US20100268754A1

Movatterモバイル変換

Info

Publication number: US20100268754A1
Application number: US12/161,462
Authority: US
Inventors: David John Holton
Original assignee: Individual
Current assignee: Individual
Priority date: 2006-01-19
Filing date: 2007-01-19
Publication date: 2010-10-21
Also published as: WO2007079550A1; EP2047646A4; US20120216261A1; EP2047646B1; EP2047646A1; AU2007204609A1; US8700721B2

Abstract

A delivery server (102), and a method of operating same for providing an electronic mail service for the delivery of essential mail items to a subscriber (103) in electronic form. The delivery server (102) has an associated database (114) containing subscriber details, and receives from the subscriber (103) a nomination of at least one service provider (310) from which the subscriber wishes to receive essential mail items in electronic form. The nomination is stored in the database (114) in association with the subscriber details. A trusted communications channel is established between the delivery server (102) and a service provider (310) computer system, for example via the Internet (106) or other public network. The delivery server (102) receives essential mail data from the service provider via the communications channel, and verifies that the subscriber wishes to receive an essential mail item corresponding with the essential mail data, by comparison with the subscriber details and nominations stored in the database (114). In the event that the verification is successful, the delivery server (102) delivers the essential mail item to the subscriber (103) in electronic form.

Description

FIELD OF THE INVENTION

The present invention relates to a method and system for electronically delivering financial statements, invoices and other essential mail items. In this context, a mail item may be considered “essential” if it is of particular interest, value or importance to the recipient, and in particular essential mail items include those types of solicited mail, such as utility bills, telephone bills, bank statements, government documents and other items prepared by trusted service providers that have traditionally been sent via the conventional postal system.

BACKGROUND OF THE INVENTION

In Australia alone, approximately 50 million financial statements, invoices and/or bills are sent each week to the Australian public, the majority via the conventional postal system. The estimated delivery time of each such mail item, from data extraction from a service provider's database to the physical mail box of the customer, is approximately 3 to 7 days.

There are a number of problems with the conventional mailing of invoices and statements. These problems include the delays mentioned above, as well as financial cost, the environmental impact of producing a paper document and mailing it to a customer, delays in the cash flow of the service provider, and locating customers whose address may have changed. The cost of generating and mailing items such as invoices, bills and financial statements may be substantial, being at least A$1.00 to A$3.00, with more recent estimates as high as A$5.00 to A$9.00, once all costs associated with the production and mailing of the documents have been taken into account.

At present, approximately 95 percent of all financial statements, invoices and bills are handled through the conventional mail delivery system described above. Despite the increasing availability of electronic systems, which make statements, invoices and similar items available online for collection by the customer, or via electronic mail delivery to a customer's email address, the uptake of such electronic services has been relatively low, eg around 5 percent. This tow uptake may initially appear surprising, since quite aside from the financial savings available to service providers, there are clearly also significant potential benefits to consumers in opting for electronic delivery. For example, many consumers are increasingly concerned about the environmental and social impact of increasing resource consumption, and especially the use of paper, due to the effects of logging not only upon forests themselves, but also the follow-on effects upon the atmosphere, water quality, and the impact upon dependent varieties of flora and fauna. There is an impact also upon the consumer in receiving and processing paper documents. Depending upon their content, such documents must either be stored or disposed of. In this regard, consumers are also increasingly concerned about privacy issues, including identity theft and fraud, which are exacerbated when paper documents may fall into the hands of unscrupulous parties. For example, important documentation containing personal information, including invoices, bills and financial statements, may be stolen from letter boxes, recycling bins, or rubbish bins. Yet, notwithstanding these and other issues, to date consumers have shown a continuing clear preference for receiving essential mail items via the conventional postal system.

The real and perceived problems with electronic delivery of essential mail items are many and varied. Possibly the most significant, however, are issues relating to security and trust. The conventional mail system provides users with a single point of delivery (eg a letter box or post office box), along with the confidence that is provided due to the system being exclusively or primarily operated by a long-term, trusted operator, such as a national mail service provider (eg Australia Post in Australia, the US Postal Service in the United States of America, the Royal Mail in the United Kingdom, and so forth). Consumers do not generally feel the same levels of trust and confidence in electronic systems, and are greatly concerned about issues of security and convenience associated with the online delivery of essential mail items.

Such consumer concerns are not entirely unfounded, and many arise as a result of genuine technical limitations of existing online delivery systems. While email is now widely used as a means of personal and business communications, having the advantages of rapid delivery and low cost as compared with alternatives such as conventional mail and facsimile, it is also now widely realised that email is not a direct replacement for the conventional mail system, and that it has a number of significant shortcomings.

For example, the very openness of the email system which enables easy and rapid access and communications between persons all around the globe, is also its greatest weakness. Unsolicited commercial email, colloquially known as “spam”, is now rife on the Internet, and constitutes a sizeable proportion of all email sent and received on any given day. In many cases, the senders of such spam email seek to conceal their identity, and may even fraudulently alter email headers to make it appear as if the spam email has been sent from a trustworthy source. As a result, illegal activities such as Internet banking fraud and other scams are not uncommon. Legitimate mail items may be lost or overlooked by users amongst numerous unsolicited items. In order to minimise the impact of unsolicited email, so-called “spam blocking” filters have been developed, however these are imperfect and therefore tend to allow the delivery of some items that should have been blocked, and similarly may block items, including essential items, that the user would wish to have delivered. The imperfection of spam blocking filters is an unavoidable technical problem, arising from the open nature of the Internet generally, and the email system in particular, and from the impossibility of designing heuristic filtering algorithms that are capable of infallibly distinguishing desirable items from spam and other unsolicited content.

A further consequence of the prevalence of unsolicited email is that it is increasingly common for users to regularly change their email addresses, once the levels of spam received by an existing email address become excessive. This practice further mitigates against the delivery of essential mail items via email, since it is necessary for a consumer, upon changing email address, to notify all relevant service providers of the new electronic delivery details.

Alternative approaches for electronic delivery of essential mail items such as financial statements, invoices and bills include the provision of a web-based interface, via which the user may retrieve one or more nominated essential items. Such web sites are generally operated by or on behalf of particular service providers. For example, an individual telephone or utility company may provide a service whereby users are able to log in and review outstanding charges, and possibly also complete payment, for example by providing credit card details. Individual banks also operate their own Internet banking services, most of which enable users to log in and obtain current financial information, including balance summaries and statements of recent transactions. A significant disadvantage of these types of systems is the resulting number of user names, passwords and other security information that may be required by consumers in order to access the sites of the different service providers. This is not only an inconvenience, but also a potential security risk, since consumers having an increasing number of passwords may write them down, creating the possibility that they may be stolen or copied, or alternatively elect to use passwords that may be more easily remembered but, equally, are more easily guessed.

Accordingly, there is a need to provide methods and systems for electronic delivery of essential mail items that overcome, or at least mitigate, the aforementioned technical and other problems of the prior art. In particular, it would be highly desirable to provide such a system which is operable over publicly-accessible data networks, such as the Internet, in order to maximise convenience and accessibility, while at the same time not compromising security and avoiding the many drawbacks of the existing email system.

BRIEF SUMMARY OF THE INVENTION

In one aspect, the present invention provides a method of providing an electronic mail service for the delivery of essential mail items to a subscriber in electronic form, the method including the steps of: providing a delivery server having an associated database containing subscriber details;

the delivery server receiving from the subscriber a nomination of at least one service provider from which the subscriber wishes to receive essential mail items in electronic form, and storing said nomination in the database in association with the subscriber details;

establishing a trusted communications channel between the delivery server and a service provider computer system;

the delivery server receiving essential mail data from the service provider via said communications channel; the delivery server verifying that the subscriber wishes to receive an essential mail item corresponding with the essential mail data in electronic form, by comparison with subscriber details and nominations stored in the database; and

in the event that said verification is successful, the delivery server delivering the essential mail item to the subscriber in electronic form.

Advantageously, the invention thereby provides a technical solution which substantially parallels in many respects the conventional mail delivery system. For example, the delivery server may be seen as analogous to a post office. The service provider computer system may be compared with a conventional post box, from which the postal service (ie the delivery server) collects mail items for delivery to subscribers. The verification process performed by the delivery server is somewhat analogous with the conventional mail sorting process, insofar as it provides confirmation that recipient subscriber details are legitimate before any attempt is made to deliver a mail item. The method also has in common with the conventional postal service that it is a centrally-controlled, unidirectional delivery service which may thus enable abuse of the service to be avoided. Unlike the regular email system, it is not possible for any party in possession of identifying details of a subscriber (eg the equivalent of an email address) to send items to that subscriber. Similarly, subscribers may not freely send items to one another. Rather, only those items that have passed verification by the delivery server, and that correspond with nominations made by the recipient subscriber, may be delivered to that subscriber. In this respect, it will be appreciated that subscribers have an added degree of control as compared with the conventional postal system.

It is particularly advantageous for the method, and the delivery server, to be operated, sponsored, endorsed or otherwise backed by a trusted entity or authority. In this case, the technical features of the method which provide enhanced security as compared with other online delivery schemes may be reinforced by the sense of trust that consumers may feel for the operating or sponsoring entity. For example, a method and delivery server in accordance with an embodiment of the invention may be operated or sponsored by an established trusted authority, such as a national postal service provider.

As will therefore be appreciated, the invention is advantageously able to mitigate or substantially eliminate the issues relating to security and trust of electronic delivery systems that presently cause concern to users of the conventional postal system, and prevent a higher level of uptake of electronic delivery services. This is anticipated to result in corresponding increase in the acceptance and use of electronic delivery of essential mail items. The follow-on benefits of this are expected to include: a very substantial reduction in delivery delays and costs experienced by service providers; significant environmental benefits resulting from reductions in resource utilisation, including paper consumption and the resources expended in the physical generation and delivery processes generally required by conventional (postal) methods; and consequential further economic and social benefits.

It is to be understood that, in the context of the invention, the term “service provider” is to be interpreted broadly. Clearly, entities such as financial institutions (banks), telephone and utility companies, and other providers of particular goods or services are encompassed by the term “service provider”. However, the importance, relevance or “essentiality” of information provided by different individuals or entities is a matter for each subscriber, in view of the fact that subscribers are able to control their nominations of service providers from which they will receive essential mail items. At the very least, any entity or individual nominated by a subscriber is a “service provider” at least insofar as the sending of the mail items requested by the subscriber is, in itself, a service, and these mail items are “essential” to the subscriber in that they have been nominated as such.

In accordance with preferred embodiments of the invention, the identity of the subscriber is authenticated prior to entering of subscriber details into the database. Accordingly, the method preferably includes, prior to the delivery of any essential mail items to the subscriber, an authentication process which includes the steps of:

receiving a subscription request from the subscriber, the subscription request including subscriber information enabling the identity of the subscriber to be validated;

validating the identity of the subscriber using the subscriber information; and

in the event that subscriber validation is successful, accepting the subscription request and creating a corresponding subscriber entry in the database, otherwise rejecting the subscription request.

Subscriber information may include identity documents, such as a passport, birth certificate, social security number, healthcare care, identity card, and so forth, as appropriate. It will be appreciated that in any given jurisdiction, suitable validation benchmarks either exist, or may be established, to enable the reasonable authentication of a subscriber. For example, in Australia the so-called “100 point” system may be employed, wherein various different types of identifying information and documentation are ascribed differing point values, and a combination of documents having a total point value of at least 100 points must be presented before the holder's identity is considered to have been validated. It will be understood that, in at least some cases, the validation step may require the intervention of a human operator to perform checking of documentation. However, it is readily foreseeable, particularly with advances in electronic identification documents, including chip-cards and biometric passports, that the validation step could, in some embodiments, be completely automated.

Preferably, the subscriber is allocated, and may be identified by, a unique subscriber identifier. The allocated subscriber identifier may be associated with the subscriber details, nominations, and other subscriber data, held in the database. The subscriber identifier may then be used as a means of identifying the subscriber, for example by nominated service providers, and provides a means for referencing and accessing subscriber information held in the database. In some embodiments, there may be more than one identifier, or reference code, associated with each subscriber. Within this specification, the identifier provided to service providers to enable delivery of essential mail items is also known as a “trust key”.

A variety of different algorithms may be employed to generate and allocate a unique identifier to each subscriber. For example, a unique random number may be generated and allocated to a new subscriber. Alternatively, cryptographic techniques may be used to generate a unique subscriber identifier based upon various personal details of the subscriber. Still a further alternative is to construct a unique subscriber identifier from a combination, or concatenation, of subscriber details. For example, a unique subscriber identifier for a US-based subscriber may include the subscriber's Social Security Number. In the case of an Australian subscriber, the subscriber's Tax File Number may be utilised either alone, or in combination with other elements. Various other methods for generating a unique subscriber identifier will be apparent to those skilled in the relevant art.

It is particularly preferred that the method be Internet-based, ie that the delivery server is provided having a connection to the Internet, such that subscriber nominations and other subscriber information, as well as essential mail data and essential mail items, may be transferred to and from the delivery server via the Internet. Advantageously, this enables subscribers and service providers to make use of the method, and the delivery server, from any location at which Internet access is provided.

However, as is well known, a disadvantage of providing global access via the Internet is the potential for breaches of security of the delivery server. Accordingly, it is considered particularly desirable that the delivery server be provided with access to the Internet via a suitably configured firewall. Various methods and apparatus for providing electronic firewalls satisfying the security and integrity requirements of the delivery server are well known in the relevant art, and therefore will not be described in detail herein.

In accordance with one embodiment of the invention, the step of establishing a trusted communications channel includes the delivery server initiating a connection with the service provider computer system. For example, the delivery server may connect to the service provider computer system via the Internet in accordance with the File Transfer Protocol (FTP), or SSH File Transfer Protocol (SFTP), or indeed any other suitable protocol. Secure protocols, such as SFTP, are preferred, since these enable the essential mail data to be encrypted during transfer, so as to protect the data from possible eavesdropping.

Advantageously, having the delivery server initiate the connection enhances the overall security and integrity of the system since it avoids the need for the delivery server to accept incoming connections from unauthenticated service providers. As will be appreciated, allowing incoming connections implies a limitation on the configuration of the firewall, and considering that an initial connection request must be considered untrusted until subsequently verified opens a potential security hole in the system. Conversely, by employing a method in which the delivery server initiates connections to the service provider computer system, it is possible to ensure that the trusted communications channel thereby established is always initiated with a known and trusted service provider.

While there are clear advantages to initiation of secure, trusted communications by the delivery server only, it will be appreciated that methods providing comparable levels of security and trust may be provided wherein the service provider initiates the connection. For example, a connection initiated by the service provider computer system may initially be accepted, and an authentication process employed to verify the identity of the service provider computer system prior to allowing further access to the delivery server. Suitable authentication methods include password-based authentication, cryptographic techniques, and/or “challenge”-based methods. If desired, authentication may be performed at the firewall level, thereby minimising the prospects of a security breach of the delivery server via an unauthenticated communications link.

Although perhaps a less preferred option, it is also possible for essential mail data to be transferred from the service provider to the delivery server via email, ie the trusted communications channel may include an email channel. Techniques for authenticating the source of data, such as digital signatures, may be used to confirm the identity of the service provider purportedly sending essential mail data via email, to ensure the trusted status of the channel.

Yet a further possible approach to ensuring the security of the trusted communications channel is to employ private lines, such as telephone lines, whereby an incoming or outgoing telephone number provides an assurance of the identity of the corresponding service provider computer system.

The essential mail data received by the delivery server via the trusted communications channel may be a formatted copy of the essential mail item itself, in a form suitable for delivery to the subscriber. Alternatively, the essential mail data may be data specifying content of the essential mail item, and requiring further formatting prior to delivery to the subscriber. For example, in some embodiments the delivery server may utilise statement formatting software or engage a third-party to format essential mail data received from a service provider into mail items, such as financial statements, invoices, utility bills or the like, having a desired format or appearance. The essential mail items may be delivered to the subscriber in any convenient file format, including plain text, PDF, HTML, XML, GIF, JPEG, or any other desired file type, in accordance with requirements and/or subscriber preferences.

In the embodiments involving a third-party for data formatting, the service provider or the delivery service may provide essential mail data to a data server which sends an electronic notification to the third party that data is awaiting formatting. The third-party may then access the data server, verify subscriber details, and then download and format the essential mail data to produce a final formatted document, ie the essential mail item. Formatting the data may include merging the data with a document template to create the document to be delivered to the subscriber. It also be appreciated that database functions such as deduplication, name and address cleansing and segmentation may also occur.

The step of the delivery server verifying that the subscriber wishes to receive the essential mail item preferably includes checking the subscriber nominations in the database to confirm that the subscriber indeed wishes to receive essential mail items from the service provider. Further verification may include comparing customer details provided by the service provider with the corresponding customer details held in the database, as an additional check that the subscriber is the intended recipient of the essential mail item.

As will be appreciated, various means and methods for the delivery server delivering the essential mail item to the subscriber in electronic form are available. For example, the delivery server, or an associated web server, may provide a web-based interface, such as an interface similar to existing web-mail interfaces, for enabling the subscriber to access and download essential mail items. Alternatively, or additionally, the delivery server, or an associated email server (eg a POPS server) may enable the subscriber to receive essential mail items using a standard email client application. Still a further alternative is to forward the essential mail item to a nominated email address of the subscriber via email, either in-line within an email message, or as an attachment. Other delivery methods will also be apparent to persons skilled in the relevant art.

Naturally, it is to be understood that the method is extensible to a large number of subscribers and service providers, limited only by the storage capacity, communications bandwidth, and processing capacity of the delivery server. As will be appreciated, all of these technical characteristics are scalable, for example by providing a multi-processor server, or server farm, high bandwidth communications interfaces, and additional external storage media. Accordingly, the invention encompasses embodiments including a method of providing an electronic mail service for the delivery of essential mail items to a plurality of subscribers in electronic form, the method including the steps of:

providing a delivery server having an associated database containing subscriber details;

the delivery server receiving from each of the plurality of subscribers a nomination of at least one service provider from which each subscriber wishes to receive essential mail items in electronic form, and storing said nominations in the database in association with the corresponding subscriber details;

the delivery server establishing, for example concurrently, sequentially or on demand, a plurality of trusted communications channels with a corresponding plurality of service provider computer systems;

the delivery server receiving from each of said service provider computer systems essential mail data from each service provider via the corresponding communications channel;

for each item of essential mail data, the delivery server verifying that a corresponding recipient subscriber wishes to receive a corresponding essential mail item in electronic form, by comparison with subscriber details and nominations stored in the database; and

in the event that each said verification is successful, the delivery server delivering the corresponding essential mail item to the corresponding subscriber in electronic form.

In another aspect, the present invention provides a delivery server for the delivery of essential mail items to a subscriber in electronic form, the delivery server including:

at least one processor;

a database containing subscriber details including at least one nominated service provider from which the subscriber wishes to receive essential mail items in electronic form;

at least one data communications interface operatively coupled to the processor; and

at least one storage medium operatively coupled to the processor, the storage medium containing program instructions for execution by the processor, said program instructions causing the processor to execute the steps of:

- establishing via the data communications interface a trusted communications channel with a service provider computer system;
- receiving essential mail data from the service provider via said communications channel;
- verifying that the subscriber wishes to receive an essential mail item corresponding with the essential mail data in electronic form, by comparison with subscriber details and nominations stored in the database; and
- in the event that verification is successful, delivering the essential mail item to the subscriber in electronic form.

Preferably, the data communications interface provides a connection to the Internet. Most preferably, the connection to the Internet is provided via a firewall. Additional or alternative data communications interfaces may be provided for communication with the service provider computer system and/or for delivery of essential mail items, including private subscriber lines eg telephone lines.

The storage medium preferably contains further program instructions for execution by the processor, said further program instructions causing the processor to execute a method for generating a unique subscriber identifier associated with the subscriber. Advantageously, such a unique subscriber identifier is generated and associated with the subscriber following an initial registration or authentication process.

According to some embodiments the storage medium may contain program instructions for implementing the step of establishing a trusted communications channel by initiating an outgoing connection, for example using the File Transfer Protocol (FTP), with the service provider, or alternatively for accepting and authenticating an incoming connection request from the service provider.

The storage medium may further contain program instructions for execution by the processor, which cause the processor to execute the step of formatting an essential mail item based upon the essential mail data received from the service provider. Advantageously, in such embodiments the service provider need not be responsible for formatting of data, or for the production of essential mail items in finished form suitable for delivery to the subscriber.

In yet another aspect, the present invention provides a delivery server for the delivery of essential mail items to a subscriber in electronic form, the delivery server including:

means for establishing a trusted communications channel with a service provider computer system;

means for receiving essential mail data from the service provider via said communications channel;

means for verifying that the subscriber wishes to receive an essential mail item corresponding with the essential mail data in electronic form, by comparison with subscriber details and nominations stored in the database; and

- means for delivering the essential mail item to the subscriber in electronic form, in the event that said verification is successful.

The delivery server is preferably computer-implemented, and the means for receiving a nomination from the subscriber may include suitable interface hardware of the server for interfacing to a communications network, such as the Internet, and may further include one or more software components executed by at least one processor of the server computer including instructions to effect the corresponding functionality.

Furthermore, the means for verifying that the subscriber wishes to receive the essential mail item also preferably includes one or more software components executed by the processor, for performing appropriate comparisons with information stored in the database.

The means for delivering the essential mail item to the subscriber may also include corresponding software components executed by the processor, and may further include suitable interface hardware for interfacing to a communications network, such as the Internet, utilised by the subscriber for receiving essential mail items.

In yet another aspect, the present invention provides a method of a subscriber receiving an essential mail item from a service provider, the method including the steps of:

the subscriber transmitting, to a delivery server having an associated database containing subscriber details, a nomination of at least one service provider from which the subscriber wishes to receive essential mail items in electronic form, wherein the delivery server stores said nomination in the database in association with the subscriber details; and

the subscriber subsequently receiving an essential mail item from the nominated service provider in electronic form,

wherein delivery of the essential mail item to the subscriber is effected by the delivery server executing the steps of:

- establishing a trusted communications channel with a service provider computer system;
- receiving essential mail data from the service provider via said communications channel;
- verifying that the subscriber wishes to receive an essential mail item corresponding with the essential mail data in electronic form, by comparison with subscriber details and nominations stored in the database; and
- in the event that verification is successful, delivering the essential mail item to the subscriber in electronic form.

Further preferred features and advantages of the invention will be apparent to those skilled in the art from the following description of preferred embodiments of the invention, which should not be considered to be limiting of the scope of the invention as defined in the preceding statements, or in the claims appended hereto.

BRIEF DESCRIPTION OF THE DRAWINGS

Preferred embodiments of the invention will now be described with reference to the accompanying drawings, wherein like reference numerals refer to like features, and in which:

FIG. 1A is a schematic diagram of a system for electronically delivering essential mail items in accordance with a preferred embodiment of the invention;

FIG. 1B is a block diagram illustrating a delivery server within an Internet-based implementation of the system ofFIG. 1A;

FIG. 2 is a flowchart illustrating steps in a method for electronically delivering essential mail items according to a preferred embodiment of the invention;

FIG. 3 is a schematic diagram illustrating an exemplary system including multiple subscribers and service providers;

FIG. 4 is a flowchart of an exemplary application and account creation process according to an embodiment of the invention;

FIG. 5 is a flowchart of account application processing according to an embodiment of the invention;

FIG. 6 is a flowchart of identity authentication according to an embodiment of the invention;

FIG. 7 is a flowchart of account creation according to an embodiment of the invention; and

FIGS. 8A to 8D are flowcharts illustrating methods of establishing communications channels and transferring essential mail data according to preferred embodiments of the invention.

DETAILED DESCRIPTION OF THE INVENTION

According to preferred embodiments of the present invention, there are provided methods and apparatus for the delivery of essential mail items to subscribers in electronic form.FIGS. 1A and 1B show schematic diagrams of anexemplary system100 in accordance with the invention.FIG. 1A illustrates the logical connectivity between various components of thesystem100, whileFIG. 1B is a block diagram illustrating an Internet-based implementation of thesystem100.

Thesystem100 includes adelivery server102, which in preferred embodiments is a computer or computer system including one or morecentral processing units112 operatively associated with adatabase114. Thedatabase114 includes subscriber details, and other subscriber data, as described in greater detail below. The deliveryserver computer system102 further includes at least onestorage medium116, such as random access memory (RAM), read only memory (ROM), flash memory, magnetic storage devices (eg hard-disk drives), optical storage devices (eg CD-ROM or DVD-ROM devices), and/or any combination of the foregoing. The memory orother storage medium116 containsprogram instructions118 for execution by theprocessor112, in order to implement the desired functionality of thedelivery server102 in accordance with a preferred embodiment of the invention. As will be appreciated, theprogram instructions118 stored within memory and/orother storage media116 also include executable instruction code, such as operating system code, for controlling and interfacing with various peripherals of thecomputer system102, and for providing any other desired functions of the system, in accordance with conventional computer operating methods.

The deliveryserver computer system102 also includes adata communications interface120 operatively coupled to theprocessor112. Thedata communications interface120 is preferably a broadband network interface, such as an Ethernet interface, configured to provide connectivity to theInternet106. However, in various embodiments thedata communications interface120 may be any suitable interface, or may be a plurality of interfaces, such as private line interfaces, telephone (modem) interfaces, wired broadband (eg ADSL or cable modem) interfaces, wireless network interfaces, and so forth.

As noted above, according to preferred embodiments thedelivery server102 includes anetwork interface120 providing connectivity to theInternet106. In such embodiments, it is particularly preferred that connectivity to theInternet106 is provided via afirewall107, in order to prevent unauthorised access to, or malicious attacks upon, thedelivery server102.

Connectivity is available between thedelivery server102, for example via theInternet106, and one or more service providers, eg310,320,330. Connectivity is also provided between thedelivery server102 and subscribers (not shown) for example viasubscriber computer103, or other Internet-enabled subscriber devices (eg portable or handheld computers, Internet-enabled mobile phones, PDAs, and so forth).

Connectivity is also available between

service providers

310,320,330, thedelivery server102, and third-party information formatting service provider, or data warehouse,340.

The purpose of thesystem100 is to provide one or more subscribers with a service for delivering essential mail items in electronic form, for example via email or other convenient means tosubscriber device103. It is a particular feature of thedelivery system100 that the subscriber is able to nominate the service providers, eg310,320,330, from which the subscriber wishes to receive essential mail items, and that thesystem100 does not support the general exchange of electronic mail, or other electronic information, to or from thesubscriber device103. Rather, the purpose of thesystem100 is particularly to deliver only essential mail items required by the subscriber from nominated service providers.

Referring now toFIG. 2, the flowchart200 shows one example illustrating steps in a method for electronically delivering essential mail items to a subscriber in accordance with a preferred embodiment of the invention. At step202, a prospective subscriber makes an application to register with thedelivery server102. The application process is described in greater detail below with reference toFIGS. 4 to 7, however in summary a subscriber application typically includes subscriber details, such as name, address and other contact information, and preferably further includes details suitable for validation of the subscriber's identity, such as passport details, Tax File Number, Social Security Number, date of birth, and/or other information or documents suitable for validating or authenticating identity. Once the application is processed, and accepted, a subscriber account, and a corresponding unique subscriber identifier and unique “trust key” is created at step204.

At step205, the subscriber nominates one or more service providers, eg310,320,330, from which the subscriber wishes to receive essential mail items in electronic form. At step206, the delivery server202 notifies the nominated service providers and forwards the subscriber's trust key to each nominated provider. Henceforth, the nominated service providers are able to deliver essential mail items to the subscriber, via thedelivery server102, for as long as the subscriber's nomination and/or the subscriber's trust key remains valid.

At step208, the nominated service provider generates essential mail data, corresponding with an essential mail item, for delivery in electronic form to the subscriber. Nominated service providers may include banks, telephone companies, other utility service providers, or indeed any service provider registered with thedelivery server102 for nomination by subscribers. The essential mail items may include financial statements, bills, invoices, or any other information of particular interest and/or value to the subscriber, and which the subscriber has therefore nominated as “essential”. Essential mail data may therefore consist of information relating to financial statements, invoices, bills, or any other information requested or required by the subscriber.

In general, the essential mail data is “content”, which may require further formatting before being delivered to the subscriber as an essential mail item. The step of formatting210a,210bmay be performed before or after the step212a,212bof transferring the essential mail data/item to thedelivery server102, as indicated by the alternative branches in the flowchart200. Formatting may be performed before transfer to the delivery server, by the

service provider

310,320,330, or may be performed after transfer, by thedelivery server102. Alternatively, formatting may be performed either before or after transfer by a third-party provider340. For example, in some embodiments thedelivery server102 may utilise statement formatting software, or may engage third-party provider340, to format essential mail data received from a

service provider

310,320,330 into mail items, such as financial statements, invoices, utility bills or the like, having a desired format or appearance. Data may be transferred to the third-party provider340 either by the

service providers

310,320,330 or by thedelivery server102, for formatting. Formatting the data may include merging the data with a document template to create the formatted essential mail item to be delivered to the subscriber. Formatted mail items may be transferred back to the

service providers

310,320,330, and thereafter to thedelivery server102, or may be transferred directly from the third-party provider340 to thedelivery server102. The step212aor212bof transferring essential mail data/items to thedelivery server102 is performed by establishing a trusted communications channel between thedelivery server102 and a corresponding service provider computer system, and then thedelivery server102 receiving the essential mail data/item from the service provider, eg310,320,330 via the trusted communications channel. Establishment of a trusted communications channel, and transfer of essential mail data, is described in greater detail below with reference toFIGS. 8A to 8D.

While the foregoing description, with reference toFIGS. 1A,1B and2, illustrate the operation of thesystem100 anddelivery server102 from the perspective of a single subscriber, it will be appreciated that this is exemplary only of the general operation of thesystem100 anddelivery server102, which provide a service for electronic delivery of essential mail items to a plurality of separate subscribers. This is illustrated by the schematic diagram300 ofFIG. 3, which shows a system including multiple subscribers and service providers. Thesystem300 includesdelivery server102, a plurality of subscribers, eg101,111,121, and a plurality of service providers, eg310,320,330. Thedatabase114 associated withdelivery server102 includes subscriber details corresponding with each of the plurality of subscribers. Each subscriber is able to nominate at least one service provider from which the subscriber wishes to receive essential mail items in electronic form, and thedelivery server102 maintains a record of such nominations within thedatabase114.

Service providers

310,320,330 are advised of subscriber nominations, and provided with corresponding subscriber trust keys to enable the subsequent delivery of essential mail items to the corresponding subscribers. Thereafter, thedelivery server102 establishes, for example concurrently, sequentially or on-demand, trusted communications channels with each of the

service providers

310,320,330 as required. Thedelivery server102 receives essential mail data from the corresponding service provider computer systems, via the respective trusted communications channels, checks subscriber details associated with the essential mail data, and delivers verified essential mail items in electronic form to the appropriate subscriber, eg101,111,121. From the perspective of each subscriber, the overall process of application, registration, nomination, delivery and collection of essential mail items is as described above with reference toFIGS. 1 and 2.

FIG. 4 is aflowchart400 of an exemplary application and account creation process according to a preferred embodiment of the invention. Atstep402, a potential subscriber submits an application for registration with the delivery server, and application processing occurs atstep404. Theapplication processing step404 is described in greater detail below with reference toFIG. 5. Following successful processing of the application, atstep406 the prospective subscriber details are cross-referenced with existing subscriber account details held in theaccount database408. If it transpires that the application corresponds with an existing subscriber, then there is no need to create a new account, and in accordance withdecision410 the process is directed to step412, in which a notification is generated that the account already exists, and the application process is terminated.

Given that the application corresponds with a new account, an attempt is made to authenticate or validate the identity of the subscriber, atstep414. As will be appreciated, following successful registration the new subscriber will be entitled to request and receive essential mail items generated by a variety of service providers, including financial institutions, telephone companies, utility companies and the like, and much of this essential information is of a highly sensitive and personal nature. Accordingly,identity authentication step414 is of substantial practical importance in preferred embodiments of the invention, to ensure that unscrupulous parties do not manage to register as subscribers under false or assumed identities, for fraudulent purposes. An exemplary process ofidentity authentication414 is described in greater detail below with reference toFIG. 6.

In the case in whichidentity authentication414 fails, thedecision step416 passes control to step418, which provides an opportunity for additional proof of identity data and/or documentation to be provided. For example, ifidentity authentication step414 has failed only because the prospective subscriber has provided insufficient evidence or proof of identity, a further attempt at authentication may be successful if additional information is supplied. For example, the unsuccessful applicant may be able to additionally providedocumentation420, such as a birth certificate, passport, health card, driver's licence, and so forth, as additional evidence of identity.

Once the identity of the prospective subscriber has been adequately confirmed,decision step416 passes control to accountcreation step422. Further detail of a preferred account creation process is described below with reference toFIG. 7. Atstep424 the new account details are stored, concluding the application andaccount creation process400.

FIG. 5 is a flowchart showing further detail of a preferred embodiment ofaccount application processing404. According to the embodiment represented by the flowchart, a new subscriber application may be either an electronic application502, or amanual application504. For example, an electronic application may be made online, for example by the prospective subscriber completing a web-based form. Alternatively, amanual application504 may include the use of a physical form, which is completed by the prospective subscriber, and submitted in person or via mail to an operator of the mail delivery server. Whichever form of application is provided, atstep506 the application is processed, for example by extracting required details from the electronic or physical application form, in order to establish required information of the prospective subscriber for completion of application processing and account creation.

Each subscriber account is created and maintained in accordance with anaccount framework508, which establishes the various subscriber details and other subscriber information associated with the account, and stored within thedatabase114 in accordance with corresponding data structures. Theaccount framework508 includes a minimum set of requirements for the creation and maintenance of an account, and at decision step510 a comparison is performed between the application data that has been translated into theaccount framework508, and theminimum requirements512 for continued processing of the application. As illustrated inprocess404, the minimum requirements for proceeding with the application are the provision by the prospective subscriber of a full name and corresponding street address. If this minimum information is not included within the application, then it is rejected atstep514, and an indication of failure generated atstep516. The application process is thereby terminated, and if the prospective subscriber wishes to do so, they may reapply providing the required information that was omitted from the initial application.

If the minimum requirements are satisfied, then at step518 a provisional account record is created, and stored asapplication data520. It is to be understood that, at this point, no account has been created, and that the provisional account data will only be converted into a functional subscriber account following successful identity authentication and account creation, as described below with reference toFIGS. 6 and 7.

FIG. 6 is a flowchart illustratingidentity authentication414, according to a preferred embodiment of the invention. As will be recalled from the foregoing discussion in relation to theflowchart400 inFIG. 4, the inputs to theidentity authentication process414 are the provisional account details, and proof of identity data and/or documentation. Accordingly, thefirst step602 of theidentity authentication process414 is data capture of the proof of identity information. This step may typically involve manual checking of physical documentation provided by the prospective subscriber, such as a passport, driver's licence, birth certificate and/or other identifying information or documentation. It will be appreciated, however, that with suitable advances in technology the need for manual checking and data entry may be reduced or eliminated, as secure forms of electronic identification are increasingly developed and deployed. The identity data captured instep602 is stored in anidentity data record604.

Step606 represents a so-called “validation benchmark” process. The validation benchmark is some appropriate standard against which the persuasiveness of the proof of identity data or documentation may be measured, so as to provide a formal and uniform standard of proof of identity. As will be appreciated, the validation benchmark may be context dependent, and in particular may be different in different countries and/or legal jurisdictions. As a general rule, however, a suitable standard of proof of identity will depend upon the prospective subscriber providing at least one highly persuasive and trusted form of identification, which is necessarily difficult to falsify, with a common example of such identification being a passport. Typically, further information or documentation, perhaps having lower persuasive weight when considered individually, will also be required as a corroboration before the authenticity of the prospective subscriber's identity is established. Further documentation and/or information that would be considered acceptable includes driver's licence, birth certificate, healthcare card, bank account details, copies of residential utility bills and the like, as well as jurisdictionally-specific personal data such as a Social Security Number (US), or a Tax File Number (Australia), or the equivalent.

Without limitation, the Australian “100-point” validation benchmark is now described, by way of example. Under this system, primary forms of identification, allocated a point value of 70, includepassport610,birth certificate608, or alternatively a citizenship certificate or birth card (not shown). Only one of these may be provided as part of the 100-point validation benchmark. A contribution of 40 points may be accumulated by providing ahealthcare card612, or a suitable written reference, driver's licence, public service employee identification card, or tertiary education identification card (not shown). Various other types of corroborating identity information are ascribed lower point values. Overall, the prospective subscriber must provide identity data having a corresponding total point value exceeding 100 points.

Once thevalidation benchmark606 has been satisfied, there is provided adocumentation audit step614, which may consist, for example, of a random check of documentation provided by the prospective subscriber, as an additional degree of security against fraudulent applications and/or validation errors. Once the audit has been successfully completed, atdecision step618 the identity of the prospective subscriber will either be considered to have been validated, moving on to applicationidentity check step626, or an error in validation will be flagged atstep620. Theapplication identity check626 consists of the checking of theidentity data604 extracted from the proof of identity documentation, against theapplication data520 provided by the prospective subscriber in the application forms.Decision step628 controls the flow of the process depending upon the outcome of the application identity check, and if theapplication data520 andidentity data604 do not match, a validation error is once again flagged atstep620.

In the event of a failure of identity validation or application identity checking, atstep622 the data set is flagged, and all information is provisionally stored within aseparate store624 from the main account database. This enables the information associated with the rejected application to be retained for later review. For example, this information may be useful if it is subsequently decided that some action is necessary in relation to a suspected fraudulent activity, or simply if there has been an unintentional error in some part of the application and/or proof of identity data entry, so that the need to re-enter all data may be avoided in subsequent reprocessing of the applications.

If the check atdecision step628 is successful, then atsubsequent step630 the identity data is committed to astore632, associated with the provisional account.

FIG. 7 is a flowchart illustratingaccount creation422 according to a preferred embodiment of the invention. As will be appreciated from the foregoing description, the inputs to theaccount creation process422 are the provisional account details520, and the validated proof ofidentity data604. Atstep508 these are incorporated into the account framework, along with a unique customer identifier (UCID)704, which is generated using anappropriate algorithm702. It will be understood that a variety of different algorithms may be employed to generate and allocate a unique identifier to each subscriber. For example, a unique random number may be generated and allocated to each new subscriber. Alternatively, encoding and/or cryptographic techniques may be used to generate a unique subscriber identifier based upon various subscriber details held in theapplication data520 and/or theidentity data604. Still a further alternative is to construct a unique identifier from a combination, or concatenation, of subscriber details.

Following generation of the UCID, further reference identifiers are generated corresponding with various additional data structures associated with the subscriber within thedatabase114. These include anE-letterbox reference706 associated withE-Ietterbox data707 of the subscriber, aprofile reference708, associated withprofile data709 of the subscriber, and thetrust key304 which authorises service provider access to the subscriber's E-letterbox, as described above in relation toFIGS. 1 to 3.

Once theapplication data520,identity data604,UCID702, as well as theE-letterbox706,profile708 and trust key304, have all been created and incorporated into the account framework,account validation step710 is executed. The purpose ofaccount validation710 is to ensure the integrity and consistency of the user account data to be stored within the accounts database. In the event of an account validation failure, thedecision step712 directs control to step714, in which a validation error is flagged. At subsequent step716 a manual validation is conducted, in an attempt to establish the cause of the validation error, and to correct the problem, before returning control to theaccount validation step710.

Once validation is successful, atstep718 the completedaccount data720 is committed to the accounts database. The account is then ready for use by the subscriber.

As noted above, there is associated with the subscriber account anE-letterbox706, aprofile708, and atrust key304. TheE-letterbox706 has associateddata707, which includes essential mail items prepared for delivery to the subscriber. These may subsequently be collected by the subscriber, for example via a web-based interface, or via email, as previously described.

Essential mail items are delivered to theE-letterbox706 by nominated service providers of the subscriber. Following creation of the subscriber account, subscriber nominations may be submitted, for example once again via a web-based interface, and corresponding nominated service provider details are associated with the subscriber account, for example withinsubscriber profile708, and thetrust key304 is then provided, along with relevant further subscriber details, to the nominated service provider. Using the trust key, the nominated service provider is subsequently able to transfer essential mail data to thedelivery server102, for delivery to the subscriber'sE-letterbox706. The subscriber may at any time rescind nomination of a service provider, to prevent further delivery of essential mail items originating with that service provider. Additionally, it is possible to change thetrust key304, to deny all service providers holding the outdated trust key from further access to thesubscriber E-letterbox706. The updatedtrust key304 may subsequently be forwarded only to those service providers whose nominations are confirmed by the subscriber. As will be appreciated, the use of thetrust key304, along with associated subscriber nominations, therefore provides multiple levels of security upon the subscriber'sE-letterbox706. Preferably theE-letterbox reference706, theprofile reference708, and the trust key itself304, as well as associated subscriber information, are suitably protected, for example using 128 bit minimum encryption.

Thesubscriber profile reference708 is associated with additionalsubscriber profile data709. Various information regarding the subscriber, and their preferences, may be held within theprofile information709 associated with thesubscriber profile708. For example,profile information709 may include service provider nominations, subscriber delivery preferences, and preferences associated with theE-letterbox706, such as storage and archiving preferences associated with essential mail items. That is, in preferred embodiments the subscriber is provided with control over desired behaviour of theE-letterbox706. For example, a subscriber may wish to have all essential mail items retained within theE-letterbox706 before and after collection, be retained within the E-letterbox for a fixed period, and/or subsequently deleted or transferred to archival storage. All such operations, and such variations, additions and alternatives as will be apparent to persons skilled in the art, fall within the general scope of the invention.

As will be appreciated from the foregoing, additional functionality and benefits may be achieved via preferred embodiments of the invention. The provision of a secure E-letterbox, over which the subscriber is able to exercise a high level of control, including access control, may enable a range of additional services and benefits. For example, the subscriber may use the E-letterbox as a storage centre for financial statements, bills, receipts, as well as other valuable personal and lifestyle correspondence and information. Management functions may support the subscriber in maintaining, organising and archiving such documents and information. The contents of the E-letterbox, and archives thereof, may relate to personal and financial information, such as health, employment, income, expenditure, payments, receipts, and so forth, much of which may be required by the subscriber for various reporting purposes. It may therefore become possible, by providing appropriate linkages with relevant authorities and service providers, for the subscriber to directly utilise information held within the E-letterbox, and associated storage and/or archives, in order to simplify or expedite various common tasks. For example, the subscriber may eventually be able to satisfy at least a substantial proportion of the requirements associated with completing tax returns, loan applications, passport applications, applications for government benefits, and so forth, in an automated manner using details extracted from documents and information stored in the E-Ietterbox. Ultimately, the complete automation of some such tasks is conceivable.

FIGS. 8A,8B,8C and8D are flowcharts illustrating a number of exemplary alternative methods by which a trusted communications channel may be established between thedelivery server102 and a service provider, eg310, and whereby thedelivery server102 may subsequently receive essential mail data from theservice provider310.

FIG. 8A illustrates aprocess802 which provides a relatively high level of security, and which is based on the use of an SSH File Transfer Protocol (SFTP)803. Asuitable interface802a,such as a graphical interface, command line interface, or scripting interface, is provided which enables acorresponding address802bof a service provider computer system (eg an

Internet address) to be passed to an SFTPclient application program802c.TheSFTP protocol803 establishes a connection to anSFTP server application802dhosted on the service provider computer system. Alogin authentication process802eprovides thedelivery server102 with access to the service provider computer system, following which the essential mail data files may be located802f,and the essential mail data to be transferred802g.Thereafter, the connection is terminated by logging off802h.

FIG. 8B illustrates analternative process804, based upon the standard File Transfer Protocol (FTP)805. The overall connection and transfer process is identical to theSFTP process802, except that theFTP805 connection and transfer is facilitated by anFTP client application804con the delivery server side, and anFTP server application804don the service provider computer system side. As will be appreciated, the FTP-basedprocess804 provides a similar level of trust in the connection established between thedelivery server102 and the service provide computer system, since thedelivery server102 again initiates the connection using a known andtrusted address802bof the service provider computer system. However, whereas theSFTP protocol803 provides encryption of transmitted data, thebasic FTP protocol805 does not. Accordingly, theSFTP method802 is preferred, as providing a higher level of data security during transfer.

FIG. 8C illustrates athird transfer method806, based upon a serviceprovider web portal807. In themethod806, a web site (HTTP server)806cis provided by the service provider computer system. The resulting web interface may be accessed using aweb browser806a,or more generally any application including a suitable implementation of the HTTP protocol, and theweb site806cis identified by itscorresponding web address806b.As in the

processes

802,804, there may generally be provided a login/authentication step806d,afile location step806e,and a file transfer, or download, step806f,all of which will operate in accordance with the particular coding of the serviceprovider web site806c.Finally, the connection may be terminated by logging off806g.

FIG. 8D illustrates a further method for transferringessential mail data808, which is based upon an email protocol809 (such as SMTP). Theprocess808 differs from the

processes

802,804,806 in that it is initiated by the service provider computer system. According to themethod808, aninterface808a,such as a manual or automated email application interface, is used to generate anemail808bwhich is addressed to an email address associated with thedelivery server102. Anemail client application808cis utilised to send the resulting email, which may include essential mail data as an attachment, for example, via astandard email protocol809. This is received by anemail server808d,and transferred to a recipient in-box808e,from which it may be collected by, or on behalf of, thedelivery server102. Since email does not generally provide a trusted channel of communication, because originating email addresses are readily altered or tampered with, it is preferred that a trusted email-based channel be established utilising an additional security layer. For example, the essential mail data may be digitally signed utilising a private cryptographic key of the service provider, for which the corresponding public key has previously been forwarded to thedelivery server102 via a trusted and/or authenticated channel.

It will be appreciated that any of the

transfer methods

802,804,806,808 may be operated either in a fully automated manner, for example via suitable scripting, or may involve manual intervention. Transfer of essential mail data from various service providers, eg310,320,330 may be performed on a scheduled basis, or upon demand, for example by enabling the service providers to flag the availability of new essential mail data awaiting transfer. Furthermore, while the

methods

802,804,806 are all based upon initiation of a trusted communications channel by thedelivery server102, it will be appreciated that transfer of essential mail data on-demand by service providers may be achieved by allowing the service provider computer systems to initiate the connections. In this case, it is necessary, in order to establish a trusted communications channel, for thedelivery server102, or thefirewall107, to verify the identity of the computer system requesting the connection. As with theemail process808, such verification may be achieved utilising suitable cryptographic techniques, and alternatively, or additionally, via a login/password authentication method, or the like.

Additionally, various other protocols and methods for the transfer of essential mail data over a trusted communications channel between the

service providers

310,320,330 and thedelivery server102 may be utilised. These include the use of private lines, such as telephone lines, or various other forms of private connection, or virtual private connection, and a wide variety of suitable communications methods will be apparent to persons skilled in the relevant art, and should be understood as all falling within the scope of the present invention.

The invention is therefore not to be considered as in any way limited by the foregoing description of preferred embodiments, which are provided by way of example only, but rather the scope of the invention is defined by the claims appended hereto.