Electronic PostMark (EPM) Security & Authentication for eTrade Documents (UNeDocs)

1. Capacity Building on Trade Facilitation Electronic PostMark (EPM) Security & Authentication for eTrade Documents (UNeDocs) Paul Donohoe eBusiness Programme Manager Universal Postal Union (UPU)

2. UPU Overview • UPU is a specialised UN Agency - Postal • 191 countries • Regulators – Ministry of Post and Telecoms • Operators – Postal Administrations • eg. Swiss Post. • 700,000 postal outlets globally • Posts provide • Financial Services • Logistics Services • Communication Services • Identity Services • All of these are being e-enabled • Posts have Universal Service Obligations • Support the right to communicate for all citizens of the world

3. What is EPM • The electronic equivalent of the physical post mark • Fundamentally a non-repudiation service supporting • Digital signature verification • Timestamping of successfully verified signatures • Encryption • Storage and archival of all non-repudiation evidence data required to support subsequent challenges • Legislative protection (ie. as for physical mail)

5. Date &Time Digital PostMark ID Number Signature scan

6. What is EPM • What document was signed • When the document was signed • Who signed the document • Why the document was Signed • E-Sign legislation compliant declaration of intent • I am signing this document because (pick one): • I Agree with the terms of the document • I Disagree with the terms of the documents • I am the Author of the documents • I am a Reviewer of the document…

7. EPM - Adding value to electronic trade • Identity Management • Authentication • Document Integrity • Non-repudiation • Globally Trusted Third Party • Physical and electronic validity

8. Electronic Post Mark (ePM) Strategy • ePM will be a global “optional post service” in 2006 • Which Posts operate ePM services? • Canada Post, United States Postal Service • Portugal Post, Post Italiene, La Post France • Deutsche Post Germany • Pilots • Africa: Sth Africa • Asia Pacific: Australia, Hong Kong, New Zealand (UNeDOCS) • Europe: Netherlands, Poland • Middle East: Egypt, Tunisia • Americas: Brazil

9. How is EPM being used? • Example of EPM services • Certified email • Portugal, Italy • Registered email • France • Transaction/Document authentication services • USPS, Canada

10. The Logo of the individual Post

11. The CPC Logo

22. Business Partnership Model • Postal Industry (UPU) will have a world wide network of EPM providers • All identified and linked via web services under “www.….post” • UPU will establish global PKI infrastructure coverage as Trusted Third Party Industry • Postal Administrations will issue Electronic Post Marks and provide the non repudiation service • Hybrid Processes for International Trade (both electronic and paper) via UNeDOCS • Providing the bridge between online and offline; electronic and paper

23. Conclusion • Posts are very busy building the digital evidentiary services required by the Information Society • Electronic PostMark • Identity Management • In all continents of the world • Postal Industry Standards and Policies in place for global interoperability • Support from major Software vendors • Investing resources in the UNeDOCS initiative • Local Posts are willing to pilot UNeDOCS projects with interested parties involved in International Trade

24. Thank you - Paul Donohoe eBusiness Programme Manager, Universal Postal Union Switzerland paul.donohoe@upu.int +41 31 350 3450