Abstract: A method providing for programming reprogramming at least some software into flash memory of a postage machine or other mailing apparatus. The method calls for providing the software to be programmed into the flash memory in at least two builds, with one build providing kernel software that includes the functionality needed for programming/reprogramming (including functionality for linking to a personal computer by which the software to be programmed may be provided), and the other build providing non-kernel software, usually routines providing application-oriented functionality, and not essential to programming the flash memory. The first build, of the at least two builds, is written into sectors of the flash memory that are then locked. The system provides, in some applications, for writing the non-kernel software using a paging algorithm that writes several sectors worth of non-kernel software at a time.

Abstract: A system controls the downloading of images from a portable device into a postage meter so that the downloaded images can be subsequently printed by the postage meter. The portable device is useable in conjunction with a fixed number of meter serial numbers and can be used for downloading of images into any meter until the fixed number has been met and accounted for by the portable device. At this point in time, the portable device is only capable of downloading the image into the specific meters that previously had the images downloaded from the portable device.

Abstract: The apparatus comprises: a first module including a universal key; a second module including a unique identifier and a unique key wherein the unique key is derived from the unique identifier and the universal key and incorporated into the second module during manufacture of the second module. The second module is in communication with the first module. The apparatus further comprises a controller for performing the following subsequent to manufacture of the first module and the second module: initiating a communication session between the first module and the second module; transmitting the unique identifier from the second module to the first module; and deriving the unique key in the first module using the unique identifier and the universal key. A method for synchronization of cryptographic keys between modules of a distributed system and a method of manufacturing a postage evidencing system are also provided.

Abstract: A postage evidencing system including a plurality of domains for partitioning a population of postage meters according to an operating characteristic, a data center, a postage meter in operative communication with the data center and a printer in operative communication with the postage meter. The postage meter is initialized to operate in a particular domain while the printer is capable of operating in each of the plurality of domains. To update or enable a domain in the printer, the postage meter transmits an indication of the particular domain to the data center. Then, the data center encrypts the indication and transmits the indication to the postage meter which in turn forwards the encrypted indication to the printer. The printer decrypts the encrypted indication and using the indication enables a respective domain in the printer corresponding to the particular domain of the postage meter. A method for updating domains in a postage evidencing system is also provided.

Abstract: A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain.

Abstract: A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier.