Abstract: A system is disclosed for distributing postage over a public network in a manner that is secure in the case of third party interception, indicia for which can be efficiently printed by a postal customer on items to be mailed, and that facilitates authentication of the printed indicia. When the postal customer purchases postage from the postal service, the postal service provides information which the postal customer uses to generate pseudo-random numbers associated with the respective units of postage. When the postal customer prints an indicium for a respective unit, it appends the associated pseudo-random number, which the postal service uses to authenticate the indicium. The pseudo-random numbers are generated using a methodology by which the postal customer can generate pseudo-random numbers for units which have been purchased, but not for units which have not yet been purchased.

Abstract: A method of remotely accessing a postage security account at a data center from a remote user device begins with a remote user assigning a password to the user's postage security account at a data center. A cryptographic key corresponding to the user's postage security account is provided to the remote user device and is stored at the data center. The password and the cryptographic key are combined at the remote user device and the data center respectively to obtain a user authentication key. An authentication algorithm is performed using the user authentication key to obtain a remote access message. The remote access message is sent to the data center to initiate request for access to the postage security account by the remote user device. The remote user device is authenticated for accessing the postage security account when the data center verifies the remote access message.

Abstract: A system and method of evidencing postage payment includes a data center with a database storing a plurality of meter records. Each meter record includes meter information corresponding to a metering account. When a request for postage is received, a secure co-processor device in the data center obtains the appropriate meter record and verifies the authenticity of the meter record by verifying a signature in the meter record and comparing freshness data in the meter record to freshness data in the secure device. If verified, the secure device then accounts for an amount of postage to be evidenced, generates evidence of postage payment and updates the meter information, including the freshness data, in the meter record. The secure device then signs the updated meter information, stores the signature in the meter record, and returns the updated meter record to the database.

Abstract: A system is disclosed for distributing postage over a public network in a manner that is secure in the case of third party interception, indicia for which can be efficiently printed by a postal customer on items to be mailed, and that facilitates authentication of the printed indicia. When the postal customer purchases postage from the postal service, the postal service provides information which the postal customer uses to generate pseudo-random numbers associated with the respective units of postage. When the postal customer prints an indicium for a respective unit, it appends the associated pseudo-random number, which the postal service uses to authenticate the indicium. The pseudo-random numbers are generated using a methodology by which the postal customer can generate pseudo-random numbers for units which have been purchased, but not for units which have not yet been purchased.

Abstract: A system is disclosed for distributing postage over a public network in a manner that is secure in the case of third party interception, indicia for which can be efficiently printed by a postal customer on items to be mailed, and that facilitates authentication of the printed indicia. When the postal customer purchases postage from the postal service, the postal service provides information which the postal customer uses to generate pseudo-random numbers associated with the respective units of postage. When the postal customer prints an indicium for a respective unit, it appends the associated pseudo-random number, which the postal service uses to authenticate the indicium. The pseudo-random numbers are generated using a methodology by which the postal customer can generate pseudo-random numbers for units which have been purchased, but not for units which have not yet been purchased.

Abstract: A method of manufacturing a secure box in a Key Management System that includes a plurality of functionally distinct secure boxes initializes a first manufacturing box if one does not exist. The method creates in a manufacturing box at least one logical security domain including encryption keys needed to perform Key Management System processes within the domain, and provides a target secure box with the capability to perform at least one Key Management System function from a plurality of functions required by the Key Management System. The method authenticates the target secure box to the manufacturing box, installs a unique secure box identification in the target secure box, and creates at least one logical security domain in the target secure box corresponding to a logical security domain in the manufacturing box.

Abstract: A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier.

Abstract: A method of token verification in a Key Management System provides a logical device identifier and a master key created in a logical security domain to a transaction evidencing device, such as a digital postage meter. The method creates a master key record in a key verification box, securely stores the master key record in a Key Management System archive, and produces in the transaction evidencing device evidence in the logical security domain of transaction information integrity. The method inputs the evidence of the transaction information integrity to a token verification box, and inputs in the token verification box the master key record from the Key Management System archive.

Abstract: A method and system for postage payment include the generation of a plurality of dispensable discrete items of encrypted data. Each of the items of encrypted data, which may be digital tokens, have a specific value. The generated plurality of discrete items of encrypted data are stored on a portable medium. A prepayment value is also stored on the portable medium. The dispensing of the stored plurality of discrete items of encrypted data is limited based on the prepayment value stored on the portable medium. The medium may be a device or member having memory for storing a plurality of dispensable tokens. The portable member or device may have a housing with a register within the housing. The postage prepayment value is stored in the register. The plurality of discrete items of encrypted data is stored in the housing with each of the items of encrypted data adapted to be formatted for printing.