Secretariat of CEN/TC 331 or CEN/TC 331 WG2 of any explicit claim that any technique or solution described herein is protected by such right in any UPU member country. Any such claims will, without prejudice, be documented in the next update of this standard or otherwise at the discretion of
34、the Standards Board or Secretariat of the CEN/TC 331 WG2. Annex C of this document lists the intellectual property rights brought to the attention of the UPU Standards Board or CEN/TC 331 WG2 prior to approval of the publication of this version of the standard. PD CEN/TS 16326:2013CEN/TS 16326:2013
35、(E) 6 1 Scope This Technical Specification constitutes the functional specification of a secure electronic postal service, referred to as the postal registered electronic mail or PReM service. PReM provides a trusted and certified electronic mail exchange between mailer, postal operators and address
36、ee/mailee. In addition, evidence of corresponding events and operations within the scope of PReM will be generated and archived for future attestation. The PReM service is defined by reference to the concepts, schemas and operations defined in CEN/TS 15121-1:2011. It utilises six SePS operational ve
37、rbs (CheckIntegrity, LogEvent, Postmark, RetrieveResults, Sign and Verify) and the five additional server-side operational verbs (SendMessagetoDestination, Subscribe Notification, UnscbscribeNotification, RejectMessage and ReceiveNotification) to fulfil the operational requirements of a PReM System.
38、 Return of Investment (ROI), market potential, revenues model, business plan and pricing policy are outside the scope of this functional specification. Postal operators are advised to make the necessary marketing study and research prior to considering leasing, procuring or developing such a PReM sy
39、stem in accordance with this functional specification. 2 Normative references The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest
40、edition of the referenced document (including any amendments) applies. a) European Telecommunications Standards Institute (ETSI) Standards NOTE ETSI standards are available at www.etsi.org. ETSI TS 102 640-1, Electronic Signatures and Infrastructures (ESI);Registered Electronic Mail (REM); Part 1: A
41、rchitecture ETSI TS 101 862 V1.3.3 (2006-01), Qualified Certificate Profile b) European Committee for Standardization (CEN) NOTE CEN standards can be obtained from national standardization institutes of CEN National Members (see http:/www.cen.eu) CEN/TS 15121-1:2011, Postal Services Hybrid Mail Part
42、 1: Secured electronic postal services (SePS) interface specification Concepts, schemas and operations CWA 14169, Secure Signature-Creation Devices “EAL 4+“ c) Internet Engineering Task Force Public Key Infrastructure X.509 working group (IETF PKIX) RFC 5280, Internet X.509 Public Key Infrastructure
43、 Certificate and Certificate Revocation List (CRL) Profile, May 2008, D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R.Housley, W.Polk, available from: http:/www.rfc-editor.org/rfc/pdfrfc/rfc5280.txt.pdf PD CEN/TS 16326:2013CEN/TS 16326:2013 (E) 7 d) Universal Postal Union (UPU) Standards NOTE UPU
44、standards are available on subscription from the UPU International Bureau: Weltpoststrasse 4, Case postale, 3000 Berne 15, SWITZERLAND; Tel: +41 31 350 3111; Fax: +41 31 350 3110; http:/www.upu.int UPU Technical Standard S43a, Secured electronic postal services (SePS) interface specification Part A:
45、 Concepts, schemas and operations 3 Terms and definitions For the purposes of this document, the terms and definitions given in the UPU Standards glossary, in the documents referred to in Clause 2 and in Bibliography, and the following apply. The definition of other frequently used or particularly i
46、mportant terms as well as other terms introduced in this document is given below. 3.1 Advanced Electronic Signature signature, uniquely linked to and capable of identifying the signatory, which was created by a signature creation device in the sole control of the signatory and which is linked to dat
47、a in such a way that subsequent change to such data is detectable 3.2 postal operator entity officially designated by a UPU member country to operate postal services and to fulfil some or all of the related obligations arising out of the Acts of the UPU in its territory 3.3 postal operator Trust Lis
48、t list of registered and authenticated postal operators which is maintained by the UPU International Bureau 3.4 Email Client Software software which supports the creation, sending, reception and storage of messages intended to be or actually transmitted over electronic communication systems in accor
49、dance with the Simple Mail Transfer Protocol 3.5 notification message that informs the involved parties that a PReM operation has been performed or a PReM event has taken place 3.6 PReM Dispatch PReM Message together with all previously collected evidence related thereto the PReM Message 3.7 PReM Object electronic message or file(s) that mailer intends to send to addressee/mailee 3.8 PReM Policy Domain collection of PReM enabled postal operators
