simply secure IncaMail Product description - Registered Version: V01.00 Date: 02.07.2015 Author: Roger Sutter, Head of Business Unit Secure Messaging Services Classification: Public IncaMail product description - Registered Contents 1 Brief description ....................................................................................................................................... 3 2 2.1 2.2 Detailed description ................................................................................................................................ 3 Procedure ............................................................................................................................................. 3 Delivery ................................................................................................................................................. 4 2.2.1 2.3 2.3.1 2.4 2.5 2.6 2.7 Swiss Post Selection of recipients ........................................................................................................................................ 4 Receipt .................................................................................................................................................. 4 One-off activation of «Registered receipt» ......................................................................................................... 5 Directories ............................................................................................................................................. 5 Acknowledgements .............................................................................................................................. 6 Communication with Swiss authorities .................................................................................................. 6 Legal effect ........................................................................................................................................... 7 2/7 IncaMail product description - Registered 1 Brief description IncaMail, the electronic service of Swiss Post, is used by many companies today for securely and verifiably sending confidential business information such as pay slips, confidential data or account statements. The product is offered in integrated solutions by many partners worldwide. IncaMail is recognised as a secure delivery platform in Switzerland according to VeÜ-ZSSV 1. You can find out more about IncaMail at www.post.ch/incamail. With the dispatch type Registered, confidential information can be electronically delivered verifiably and in encrypted form with IncaMail. The recipients activate the receipt of IncaMail Registered messages on a one-off basis and open the messages within a period of 7 days. Senders and recipients receive digitally signed acknowledgements in PDF format with which they can prove the transaction. The dispatch type Registered can be used in Switzerland for sending messages within the framework of the “Ordinance from 18 June 2010 on Electronic Transmission for Civil and Criminal Trials and for Debt Collection and Bankruptcy Proceedings” (“VeÜZSSV” for short). 2 2.1 Detailed description Procedure No. Step 1 The customers send a Registered message (from business software, from the mail client, e.g. Outlook or web interface). When sending via web interface, they can select the recipient(s) in the Registered directory here. 2 As soon as the message has arrived in IncaMail, senders and recipients receive a delivery acknowledgement sent by normal e-mail. 3 IncaMail checks if the recipients have activated the receipt of Registered messages. If so, the message will be sent to the recipients. If not, the senders will be informed accordingly and the delivery cancelled. 4 The recipients receive the message in encrypted form and have the following options within a period of 7 days: 5 - Accept message: They open the message, confirm the acceptance (click on «Accept») and can therefore read the message. - Refuse acceptance: They actively refuse to accept the message (click on «Refuse acceptance») and can therefore not read the message. - Let expire: They let the period of 7 days pass unused and can therefore no longer open the message. As soon as the recipients have carried out an action according to step 4 or the period for the message has expired, senders and recipients again receive an acknowledgement with the corresponding message status. Comments: 1 Ordinance from 18 June 2010 on Electronic Transmission for Civil and Criminal Trials and for Debt Collection and Bankruptcy Proceedings (VeÜ-ZSSV) Swiss Post 3/7 IncaMail product description - Registered - Messages according to communication with Swiss authorities which go to recipients registered on other approved delivery platforms are passed on to the corresponding platform for delivery (in step 3). - Thanks to the «Auto-Accept» option, business customers can have IncaMail messages accepted automatically. - If an IncaMail message is not deliverable (e.g. because it has been rejected by the receiving system), senders and recipients will be informed about this via normal e-mail and the message status will be changed. 2.2 Delivery For sending Registered messages, the following minimum requirements are necessary on the part of senders: - Registered IncaMail account with e-mail verification - Premium or Business account Registered messages can be delivered via all existing product variants and to one or more recipients. Product variant Delivery WI (web interface) Selection of the dispatch type «Registered» in the sending window. MGI (mail gateway integration) Click on the «Send Registered» button in the mail client add-in of IncaMail. EAI (enterprise application integration) Selection of the message as «Registered» according to interface documentation. 2.2.1 Selection of recipients E-mail addresses of recipients can either be entered directly by senders or looked for in the directory. The search function in the web interface considers the hits in both available directories according to 2.4. 2.3 Receipt To be able to receive Registered messages, the following minimum requirements are necessary on the part of recipients: - Registered IncaMail account with verification of the home address, third-party verification (e.g. SuisseID) or business customer contract - One-off activation of «Registered receipt» (see chapter 2.3.1) Registered messages can be received via all existing product variants. Product variant Receipt WI (web interface) 1. Receipt as encrypted attachment 2. Opening of the attachment via password 3. Decision between accepting message, refusing acceptance and letting the period expire Swiss Post 4/7 IncaMail product description - Registered 4. In the case of «Accept», reading message MGI (mail gateway integration) 1. Receipt as encrypted attachment 2. Opening of the attachment without password (thanks to secure delivery) 3. Decision between accepting message, refusing acceptance and letting the period expire 4. In the case of «Accept», the message will be delivered as an e-mail via the encrypted connection Auto-Accept option: With this option activated, the message will be accepted directly and delivered as an e-mail via the encrypted connection. EAI (enterprise application integration) 1. Encrypted storage of the message in IncaMail during a period of 7 days 2. Retrieval of the message via the SOAP interface (including decryption) 3. Message is deleted after 7 days with IncaMail (whether retrieved or not) Messages which have been accepted can also be opened by the recipients after expiry of the period. 2.3.1 One-off activation of «Registered receipt» Whoever wants to receive Registered messages has to activate this option on a one-off basis beforehand. Registered messages to recipients who have not activated this option will be rejected. The activation of the option «Registered receipt» (requirements under 2.2.1 must be fulfilled) is done as follows: Activation as Activation Private individual The receipt can be activated in the settings via an online process and acceptance of the legal conditions. Employee The receipt can be activated in the settings via an online process and acceptance of the legal conditions. A requirement is a written declaration of consent from the company. Company The activation requires a written declaration of consent from the company. After the declaration of consent, the corresponding e-mail addresses can be activated online. Authority The activation requires a written declaration of consent from the company. After the declaration of consent, the corresponding e-mail addresses can be activated online. 2.4 Directories The customers who have activated the receipt of Registered messages can select if they want to be «registered» and «searchable» in the IncaMail Registered directory and/or in the eGov directory of Switzerland. «Registered» means they are able to be written to via this channel. «Searchable» means they are able to be looked for in the directory. Directory Description IncaMail Registered The directory is run by IncaMail and can be viewed only by IncaMail users. It contains Swiss Post 5/7 IncaMail product description - Registered directory all e-mail addresses of people who have activated the receipt of Registered messages with IncaMail. Recipients who enter their details can select if they want to be searchable or not. Non-searchable recipients can be written to via a Registered message but cannot be looked for in the directory. eGov directory Switzerland The directory is run by the Federal Office of Justice in Switzerland. It contains the email addresses of all people who have registered for communication with Swiss authorities according to VeÜ-ZSSV 2. The entries come from all approved delivery platforms and can be accessed only via these. Registered people can decide whether they want to be searchable for everyone or only for Swiss authorities. Further information: www.ch.ch/e-justice. 2.5 Acknowledgements With the acknowledgements, senders and recipients can confirm transactions. The acknowledgements are sent to the senders and recipients via normal e-mail as a PDF file signed by Swiss Post. The acknowledgements contain all essential elements of the transaction. They are not stored in IncaMail, storing them is the responsibility of the senders and recipients. The following acknowledgements are created and sent: Acknowledgement Event Delivery acknowledgement The message has arrived at IncaMail. Retrieval acknowledgement The recipient has accepted the message. Expiry acknowledgement The acceptance period has expired without activity from the recipient. Refused acceptance acknowledgement The recipient has refused acceptance. In the case of interoperable delivery via another approved delivery platform according to 2.6, the acknowledgement can also come from the other delivery platform. 2.6 Communication with Swiss authorities As part of various legislative projects of the Federal Government on judicial organisation and proceedings, since the start of 2011 the parties have also had the possibility to submit petitions in electronic form to courts or authorities. In two ordinances (VeÜ-ZSSV 3) the Federal Council regulated how the parties’ petitions and also the delivery of the verdicts or decrees can be handled in the various proceedings. The delivery must be via an approved delivery platform here. Approved delivery platforms must comply with the catalogue of criteria for secure delivery platforms coming under the ordinances and be approved by the Federal Office of Justice. IncaMail is an approved delivery platform via which deliveries can be made according to the ordinances. Since there are several approved delivery platforms, Registered measures to recipients on other platforms are exchanged interoperably between the platforms in question. You will find further information at www.ch.ch/e-justice. 2 Ordinance from 18 June 2010 on Electronic Transmission for Civil and Criminal Trials and for Debt Collection and Bankruptcy Proceedings (VeÜ-ZSSV) 3 Ordinance from 18 June 2010 on Electronic Transmission for Civil and Criminal Trials and for Debt Collection and Bankruptcy Proceedings (VeÜ-ZSSV) Swiss Post 6/7 IncaMail product description - Registered 2.7 Legal effect The legal effects of electronic messages sent and received via IncaMail dispatch type «Registered» are in individual cases based on the applicable legal regulations and court and authority practices of the national legislation responsible for the assessment and on any existing private agreements. Careful examination of the legal effect and permissibility of electronically delivered messages is, in individual cases, solely the responsibility of the customer. For a legal assessment, the following facts are important regarding IncaMail Registered messages: Swiss Post - Recipients of Registered messages are identified at a certain level. - Recipients of Registered messages have generally specifically activated the receipt of Registered messages beforehand (companies via written declaration of consent). - The PDF acknowledgements contain all relevant data and are electronically signed by Swiss Post. - Swiss Post can, as an independent third party, prove the transaction data at any time on request using log files (but not the respective delivered content). - Deliveries made within the framework of VeÜ-ZSSV are based on this ordinance. 7/7