Abstract: In a secure cryptographic environment, a private key in a private/public key cryptographic scheme needs to be backed up and recovered in case of a loss or corruption of the private key. To back up the private key, multiple key segments are generated based on the private key which are distributed to a corresponding number of trusted individuals, each of whom has knowledge of only his or her key segment. The key can be restored only when all of the trusted individuals provide the respective key segments, based on which the original private key is reconstructed. In addition, each trusted individual is uniquely identifiable by a personal identification number. Advantageously, the private key which is secret can be backed up and restored without any individual having knowledge of the full key.

Abstract: In a mailing system for franking a postage indicium serving as a proof of postage, postal data including the postage needs to be communicated through such an indicium. Illustratively, the postal data is categorized into (a) invariable postal data, e.g, a device ID identifying the mailing system, which is unaffected by a franking transaction, and (b) variable postal data, e.g., the postage, which may change from one franking transaction to another. To avoid latency of the franking operation, the invariable postal data is preset for initial printing of the postage indicium, and the variable postal data is determined and set for printing in real time. In printing the postage indicium, the invariable postal data and the variable postal data are presented in that order in one or more symbols.

Abstract: In a postage payment system, a secure integrated circuit (IC) card is used to manage postage funds, and created encrypted postage indicia. Among other things, the system is capable of performing charge-back accounting of postage expenses and generating mail contents. In accordance with an aspect of the invention, the postage indicia are applied onto selected locations of the mail contents while they are being generated. In the preferred embodiment, each mail content is placed in a window envelope such that the postage indicium on the mail content exposes through a window of the envelope to facilitate inspection of the indicium. In accordance with another aspect of the invention, by including transactional data in addition to the traditional postal data in a postage indicium, the indicium can be used to pay bills, purchase products and services, including any courier service different than the postal service.

Abstract: A method for securely generating a PIN comprises generating a number of random binary bits; determining the least significant bits of the number of bits; converting the least significant bits to a decimal integer; shifting the value of the integer by a predetermined constant to produce a shifted integer; and encoding the shifted integer as bits in a PIN block in accordance with a standard. A method for managing security of a PIN used to provide access to a secure device comprising choosing the PIN; storing an encrypted version of the PIN in the device; and communicating the PIN to a user of the device via a communication channel separate and apart from a channel reset to provide the device to the user.

Abstract: A system for authenticating items includes: a processing unit for generating indicia for imprints to be applied to items and authenticating imprints applied to items, each indicium including a cryptographically encoded component; at least one item printing station for printing imprints on items as generated by the processing unit; and at least one item presentation station to which items are presented in authenticating the same. The item presentation station is configured to transmit data relating to the indicium on an item presented thereto to the processing unit, and to receive an authentication message in dependence upon whether the indicium is determined to be valid or invalid.

Abstract: A method of securely updating software in a remote device includes copying selected portions of program code in the remote device to a memory, downloading software to the remote device, and upon detecting an unsuccessful download, reinstalling the selected portions of program code.

Abstract: After a processor-controlled system having communications capabilities is delivered to a user in its generic configuration, customization of the system is realized in accordance with the invention by downloading thereto selected information objects, e.g., software components and/or data, from a server. To avoid unauthorized downloading of the selected information objects, certain information in a request for the objects by the system to the server is encrypted and/or cryptographically signed. Such information may be, e.g., a serial number identifying the system. If the server succeeds in decrypting the encrypted information and/or authenticating the digital signature, and thereby verifies the identity and legitimacy of the system, the server downloads the selected information objects to realize the customization.

Abstract: In a postage payment system, a secure integrated circuit (IC) card is used to manage postage funds, and created encrypted postage indicia. Among other things, the system is capable of performing charge-back accounting of postage expenses and generating mail contents. In accordance with an aspect of the invention, the postage indicia are applied onto selected locations of the mail contents while they are being generated. In the preferred embodiment, each mail content is placed in a window envelope such that the postage indicium on the mail content exposes through a window of the envelope to facilitate inspection of the indicium. In accordance with another aspect of the invention, by including transactional data in addition to the traditional postal data in a postage indicium, the indicium can be used to pay bills, purchase products and services, including any courier service different than the postal service.

Abstract: In a postage payment system, a secure integrated circuit (IC) card is used to manage postage funds, and create encrypted postage indicia. Among other things, the system is capable of performing charge-back accounting of postage expenses and generating mail contents. In accordance with an aspect of the invention, the postage indicia are applied onto selected locations of the mail contents while they are being generated. In the preferred embodiment, each mail content is placed in a window envelope such that the postage indicium on the mail content exposes through a window of the envelope to facilitate inspection of the indicium. In accordance with another aspect of the invention, by including transactional data in addition to the traditional postal data in a postage indicium, the indicium can be used to pay bills, purchase products and services, including any courier service different than the postal service.

Abstract: In an arrangement for accounting for consumption of a resource, e.g., utilization of a postal service or utilities, a data center (503, 803) periodically communicates with multiple franking systems (100, 505-1, 505-2, 505-n) dispensing postage for the postal service utilization. The data center (503, 803) receives transaction records (301, 303, 305, 307, 309), where a transaction record (301, 303, 305, 307, 309) is associated with each transaction performed by the franking system (100, 505-1, 505-2, 505-n) in each period. Each record (301, 303, 305, 307, 309) includes at least the postage dispensed (305) in the associated franking transaction, and an ascending register value (307) indicating the cumulative postage dispensed. Using the received records (301, 303, 305, 307, 309), the data center (503, 803) assesses the charges during the period and causes assessed charges to be charged to an account associated with the franking system (100, 505-1, 505-2, 505-n).

Abstract: A method of downloading information to an indicia marking device includes generating a request for information for the device, providing a description of the information to the device in response to the request, confirming the request based on the description, and providing the requested information upon recognizing the confirmation. The method also includes providing an authorization code to the device, and utilizing the authorization code to install files associated with the information. The method further includes establishing a real time connection between a first computer and the device through a second computer, and providing files associated with the information through the real time connection. The method still further includes retrieving files and storing files associated with the information, and providing the files to the device during a next occurring communication.

Abstract: In e-commerce, customers conduct transactions with merchant servers on the Internet, which are associated with different merchants. A financial data center is established to handle the finance attendant to the online transactions, in accordance with an inventive financial service. Each merchant participating in the inventive financial service maintains a merchant account in the financial data center. Similarly, each customer subscribing to the inventive financial service maintains a user account in the financial data center. In conducting an online transaction, after a customer makes a purchase from a merchant server, the merchant server communicates purchase information to the financial data center. In response, the financial data center identifies the corresponding user and merchant accounts. Upon receiving an affirmation of the purchase from the customer, the financial data center transfers the purchase amount from the user account to the merchant account to complete the online transaction.

Abstract: In a mailing system for franking a postage indicium serving as a proof of postage, postal data including the postage needs to be communicated through such an indicium. Illustratively, the postal data is categorized into (a) invariable postal data, e.g., a device ID identifying the mailing system, which is unaffected by a franking transaction, and (b) variable postal data, e.g., the postage, which may change from one franking transaction to another. To avoid latency of the franking operation, the invariable postal data is preset for initial printing of the postage indicium, and the variable postal data is determined and set for printing in real time. In printing the postage indicium the invariable postal data and the variable postal data are presented in that order in one or more symbols.

Abstract: In a postage payment system, a secure integrated circuit (IC) card is used to manage postage funds, and created encrypted postage indicia. Among other things, the system is capable of performing charge-back accounting of postage expenses and generating mail contents. In accordance with an aspect of the invention, the postage indicia are applied onto selected locations of the mail contents while they are being generated. In the preferred embodiment, each mail content is placed in a window envelope such that the postage indicium on the mail content exposes through a window of the envelope to facilitate inspection of the indicium. In accordance with another aspect of the invention, by including transactional data in addition to the traditional postal data in a postage indicium, the indicium can be used to pay bills, purchase products and services, including any courier service different than the postal service.

Abstract: In e-commerce, customers conduct transactions with merchant servers on the Internet, which are associated with different merchants. A financial data center is established to handle the finance attendant to the online transactions, in accordance with an inventive financial service. Each merchant participating in the inventive financial service maintains a merchant account in the financial data center. Similarly, each customer subscribing to the inventive financial service maintains a user account in the financial data center. In conducting an online transaction, after a customer makes a purchase from a merchant server, the merchant server communicates purchase information to the financial data center. In response, the financial data center identifies the corresponding user and merchant accounts. Upon receiving an affirmation of the purchase from the customer, the financial data center transfers the purchase amount from the user account to the merchant account to complete the online transaction.

Abstract: A method for operating a device, a device, and an arrangement including the device, for the secure storage of funds comprising interfacing the device with a system; transmitting from the device to the system a present location of the device; comparing in a database associated with the system the present location of the device with a previously stored location; and transmitting to the device from the system an authorization to utilize the funds only if the present location is within a predetermined region associated with the previously stored location. The authorization is transmitted only if the present location matches the previously stored location. Generally, the device is licensed for use at the previously stored location, and if the comparing indicates that the device is not in the predetermined region, the system issues a new license for a region associated with the present location of the device.

Abstract: A system for controlling the validity of printing of indicias on mailpieces from a potentially large number of users of postage meters includes apparatus disposed in each said postage meter for generating a code and for printing the code on each mailpiece. The code is an encrypted code representative of the postage meter apparatus printing the indicia and other information uniquely determinative of the legitimacy of postage on the mailpieces. The keys for the code generating apparatus are changed to change its code generation at predetermined time intervals in each of the meters. A security center includes apparatus for maintaining a security code database and for keeping track of the keys for generating security codes in correspondence with the changes in each generating apparatus and the information printed on the mailpiece by the postage meter apparatus for comparison with the code printed on the mailpiece.

Abstract: The postage metering system includes a postage meter in bus communication with an external interface unit. The postage meter operates under the control of a programmable micro control system which is responsive to a number of postage meter program routines stored in the program memory of the meter micro control system. The postage meter also includes a principal communication port in bus communication with the micro control system and a keyboard also in bus communication with the meter micro control system for providing operator instruction to the micro control system. An external interface unit which includes a micro control system responsive to one or more of a program routines stored in the program memory of the external interface unit. The external interface further includes a postage meter port and a plurality communication ports. The postage meter port of the external interface unit is in bus communication with the principal communication port of the postage meter.

Abstract: A system for controlling the validity of printing of indicias on mailpieces from a potentially large number of users of postage meters includes apparatus disposed in each said postage meter for generating a code and for printing the code on each mailpiece. The code is an encrypted code representative of the postage meter apparatus printing the indicia and other information uniquely determinative of the legitimacy of postage on the mailpieces. The keys for the code generating apparatus are changed to change its code generation at predetermined time intervals in each of the meters. A security center includes apparatus for maintaining a security code database and for keeping track of the keys for generating security codes in correspondence with the changes in each generating apparatus and the information printed on the mailpiece by the postage meter apparatus for comparison with the code printed on the mailpiece.

Abstract: An apparatus and method is disclosed for controlling the operation of a mailing machine having a postage meter which includes a thermal printer which transfers wax ink from an ink ribbon to an envelope being fed through the mailing machine, in such a way that the printer cannot operate if the envelope is not is a proper position in the mailing machine to completely cover a feed roller which controls movement of the envelope and the ink ribbon.