Abstract: System and method for securely backing up and reliably retrieving vault data in a metering system that includes a host processor operatively coupled to a vault. Whenever a transaction is completed by the vault, the vault cryptographically signs the vault data, including ascending register, descending register and piece count and sends the cryptographically signed vault data to the host processor where it is stored in a data file assigned to the vault. Each storage of the cryptographically signed vault data is indexed to create a historical log of vault transactions. If the vault is lost or damaged so that vault data cannot be retrieved from the vault, the cryptographically signed vault data is retrieved from the host processor data file and verified.

Abstract: A method and system for processing mail pieces or substrates containing data printed thereon involves scanning a mail piece or substrate and obtaining information concerning the printed data. The information is processed to determine if the data is readable. Non readable data information is processed to determine if the non readable data is due to predetermined causes of a first type or predetermined causes of a second type. Substrates or mail pieces with non readable data due to predetermined causes of the first type may be processed in a first manner and processing substrates or mail pieces with non readable data due to predetermined causes of the second type may be processed in a second manner. The printing may be optical character recognizable, bar code of any type or any other form of printed data.

Abstract: A method for controlling keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document comprises the steps of generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys; generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device; calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; encrypting the verifier token key set with a privacy key; and distributing the set verifier token keys and the privacy key to verifiers. The token keys are a function of the verifier master keys and a code valid for a limited time. The pointer algorithm is an appropriate symmetric key cryptographic algorithm and the code is function of a date dependent parameter. The master keys are distributed to postal and vendor data centers.

Abstract: A cryptographic method where items, such as mail pieces, are verified for authenticity includes determining a predetermined number of items selected for verification during a given period and maintaining a count of the number of items verified. The predetermined number is compared with the number of items verified. The verification process may continue if a match occurs and may be stopped if a match does not occur. The verifier includes means for inputting data relating to an item to be verified and access counter means for counting the number of items verified.

Abstract: A mail generation system and method includes means for processing data to generate mail piece information and first secure processing means for securely storing and encrypting mail piece information generated by the data processing means. Means are coupled to the data processing means for physically preparing mail pieces related to the generated mail piece information and for generating information related to the physical preparation of the mail. Second secure processing means securely store and encrypted information generated by the mail preparing means. Means sort the mail pieces and generate information related to the sorting and packaging of the mail pieces. Third secure processing means securely store and encrypt information generated by the mail sorting and packaging means. A part of the software program used to generate the mail piece information can be securely stored. Mail piece information to verify that the software program was employed to generate the mail piece information is encrypted.

Abstract: A method for controlling keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document comprises the steps of generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys; generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device; calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; encrypting the verifier token key set with a privacy key; and distributing the set verifier token keys and the privacy key to verifiers. The token keys are a function of the verifier master keys and a code valid for a limited time. The pointer algorithm is an appropriate symmetric key cryptographic algorithm and the code is function of a date dependent parameter. The master keys are distributed to postal and vendor data centers.

Abstract: The present invention provides a method for verifying an unreadable information-based indium that has been generated by a postal security device (PSD) for information-based indium comprising a 2-D bar code, certain human-readable information, a digital signature and a certificate. The method comprises the steps of attempting to read the 2-D bar code using sophisticated digital image processing when the 2-D bar code is not readable; and continuing normal processing when the 2-D bar code is readable with the sophisticated digital image processing. When the 2-D bar code is not readable two independent processes are used to determine the indicium certificate. A first process includes reading human readable information by optical character recognition using context, syntax, and redundancy in the human readable information to obtain a PSD-ID; and using the PSD-ID to look up in a certificate database a certificate corresponding to the information-based indicium.

Abstract: Methods and systems for preparing mailpieces involve the creation of mailing lists which includes correct and incorrect recipient address information. The list is transmitted to a data center. Received from the data center is a mailing list including addressed hygiened recipient address information and a digital token for each mailpiece with encrypted data. The encrypted data is based on the corrected address information for mailpieces with correct address information on the transmitted mailing list and on hygiened recipient address information the mailpieces with incorrect recipient address information on the transmitted mailing list. The digital tokens for each mailpiece may also be based on the rating parameter information.Selection is provided for utilizing a given one of the incorrect recipient address information and the correct recipient address information is applied to an encrypter generating the digital tokens.

Abstract: A mailing list is created including destination addresses for mailpieces to be submitted to a carrier service for delivery. A unique mailpiece identifier associated with mailpieces on the mailing list is generated by the carrier or other trusted third party. The unique mailpiece identifier is printed on the mailpiece with which it is associated. The mailpieces with the printed unique identifier are submitted to the carrier service. The carrier service obtains the printed unique identifier from the mailpiece. The obtained unique identifier from each said mailpiece is utilized to verify that data associated with the mailpiece has been processed by the carrier or trusted third party. When the unique number has been obtained from the mailpieces, the carrier service, if desired, may note this fact in the carrier records to prevent reuse of the unique identifier.

Abstract: A vending machine system for printing postage stamps, the vending machine system includes an enclosed housing having a front panel with an aperture therein; a camera, mounted in the housing, for receiving through the aperture an image of at least one person and for creating an electronic image of the at least one person based on the received image of the at least one person; a printer; a payment receiving device for accepting payment and for providing a payment signal indicative that payment has been made; a computer including a memory, the computer 1) causing the camera to create the electronic image of the at least one person upon receipt of the payment signal, 2) saving the electronic image of the at least one person in the memory, and 3) utilizing the electronic image of the at least one person for controlling the printer to print a first personalized postage stamp on a recording medium, the first personalized postage stamp including predetermined data required by a postal authority and a picture of the a

Abstract: A key control system comprises the generation of a first set of keys which are then used for a plurality of respective postage meters. The keys are then related to a respective meter in accordance with a map or algorithm. The keys may be changed by entering the second key via an encryption using the first key.

Abstract: A transaction evidencing system and method includes a host processor and an unsecured printer coupled to the host processor. A vault device that includes digital token generation and transaction accounting functions is operatively coupled to the host processor. The vault device generates a digital token in response to a first command from the host processor. The digital token and information relating thereto are stored in storage area in the vault and/or the host processor. The stored digital token and information relating thereto are selectively accessed for generating transaction evidencing indicia corresponding to the stored digital token. The unsecured printing structure prints the transaction evidencing indicia in response to a second command which is issued at a time subsequent to the first command. A batch of digital tokens may be generated and stored in an indexed file in the storage area before any indicia corresponding to the batch of digital tokens are generated and printed.

Abstract: A method for mail accounting and payment includes creating a mail batch including a plurality of mailpieces and creating a statement of mailing containing data relating to the mail batch. The statement of mailing is digitally signed to facilitate a subsequent verification of the integrity of the data in the statement of mailing. The digital signature is included as part of the statement of mailing. The statement of mailing is submitted to a transaction processing center. The transaction processing center initiates a funds transfer to a carrier delivery service for carrier delivery services payment for the batch of mail. The statement of mailing or other mailing data may be stored in a nonvolatile memory means. The nonvolatile memory means allows the statement of mailing to be stored therein and erased therefrom but not modified.

Abstract: A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain.

Abstract: A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services.

Abstract: System and method for securely backing up and reliably retrieving vault data in a metering system that includes a host processor operatively coupled to a vault. Whenever a transaction is completed by the vault, the vault cryptographically signs the vault data, including ascending register, descending register and piece count and sends the cryptographically signed vault data to the host processor where it is stored in a data file assigned to the vault. Each storage of the cryptographically signed vault data is indexed to create a historical log of vault transactions. If the vault is lost or damaged so that vault data cannot be retrieved from the vault, the cryptographically signed vault data is retrieved from the host processor data file and verified.

Abstract: Methods and systems for preparing mailpieces involve the creation of mailing lists which includes correct and incorrect recipient address information. The list is transmitted to a data center. Received from the data center is a mailing list including addressed hygiened recipient address information and a digital token for each mailpiece with encrypted data. The encrypted data is based on the corrected address information for mailpieces with correct address information on the transmitted mailing list and on hygiened recipient address information the mailpieces with incorrect recipient address information on the transmitted mailing list. The digital tokens for each mailpiece may also be based on the rating parameter information.Selection is provided for utilizing a given one of the incorrect recipient address information and the correct recipient address information is applied to an encrypter generating the digital tokens.

Abstract: A method for mail payment evidencing includes processing a collation of mail where the collation is one of a series of mail collations being created. Payment rating parameters are determined for carrier services to be associated with the mail collation in process. It is determined if a previously generated digital token associated with a previous mail collation which was not completed is suitable for use on said mail collation in process. The previously generated digital token is utilized for the mail collation in process if the previously generated digital token is suitable for use on said mail collation in process. The created mail collations may be submitted to a carrier service with a digitally signed statement of mailing.

Abstract: Methods and systems for preparing mailpieces involve the creation of mailing lists which includes correct and incorrect recipient address information. The list is transmitted to a data center. Received from the data center is a mailing list including addressed hygiened recipient address information and a digital token for each mailpiece with encrypted data. The encrypted data is based on the corrected address information for mailpieces with correct address information on the transmitted mailing list and on hygiened recipient address information the mailpieces with incorrect recipient address information on the transmitted mailing list. The digital tokens for each mailpiece may also be based on the rating parameter information.Selection is provided for utilizing a given one of the incorrect recipient address information and the correct recipient address information is applied to an encrypter generating the digital tokens.

Abstract: A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier.