Abstract:
The present invention provides a communications client program and an associated transfer server for onymous and secure communications over the interne. The communications client program is used for electronically sending and receiving mail items and for conducting realtime audio and video communications in a secure manner. A mail item is any item of correspondence that bears an addressee&#39;s street address (i.e. number, street, suburb, state and post code) or an advertising item that does not necessarily bear an addressee, but includes nominations for preferred destinations.

Description:
FIELD OF INVENTION 
       [0001]    The present invention relates to a method, system and apparatus for providing a user identity authenticated communications client program for electronically sending and receiving mail items and for conducting real-time audio and video communications in a secure manner. The present invention includes a corresponding transfer server which facilitate the said communications. A mail item is any item of correspondence that bears an addressee&#39;s street address (i.e. number, street, suburb, state and post code) or an advertising item that does not necessarily bear an addressee, but includes nominations for preferred destinations. 
       BACKGROUND OF THE INVENTION 
       [0002]    The conventional postal system delivers street addressed mail items and “junk mail” advertising materials. Senders of mail items are not verified and receiver verification is inbuilt in that receivers of said mail items have to reside in the address to access the sent mail items. The only prerequisite the mail sender has to have is access to the addressee&#39;s postal address. This current mail system is in need of an electronic alternative to lift productivity levels, increase competition and add services that can only be delivered through an electronic platform. 
         [0003]    At present, the existing electronic alternatives, email and web spaces for mail storage (e.g. bank statements) has not provided a comprehensive solution, partly due to the essentially unauthenticated nature of email correspondence and the inconvenience of the latter. Forging an email address is trivial and therefore the integrity of the entire email system can be compromised. Identity authentication via digital certificates and secure transmission through encryption is available as an add-on service for email services which only partially solves the problem of secure and authenticated communications. Public key infrastructure (PKI) design requires that every email account holder has public keys corresponding to every other email account holder that they may like to communicate with, which severely limits the scalability of the authenticated email service as a public alternative. 
         [0004]    At the heart of internet communications lies a problem of authentication. The internet protocol (IP) addressing scheme does not include a default user authentication mechanism prior to accessing the internet. Web browsers access the internet using static and dynamic IP addresses. However, various organisations have adopted the PKI and use digital certificates signed by third party certificate authorities (CA) to identify themselves to users on the internet. Financial institutions use a digital certificate to confirm their identity to customers. What ensues is a one-way authenticated secure channel of communication. Authenticity and security are essential aspects that encourage participation in various activities including economic activities via the internet. So far most individuals who access the internet for communication purposes do not have an authenticated digital certificate that attest to individual or entity identity. 
         [0005]    Unsolicited “junk mail” which fills conventional mailboxes has a location specificity. For example, the “pizza restaurant specials leaflet” from the local pizza restaurant get sent to nearby street addresses. “Junk mail” is from organisations and businesses that hope to attract attention from a target market selected largely by geographic locality. At present, recipients of such mail items do not have an opportunity to pre-select areas of interests and the lack of correlation between advertisers intent and a customers interest result in an enormous waste of energy and resources. 
         [0006]    A comprehensive alternative approach for electronic delivery of location specific advertising items does not exist. Furthermore recipients of advertising mail items in existing platforms do not have a means of specifying their preferences. For example, recipients cannot specify that they may be interested in advertising material regarding local retail sales but not necessarily interested in local supermarket promotions. 
         [0007]    Voice and video communications over the internet such as services provided by “Skype” lacks user authentication prior to engagement. Apart from users who are part of a private network or a virtual private network, user authenticated secure channel for audio and video communications do not exist in the public domain. 
         [0008]    Accordingly, there is a need for a method and system for providing a secure and user identity authenticated communications service to overcome aforementioned problems and limitations. It is desirable to provide an integrated communications system where all participants are authenticated prior to engagement. Furthermore, it is desirable that the default addressing scheme be the street address scheme used by the postal services, which allows existing mail senders to use the electronic system using the information they already have. The use of street addresses also facilitate the required separation from existing email systems. It is also desirable for participants to be able to nominate areas of advertising interests or a lack thereof, enhancing the ability of advertisers to target advertising material with the establishment of a correlation between customer interest and advertiser intent. 
       SUMMARY OF THE INVENTION 
       [0009]    The present invention provides a system, method and apparatus for a user identity authenticated communications client program for secure and onymous electronic communications and a corresponding transfer server which facilitate the said communications. In the event that the communication is by mail, the method includes the steps of: 
         [0010]    providing a communications client program to authenticated participants to send and receive mail items; 
         [0011]    providing a transfer server having an associated database containing participants details;
       authenticated participant sender establishing a secure channel of communication with the transfer server;   authenticated participant sender sending an encrypted item of mail to an addressee bearing street address or in the case of an advertisement, target audience preferences;   the transfer server receiving the mail item;   the transfer server verifying the intended recipient is a participant;   the transfer server decrypting the message and encrypting the said message with recipient public key;   the transfer server storing the mail item in the recipient(s) mail folder for collection by the said recipient;   the authenticated participant recipient establishing a secure channel of communication with the transfer server;   the transfer server delivering the mail item to the recipients communications client program in electronic form;   the recipient communications client sending a message digest notification to the transfer server if required;   the recipient decrypting the mail item,
 
and in the event that the communication is either audio or video, the method includes the steps of:
   providing a communication client program to authenticated participants for audio and video communications;   providing a transfer server containing participant details;   authenticated participant initiator establishing a secure channel of communication with the transfer server;   authenticated participant initiator requesting a communication channel with an addressee from the transfer server;   the transfer server discovering whether the addressee is a participant and if indeed a participant whether the addressee is available for communications;   upon success, providing the initiator with the addressees IP address;   the initiator communications client program establishing a secure channel of communications with the addressee communications client program;   upon successful communication, terminating the established connection.   The invention provides a technical solution that parallels in many respects the conventional postal service albeit the solution is an electronic one. It uses the postal service street addressing scheme, which every individual and legal entity has an association with, as opposed to a system specific identifier or conventional email address. The method and system overcomes the postal services weaknesses by providing an advertising platform that accounts for customer interest or a lack thereof. Use of the conventional street addressing scheme also means that any user who participates in the system can send sender authenticated secure mail items to anyone who participates in the system, provided they know the receivers street address. Location specific messages and advertising messages can be sent by anyone on the system and the correlation between advertiser intent and customer interest is resolved at the transfer server. The method and system extends conventional postal services by providing audio and video channels for secure and authenticated communications.       
 
         [0031]    Furthermore, the invention significantly improves on the conventional email system. All participant identities are verified prior to engagement and mail items are encrypted preventing non-intended recipients from access. Default message digest notifications provide added certainty and security to the transferred mail items within the system. Integrity of the onymous communication system is robust in comparison with conventional email systems and thus provide a suitable digital alternative for secure communications in the public domain, which as of yet does not exist. 
         [0032]    Conventional postal operators mail boxes receive unsolicited mail items mainly from local entities. There is no method to correlate a mail box owners particular preferences in an area of advertising with an advertisers intent of attracting a potential customer. “Spam” mail on email systems have become the digital equivalent of “junk mail” and clutter email in-boxes. The invention improves significantly on existing practices by firstly eliciting participant preferences in the form of nominations of areas of interest and then by providing the opportunity for advertisers to simply send advertisements to the transfer server with target market descriptions and the transfer server matching participants nominations and forwarding mail items only to interested participants. In this respect participants have an added control in soliciting potentially interesting information and blocking unwanted material. 
         [0033]    Furthermore, the mail sending process is streamlined with electronic sending of mail items and thus mitigates the inconveniences of having to print, envelope, stamp and take the mail item to a collection location, significantly improving productivity and reducing carbon footprint. 
         [0034]    In accordance with the invention, the identity of participants is established and verified prior to participation. The method preferably includes a primary authentication process, which includes the steps of:
       the potential participant installing a communications client program on a PC or a suitable hand-held device e.g. PDA;   the transfer server receiving a participation application from the potential participant via the communications client program;   the participant request including participant information enabling the identity of the participant to be validated;   validating the identity of the participant using the participant information;   if validation is successful, accepting the participant request, creating a corresponding participant entry in the database, issuing a signed certificate and corresponding private key to the participant or otherwise rejecting the potential participant request.       
 
         [0040]    The primary authentication process is carried out by sending an “activation key” to the participant via conventional post services. This method confirms that the participant has access to the physical postal address and by association confirms the name address correlation. Secondary method of authentication includes the participant sending copies of original identity documents e.g. passport, drivers license or utility bills via the communications client program to the transfer server and manual or automated audit of the said documents at the transfer server. A tertiary method of authentication includes participant presenting original identity documents. e.g. passport, drivers license or utility bills to be verified, photocopied and sent to the transfer server at a nominated physical outlet (e.g. the local post office) by an attendee. Other methods of identity verification which are known to a person skilled in the relevant art may additionally be used. 
         [0041]    Subsequently, once the initial identity validation is successful, in accordance with the invention, the participant is issued with a private key and a corresponding CA signed digital certificate to persist the validity of identification. The transfer server acts as the certificate authority by issuing, signing and managing the associated public key infrastructure. The authentication mechanism goes further than a common digital certificate assignment. The three levels of authentication introduces extended levels of authentication reliability associated with the issued digital certificate in conjunction with the authentication levels recorded at the transfer server. Additional authentication is guaranteed by having the devise specific “activation key” presented with each connection to the transfer server. Even if the digital certificate is compromised, access to the transfer server is not granted unless the appropriate “activation key is presented. Additional functions carried out by the transfer server as the Certificate Authority is apparent to those skilled in the relevant art. 
         [0042]    The invention is advantageously able to substantially eliminate issues relating to security and identity in electronic mail transfer systems in the public domain. The invention provides an improved ability for individuals and entities to communicate over the internet onymously (identity verified). Law enforcement agencies and other governmental organisations may be able to communicate with the general public over the internet legally using the invention. A further outcome of onymous communications is the ability to integrate existing real-time communication methods including audio and video with the benefits of onyminity. 
         [0043]    Increased uptake of the invention is anticipated to reduce paper-based mail communications, which will result in reduced levels of resource consumption, increased productivity, increased local correspondences (location specific) and social, economic and environmental benefits that flow as a consequence. 
         [0044]    Government and non government organisations will have the ability to integrate location specific communications once the invention has a high level of participation. Early warning systems (e.g. flood and bush fire alerts) which essentially operate with a location specificity can integrate the invention to communicate with the intended audience effectively. Medical epidemic situations can be monitored more effectively by geographic region and vital information exchanged through the services provided the invention. 
         [0045]    It is preferred that the method be internet-based i.e. that the transfer server is provided having an internet connection such that participant activities can be executed via the internet. It is also preferred that the participant communication client program is provided having an internet connection to communicate with the transfer server. 
         [0046]    In accordance with a preferred embodiment of the invention, access to and from the transfer server for participants is provided via a stand-alone or an integrated communications client program installed by the participant. Participants cannot use any available web browser to access the transfer server. Participants can only use the communication client program installed in their respective device(s). Participants may install the communication client program on one or more devices that they wish to use as a gateway to the transfer server. For example, a participant may wish to install the communication client program on a PC and/or a hand-held device e.g. PDA. Both instances of the communication client program has to be registered with the transfer server prior to use. Once the identity validation of the participant is carried out successfully using the “activation key” which is delivered by conventional postal service to the participant, the specific instance of the communication client program is activated. The “activation key” is generated by the communication client program using a hardware specific identifier (e.g. MAC address in PCs, IMEI number in mobile devices) so as to prevent unauthorised use of the communication client program. Communication client program maybe stand alone or integrated with existing email client programs such as Microsoft Exchange or Apple Mail. The anticipated advantage of using a nominated point(s) of entry to the transfer server is that all participants are able to send and receive mail items securely without compromising the integrity of the system. A further anticipated advantage is the sense of security the participants feel having their important documents delivered to device(s) nominated by the said participant. The communication client program may act as a vault for documents. Participants may wish to store external documents in a folder on the mail client program which then may be synchronised with a web storage space on the transfer server. 
         [0047]    Access to the transfer server is initiated by participants both when receiving and sending mail items and message digest notifications, which is analogous to standard email client programs implementing POP or IMAP protocols. However when required, as is in the case when the transfer server queries a participant for audio/video communications availability, the transfer server may initiate contact with the participant. Firewalls and access control methods are implemented at the transfer server to restrict unauthorised access and to identify participants accessing the system. A “client-authenticated TLS and SSL handshake” may be initiated at participant login request. 
         [0048]    Access to the transfer server is provided through the installed communications client program and therefore correspondence is available from anywhere in the world as long as the participant has a registered device and an internet connection. 
         [0049]    The present invention provides a transfer server for the transfer of mail items to corresponding recipient(s) and for establishing a audio or video communication channel. The transfer server including: 
         [0050]    at least one processor; 
         [0051]    a database containing participant details including name and street address; 
         [0052]    a database containing participant public key; 
         [0053]    a database containing advertising category preference nominations; 
         [0054]    at least one data communications interface operatively coupled to the processor; 
         [0055]    at least one storage medium operatively coupled to the processor, the storage medium containing program instructions to execute the steps of: 
         [0056]    facilitating potential participant registration and activation process; 
         [0057]    facilitating the authenticated participant sender establish a secure channel of communication with the transfer server via the installed communications client program; 
         [0058]    the transfer server receiving an item of mail sent by the participant mail sender; 
         [0059]    the transfer server verifying the intended recipient is a participant; 
         [0060]    the transfer server decrypting the message and encrypting the sent message with recipient public key; 
         [0061]    the transfer server storing the mail item in the recipients secure mail folder for collection by the said recipient; 
         [0062]    facilitating the authenticated participant recipient establish a secure channel of communication with the transfer server; 
         [0063]    the transfer server delivering the mail item to the recipients communication client program in electronic form; 
         [0064]    the recipient communication client sending a message digest notification to the transfer server; 
         [0065]    the transfer server storing the message digest notification in the message senders mail folder for collection, 
         [0066]    and in the event a mail item is either an item of advertising or information: 
         [0067]    facilitating authenticated participant sender establish a secure channel of communication with the transfer server; 
         [0068]    the transfer server establishing a single participant or a group of participants who have subscribed to the category that the mail item belongs to and are within the locality that the sender of the said mail item has nominated; 
         [0069]    if the mail item is encrypted, decrypt the mail item and encrypt the mail item with the intended recipient(s) public key; 
         [0070]    the delivery server storing the mail item in the recipient(s) message folder(s); 
         [0071]    the recipient(s) establishing a secure communication channel with the transfer server; 
         [0072]    the transfer server delivering the mail item to the recipient(s) communication client program, 
         [0073]    and furthermore if the communication request is for an audio/video channel: 
         [0074]    authenticated participant initiator establishing a secure channel of communication with the transfer server; 
         [0075]    authenticated participant initiator requesting a communication channel with an addressee from the transfer server; 
         [0076]    the transfer server discovering whether the addressee is a participant and if indeed a participant whether the addressee is available for communications; 
         [0077]    upon success, providing the initiator with the addressees IP address; 
         [0078]    the initiator communications client program establishing a secure channel of communications with the addressee communications client program; 
         [0079]    upon successful communication, terminating the established connection. 
         [0080]    In another aspect, the present invention provides a transfer server with accordance with the invention, including: 
         [0081]    means for establishing a secure channel of communication with participants communication client programs; 
         [0082]    means for transferring mail items via the said communication channel; 
         [0083]    means for facilitating an audio/video communication channel. 
         [0084]    The transfer server preferably contains further programming instructions to execute the various functions of a certificate authority including key and certificate generation, certificate signing, certificate exchange management functions and other “CA” functions apparent to a person skilled in the relevant art. 
         [0085]    It is to be understood that the method is extensible to a large number of participants, accordingly the transfer server and the underlying infrastructure is extensible as apparent to persons skilled in the relevant art. 
         [0086]    The present invention provides a communication client program for participants to send and receive mail items and establish audio/video communication channel. The communication client program includes; 
         [0087]    program instructions to execute the steps of: 
         [0088]    the participant applying for registration and activation; 
         [0089]    the authenticated participant sender sending mail items securely; 
         [0090]    the authenticated participant receiving mail items securely; 
         [0091]    the authenticated participant decrypting and storing mail items. 
         [0092]    and in the event the communication is either audio or video: 
         [0093]    the authenticated participant requesting an audio/video communication channel; 
         [0094]    the authenticated participant establishing and using an audio/video communication channel with the addressee participant; 
         [0095]    According to the invention, the communication client program will comprise necessary means to execute the said operations. Instruction sets and device components that are apparent to persons skilled in the relevant art will additionally be used. 
         [0096]    The transfer server and the communication client program is preferably computer-implemented and the means for effecting functionality include suitable interface hardware at the server for interfacing to a communications network such as the internet and may further include one or more software components executed by at least one processor of the server computer including instructions to effect corresponding functionality. 
         [0097]    Further preferred features and advantages of the invention will be apparent to those skilled in the relevant art from the following description of preferred embodiments of the invention, which should not be considered to be limiting of the scope of the invention as detailed in the preceding statements or in the claims appended hereto. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0098]    The features of the invention will now be described referring to the accompanying drawings, wherein like reference numbers refer to like features, and in which: 
           [0099]      FIG. 1A  is a schematic diagram of a system electronically transferring an addressed mail item in accordance with a preferred embodiment of the invention; 
           [0100]      FIG. 1B  is a schematic diagram of a system electronically transferring an advertisement item to multiple recipients in accordance with a preferred embodiment of the invention; 
           [0101]      FIG. 1C  is a schematic diagram of a system with multiple participants; 
           [0102]      FIG. 1D  is a block diagram illustrating a transfer server and communication client program in an internet-based implementation of the system in  FIG. 1A  and  FIG. 1B ; 
           [0103]      FIG. 1E  is a schematic diagram of participants conducting real-time audio/video communications in accordance with a preferred embodiment of the invention; 
           [0104]      FIG. 2  is a flowchart illustrating steps in a method for electronically transferring mail items according to a preferred embodiment of the invention; 
           [0105]      FIG. 3  is a flowchart of an exemplary application and account creation process according to a preferred embodiment of the invention. 
           [0106]      FIG. 4  is a flowchart of an exemplary account registration initialisation process according to an embodiment of the invention. 
           [0107]      FIG. 5A  is a flowchart an exemplary primary method of identity authentication according to a preferred embodiment of the invention; 
           [0108]      FIG. 5B  is a flowchart of a secondary method of identity authentication according to a referred embodiment of the invention; 
           [0109]      FIG. 5C  is a flowchart of a tertiary method of identity authentication according to a preferred embodiment of the invention; 
           [0110]      FIG. 6  is a flowchart of the account creation process according to a preferred embodiment of the invention; 
           [0111]      FIG. 7A  is a flowchart of an address change process according to a preferred embodiment of the invention; 
           [0112]      FIG. 7B  is a flowchart of a device add process according to a preferred embodiment of the invention. 
           [0113]      FIG. 8A  is a flowchart of the mail sending process according to a preferred embodiment of the invention; 
           [0114]      FIG. 8B  is a flowchart of the mail receiving process according to a preferred embodiment of the invention; 
           [0115]      FIG. 8C  is a flowchart of establishing and conducting audio or video communications according to a preferred embodiment of the invention; 
       
    
    
     DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
       [0116]    According to a preferred embodiment of the present invention, here are provided methods and apparatus for providing a communications client program and an associated transfer server for onymous and secure communications. FIG.  1 A,  FIG. 1B  and  FIG. 1C  show schematic diagram of an exemplary system  100  for the transfer of mail items in accordance with the invention.  FIG. 1D  show an Internet implementation of a preferred embodiment of the system  100  through an exemplary block diagram illustrating specific component arrangements. 
         [0117]    The system  100  includes a transfer server  102  which in a preferred embodiment is a computer or computer system with one or more central processing units  122 , operatively coupled with a database  123 . The database  123  includes participant details and mail items as described in detail below. The transfer server  102  further includes at least one storage medium  120  with instruction code  121 , to be executed by the processor  122 . 
         [0118]    The transfer server additionally includes one or more network interfaces  124  to facilitate connection to the internet  80 . The network interface  124  may be any suitable interface such as Ethernet, ADSL or a wireless network interface. 
         [0119]    It is preferred that communications to and from the transfer server  102  be conducted via the firewall  125  to prevent unauthorised access to, or malicious attacks upon, the transfer server  102 . 
         [0120]    The system  100  includes communication client program  103  which in a preferred embodiment is a computer program which is implemented with one or more central processing units  128 , operatively coupled with storage medium  126  having instruction code  127  and a network interface  130 . 
         [0121]    Connection to the transfer server is facilitated via a participants communication client program instance. 
         [0122]    Logical connectivity between two participants is depicted in  FIG. 1A . Connectivity is available between participant  111  and the transfer server  102  for the sending of mail items and connectivity is available between transfer server  102  and the addressed mail recipient participant  112  for the collection of said mail item. 
         [0123]    Logical connectivity between participants when sending advertising mail items is depicted in  FIG. 1B . Connectivity is available between participant  111  and the transfer server  102  for the sending of advertising mail items and connectivity is available between participants  112 ,  113  and  114  and the transfer server  102  for the collection of said mail item. Assignment of the advertising mail item is conducted by reconciling participant advertising nominations with the “intended audience” selection of the sent advertising mail item. The “intended audience” selection is a category and geographic location selection. 
         [0124]    Logical connectivity between plurality of participants is facilitated via the transfer server  102 , as depicted in  FIG. 1C  in a preferred embodiment of the invention. 
         [0125]    All participants are able to send and receive mail items and advertising mail items. 
         [0126]    The purpose of the mail system is to provide one or more participants with a mail transfer service to send and receive mail items and advertising items in electronic form onymously, using a communications client program. A participant can send mail items to any other participant provided that the said participant has the street address of the intended participant recipient. It is a particular feature of the transfer system that participants nominate advertising interests and senders of advertising mail items nominate “intended audience” so that reconciliation of advertising mail receivers can be carried out at the transfer server  102 . Participant information including advertising nominations are not shared with third parties. 
         [0127]      FIG. 1E  depicts a real-time audio/video connection between two participants in accordance with the invention. A connection is established between participants  115  and  116  through the installed communications client program. Participant  115  queries the transfer server  102  for participant  116   s  availability and IP address. The transfer server  102  determines whether participant  116  is indeed a participant and if so whether participant  116  is available for communications by querying participant  116  with the last known IP address. If participant is available for communications, the relevant IP address is transmitted to the initiating participant  115 . Participant  115  can then establish an audio/video communication channel with participant  116 . 
         [0128]    With reference to  FIG. 2 , a flowchart illustrating essential steps of the onymous mail transfer service according to a preferred embodiment of the invention, participation is initiated at step  201  when the prospective participant installs a communication client program. At step  202 , the prospective participant makes an application to register with the transfer server. The process is described in detail below with reference to  FIGS. 3 ,  4  and  5 A. However in summary, the application includes applicants name, street address as well as other contact information. The application also includes an “activation key” which is a hash generated by the installed communication client program  103  using a device specific identity (e.g. MAC address on PCs or IMEI number on mobile devices). The “activation key” is generated and transferred to the transfer server unbeknownst to the participant. At step  203  the participant name and street address is verified by sending the “activation key” via the postal services to the prospective participants street address and then having the prospective participant enter the “activation key” through the communication client program  103  through to the transfer server  102 . The identity validation process  203  is described in detail below with reference to  FIGS. 5A and 5B . 
         [0129]    Once the identity validation carried out in step  203  is successfully processed, participant advertising nominations are obtained at step  204 . Advertising nominations are areas of interest that the participant may wish to receive advertising mail items about. For example, live music acts within a 5 km radius of the participant street address. An essential benefit of the invention is that participants can send/receive location specific advertisements cost-effectively because of the correlation provided by the mail transfer service. 
         [0130]    Participants may change their advertising nominations at any given time. 
         [0131]    At step  205  participant account is created. The process is described in detail below with reference to  FIG. 6 . As part of the account creation process, public key infrastructure components such as a key pair and digital certificate are generated at the transfer server  102  at step  206  and transferred to the participants mail access client program in order to persist the validated identity of the authenticated participant. Participant PKI components are managed by the transfer server  102  and the communication client program  103 , participants are not actively involved in the process. This automation is for the ease and benefit of participants. A copy of participant private key may be stored in an external database as back up and may be requested by the account holder participant or relevant law enforcement authorities. 
         [0132]    At step  207 , the participant creates mail items addressed to a particular participant. For example a participant utility company may create, address and send a monthly bill to a participant customer in electronic form. Advertising mail items with “intended audience” specifications can also be created according to a preferred embodiment of the invention. For example, a participant may send out an invitation to nearby resident book lovers to form a book club. Addressed mail items include a message digest notification request to establish non-repudiation claim. However the request for a message digest notification may be omitted by the mail sender. 
         [0133]    In accordance with the invention, a mail item is any item of traditional post mail converted to electronic form in any file format inclusive of but not limited to, plain text, PDF, XML for text and/or GIF and JPEG for image. Additionally in accordance with the invention, a mail item is an audio or video message in electronic form in any file format including but not limited to, mop, wma or au for audio and swf, wmv and mpg for video. 
         [0134]    A secure connection is established at step  208  with the transfer server  102  for the purposes of forwarding the mail item(s) created in step  207 . A “client-authenticated SSL connection” is an exemplary implementation of a secure connection according to a preferred embodiment of the invention. Additionally, the “activation key” is requested by the transfer server  102  when establishing a secure connection with the transfer server  102  as an additional safety measure to verify the device making the request. Mail items are encrypted using a combination of hashing, data compression, symmetric-key cryptography and public-key cryptography. Step  208  is described in detail below with reference to  FIG. 8A . 
         [0135]    At step  209 , the sent mail items are verified for address validity. If the addressee of the said mail item is not a participant of the onymous mail transfer service, a notice is sent back to the mail sender. Additionally, access is provided for government organisations to send mail items to all participants in any area. Authority levels are described in detail below with reference to  FIG. 6 . Participant individuals and businesses are bound by participant advertising nominations as described in step  204  and cannot send mail items to all participants. 
         [0136]    Sent Mail items are sorted by the transfer server  102  and stored on recipient(s) mail folders to be collected by the said recipients at step  210 . Name and Street Address is used as the default addressing regime as opposed to email address, IP address or system specific unique identifier. Advertising mail items are addressed by category and geographic locality and reconciliation with participant specific street addresses is carried at step  210 . Advertising categorisation and the provision of the service is aimed at exposing participants to various products, services, events and functions that may spark a potential interest. 
         [0137]    At step  211 , the participant recipient(s) of the sent mail item establishes a secure connection to the transfer server  102  as described in step  208  above and the sent mail item is transferred to the recipient(s) communications client program. Participants may connect to the transfer server periodically to check mail or they may establish a persistent connection to the transfer server  102  and query the server for new mail items intermittently according to a preferred embodiment of the invention. 
         [0138]    The onymous mail transfer system additionally provides for a massage digest notification to be transmitted at step  212 . The message digest notification (MDN) is requested at step  207  when mail items are sent and the generated MDN is deposited at the transfer server in the mail senders folder for collection by the said sender. 
         [0139]    While the foregoing description with reference to  FIG. 1A ,  1 B,  1 D and  FIG. 2  illustrate the operation of system  100 , transfer server  102  and mail access client program  102  from the perspective of a single participant, it will be appreciated that this is exemplary only of the general operation of system  100 , the transfer server  102  and the mail access client program, which provide a service for onymous transfer of mail items to and from a plurality of participants as illustrated in  FIG. 1C . 
         [0140]      FIG. 3  is a flowchart  300  of an exemplary mail client installation, application and account creation process according to a preferred embodiment of the invention. At step  301 , a potential participant installs a communications client program and at step  202  submits an application for registration with the transfer server. The application structure is described in detail below with reference to  FIG. 4 . At step  302 , the accounts database is queried for existing accounts and cross-referenced with the applicant details to determine whether an account already exists. As is illustrated at step  304 , if an account already exists, an account exist notification  305  is generated and the process is terminated at step  306 . 
         [0141]    Given that the application is for a new account, registration initialisation is carried out at step  307 , which is described in detail below with reference to  FIG. 4 . Identity authentication is of significant importance in a preferred embodiment of the invention. Primary identity authentication is carried out at step  308  by sending the “activation key” by conventional post services to the applicant and having the said applicant input the “activation key” with an activation request via the communications client program to the transfer server. The applicants access to the post address confirms the name and street address of the said applicant with the minimum of inconvenience to the applicant. Failure of the identification process leads to a failure notification at step  309  and process termination at step  306 . Successful identity authentication leads to the account creation process at step  312 . The primary identity authentication method is detailed below with reference to  FIG. 5A . 
         [0142]    Secondary and tertiary authentication carried out at steps  310  and  311  are progressively stringent measures to validate the identity of a participant. Secondary and tertiary authentication methods are detailed below with reference to  FIGS. 5B and 5C  respectively. These additional levels of authentication makes the onymous mail transfer service, according to the invention, more scalable and provides different degrees of authentication rigour for specific activities. For example, it is plausible to envisage an electronic voting system implemented via the onymous mail transfer service, where tertiary authentication is mandated by the respective government. 
         [0143]    The account creation at step  312  follows the successful primary identity authentication process at step  308 , in which an account is created as described below in detail with reference to  FIG. 6 , and persisted in the accounts database at  303 . 
         [0144]    At step  313 , private key and corresponding signed digital certificate is transferred to the applicants communications client program using the secure connection established to activate the user account. Alternatively, the key pair and the digital certificate may be generated at the communications client program and the digital certificate forwarded to the transfer server to be signed by the transfer server as the certificate authority. According to a preferred embodiment of the invention, the transfer server performs the functions of a conventional certificate authority by issuing signed digital certificates to participants in the onymous mail transfer system. In addition to traditional functions carried out by a certificate authority, the transfer server also generates the key pair and forward the private key to the applicant in step  313 . 
         [0145]    According to a preferred embodiment of the invention, participants communications client program acts as the gateway to onymous and secure communications via the Internet. Apart from sending and receiving discrete mail items, the communications client program is used as the point of authentication for real-time, onymous and secure audio and video communications. 
         [0146]      FIG. 4  is a flowchart showing further details of a preferred embodiment of the registration initialisation process  307 . According to the embodiment, the application is submitted through the installed communications client program via the internet through to the transfer server. The application must meet the minimum requirements  405 . It must include the applicants full name  411 , street address  412  and the generated “activation key”  413 . The “activation key” is generated by the mail access client program using a hardware specific identifier such as the MAC address o PCs or IMEI number on mobile devises and a suitable cryptographic algorithm. The purpose of the “activation key” is to restrict unauthorised communications client program installations as well as to identify specific instance of a mail client program independent of the associated digital certificate so as to corroborate the devise that is used to access the transfer server with the associated digital certificate. In the unlikely event that the participants mail access device (eg PC or PDA) is compromised and digital certificate stolen, the attacker still needs to generate the “activation key” to establish a connection with the transfer server. The “activation key” is generated and transferred unbeknownst to the applicant. 
         [0147]    At step  408 , the provided street address is validated against existing street addresses available in a specific region through third party providers and if the address is invalid, invalid address notice is generated and the application rejected at step  404 . Once the minimum requirements are met at step  403 , a key pair and the corresponding digital certificate is generated at step  406  and stored in a provisional account store at step  407 . 
         [0148]      FIG. 5A  is a flowchart showing further details of a preferred embodiment of the primary identity authentication process  308 . Accordingly, the “activation key” received in with the application is sent to the applicant via the postal services at step  502 . At step  503  the applicant inputs the received “activation key” via the mail access client program through to the transfer server in the activation request confirming that the applicant has access to the physical mail box and therefore by association bears the name and resides at the street address. 
         [0149]    At step  504 , the information received with the activation request is compared against entries in the provisional account store and if the information does not corroborate at step  505  a validation error message is generated at step  506  and application rejected at step  404 . Successful primary identity authentication at step  504  leads to persisting the identity data at step  508 . 
         [0150]      FIG. 5B  is a flowchart showing further details of a preferred embodiment of the secondary identity authentication process  310 . According to the embodiment, captured identity data is presented to the transfer server via the communications client program at step  520 . By way of document example, passport  521  and utility bill  521  is shown for individuals, and company registration documents  522  for companies. The examples are in no way limiting the scope of identity verification but rather an example to illustrate the process of secondary and tertiary authentication. The validation benchmark at step  523  provides the specific document requirements and this may vary from region to region and country to country. The validation benchmark is some appropriate standard against which the persuasiveness of the proof of identity data or documentation may be measured, so as to provide a formal and uniform standard of proof of identity. 
         [0151]    At step  524 , a document audit is carried out either manually or electronically to establish the authenticity of the documents and the information they contain. The information is compared with persisted identity data at  508 . Failure of the audit process results in rejecting the secondary authentication request in step  525 . Successful audit of the captured identity data leads to step  526 , where the secondary authentication data is persisted as identity data and a corresponding clearance level assigned at the accounts database. 
         [0152]      FIG. 5C  is a flowchart showing further details of a preferred embodiment of the tertiary identity authentication process  311 . According to the embodiment, original authentication documents are presented at a nominated centre or outlet (e.g the post office). By way of document example, passport  521  and utility bill  521  is shown for individuals, and company registration documents  522  for companies. The examples are in no way limiting the scope of identity verification but rather an example to illustrate the process of tertiary authentication. The validation benchmark at step  531  provides the specific document requirements and this may vary from region to region and country to country. The validation benchmark is some appropriate standard against which the persuasiveness of the proof of identity data or documentation may be measured, so as to provide a formal and uniform standard of proof of identity. 
         [0153]    At step  532 , a manual document audit is carried out by the outlet representative and a successful audit leads to step  534 , where the authenticated identification data is logged to the transfer server through a secure connection, to be persisted as identity data and a corresponding clearance level assigned at the accounts database. Failure of documentation audit leads to step  533 , where the tertiary authentication is rejected. 
         [0154]      FIG. 6  is a flowchart showing further details of a preferred embodiment of the account creation process  312 . According to the invention, inputs to the account creation process  312  are data from the provisional account store  407  and data from the identity data store  508 . The account framework incorporates division of functionality and employs different data structures to implement the required functionality. At step  611 , the generated digital certificate is signed by the transfer server acting as the certificate authority and stored along with other PKI data at step  602  and a copy to be transferred to the participant following the account creation process as described above in step  313  with reference to  FIG. 3 . Additionally, a copy of the private key is persisted in an external database  612  for situations where the private key is lost or destroyed due to some unforeseen reason and needs to be replaced. 
         [0155]    At step  602 , identity data is collated with PKI information to form the identification description. Without limitation, the identification description includes participant name, street address, “activation key” and participants public-key. 
         [0156]    Secondary and tertiary authentications are persisted through security clearance levels as depicted in step  607 . Without limitation, clearance levels 1, 2 and 3 correspond with primary, secondary and tertiary levels of authentication. An additional level 4 clearance is provided for various government organisations and law enforcement agencies to communicate with participants without restrictions. 
         [0157]    At step  603 , secure mail folder is created where all addressed mail items are deposited, awaiting collection by the account holder. The addressed mail items may be encrypted before storage with the account holders public-key. Advertising nominations folders are generated at step  605  to store advertising mail items received by the account holder participant. A clear distinction is enforced by the onymous mail transfer service to separate addressed mail items from advertising mail items at the mail creation process where the mail sender is explicitly required to declare advertisements. Non-compliance may result in restrictions being imposed upon the offending participants. Advertising nominations may be changed any time according to the wishes of the account holder participant. 
         [0158]    Additionally, a synchronised folder is created at step  609  to facilitate files and folder storage on the transfer server as an online back-up storage for the account holder. The participant may wish to store documents such as receipts, resumes, photocopys of important identity documents and so forth. 
         [0159]    At step  610 , the generated account structure is persisted to the accounts database  303 . 
         [0160]      FIG. 7A  is a flowchart showing details of a preferred embodiment of the address change request process  701 . When participants change their permanent address, an accompanying address change request is to be lodged with the transfer server via the communications client program. At step  308 , primary identity authentication is carried out as described above with reference to  FIG. 5A  to verify the new address proposed by the participant. Failure of the identity authentication process results in a request rejection at step  702 . Following successful identity authentication, the accounts database  303  is updated at step  703 . 
         [0161]      FIG. 7B  is a flowchart showing details of a preferred embodiment of the add device to account request process. If participants wish to add an additional access device with a communications client installed, a request is send through the mail access client program to the transfer server. At step  308 , primary identity authentication is carried out as described above with reference to  FIG. 5A  to verify that the participant has access to the proposed device as well as the street address. Following successful identity authentication the device is added to the account and the accounts database  303  is, updated at step  713 . 
         [0162]      FIG. 8A  is a flowchart showing details of the mail sending process according to a preferred embodiment of the invention. At step  802  mail items are created and at steps between  803  and  804  a secure IP connection is established with the transfer server using, without limitation, HTTP(S), (S)FTP or secure SMTP protocols. The communications client program initiates the connection. Two-way client-authenticated SSL connection is used as a preferred method for the secure connection. At step  805  login authentication is carried out by the transfer server using the participant digital certificate and the device specific “activation key”. It must be noted that steps  802 - 805  are interconnected steps that enable secure sending of mail items. Mail items are encrypted using a combination of hashing, data compression, symmetric-key cryptography and public-key cryptography. Additional methods that are evident to a person skilled in the relevant art may be used. At step  806 , the transfer server processes the sent mail item(s) and deposits them in the relevant folders of the intended recipient(s) and the mail sender logs off at step  807 . 
         [0163]      FIG. 8B  is a flowchart showing details of the mail collection process according to a preferred embodiment of the invention. Steps  803 - 805  are as described above with reference to  FIG. 8A . At step  808 , the transfer server obtains new mail items from the participants relevant folders and at step  809  mail items are transferred to the participants communications client program where the mail items are processed and decrypted and a message digest notification transferred back to the transfer server if required. 
         [0164]    The real-time audio and video communications process is illustrated in  FIG. 8C , in accordance with a preferred embodiment of the invention. The communications client program makes a connection request with an addressee  822 . Steps  803 - 805  are described above in detail with reference to  FIG. 8A . At step  823 , the transfer server queries the accounts database to verify that the addressee is indeed a participant and if so queries the addressee  82 . 2  using the last known IP address for availability. Upon success, the addressees IP address is transferred to the initiator client. At step  825  a secure connection is established for real-time audio and video communications using methods and protocols apparent to a person skilled in the relevant art. 
         [0165]    The invention is not to be considered as any way limited by the foregoing descriptions of preferred embodiments, which are provided by way of example, but rather the scope of the invention is defined by the claims appended.