Manual E-bill 499.41

11.2.5 E-finance online view (outgoing delivery)
Unsigned bills can be viewed and processed in the respective e-finance
application. For a detailed description of these functions please refer
to section 13.2.
11.2.6 AS2 (outgoing delivery)
Specific delivery channel for bills in EDIFACT format.
11.2.7 E-mail (outgoing delivery)
Registration and cancellation data and processing logs can be delivered
to the biller by e-mail.
11.2.8 Archive-disk (output)
Digitally signed bills can be sent to billers and bill recipients on an archivedisk
(see sections 4.9 and 6.1), provided they are not received via a different
channel.
The archive-disk contains the following:
• Data as originally delivered (only biller)
• Digitally signed bills in delivery format incl. signature check report
• Bill details in PDF format (unsigned)
The archive-disk will be sent by registered mail. Upon receipt, the biller
must check the legibility of the data stored on the archive-disk. Any errors
must be reported in writing to PostFinance within 30 days. After expiry
of this period, the data will be deemed to be legible. The data can then be
deleted by PostFinance in accordance with section 5.7.4.
11.3 Data security
Unless otherwise agreed, either https or SFTP is used for transport
encryption. For data encryption, a suitable encryption method (e. g. PGP)
may be used, with the agreement of PostFinance. These details can be
defined by both parties when the service is activated.
The security standards for data provision correspond to the requirements
for e-banking and other web applications.
Data from the business interface are always transmitted via an https
connection. The login is protected by the username and password security
elements. The security standards for the web services are based on the
OASIS WS-Security recommendations. Details of this are provided in the
web services implementation instructions (see section 11.2.2).
For PostFinance e-finance, users log on using their e-finance security
elements. Data encryption using 128-bit SSL is guaranteed.
Please note that the use of hyperlinks out of the secure environment of
a web application is subject to general security provisions. Restrictions also
apply when calling up the registration or cancellation form or for the bill
presentment module (see sections 7.3 and 8).
Manual E-bill Version October 2010 42/64