Abstract: Postage generation and management systems are provided in which hardware security modules (HSMs) are used to perform cryptographic operations instead of conventional postal security devices. Virtual PSD data is stored in a database and processed by the HSMs, allowing for improved security and scalability.

Abstract: A system for resource sharing for document production. Available resources are determined for performing at least one document production task. The capacity of an available resource is determined. A task is selecting to send to the resource based at least partly on its availability. An identifier is associating with a set of task data, which can include document data and insertion data. The identifier can be used to track the progress and completion of the task. The task can be sent to the resource for processing. The completed task is received from the resource.

Abstract: A secure gateway includes a TLS server for authenticating connecting devices, a connection manager for routing requests from the TLS server to service provider adapters, and a key management system for providing key management functions, wherein when a device provides a manufacturing certificate to one or more servers of the gateway, servers identify the device as authentic by validating that the manufacturing certificate provided is signed by the same root that has signed the servers its own certificate.

Abstract: A scale can include a low capacity sensing mechanism operatively coupled to a load, wherein the low capacity sensing mechanism may detect movement of the load. A transfer mechanism can be operatively coupled to the low capacity sensing mechanism, wherein the low capacity sensing mechanism may enable the scale to weigh both relatively heavy loads and relatively light loads to a minor division resolution associated with the low capacity sensing mechanism.

Abstract: An indicia authentication system includes a franking device for embedding identification and encrypted authentication data into indicia and applying the indicia to an article, and a computing device for utilizing the identification data to retrieve a key for deciphering the encrypted authentication data, where the computing device is adapted to utilize the deciphered authentication data to determine the validity of the indicia.

Abstract: A system for resource sharing for document production. Available resources are determined for performing at least one document production task. The capacity of an available resource is determined. A task is selecting to send to the resource based at least partly on its availability. An identifier is associating with a set of task data, which can include document data and insertion data. The identifier can be used to track the progress and completion of the task. The task can be sent to the resource for processing. The completed task is received from the resource.

Abstract: A scale can include a low capacity sensing mechanism operatively coupled to a load, wherein the low capacity sensing mechanism may detect movement of the load. A transfer mechanism can be operatively coupled to the low capacity sensing mechanism, wherein the low capacity sensing mechanism may enable the scale to weigh both relatively heavy loads and relatively light loads to a minor division resolution associated with the low capacity sensing mechanism.

Abstract: A scale can include a low capacity sensing mechanism operatively coupled to a load, wherein the low capacity sensing mechanism may detect movement of the load. A transfer mechanism can be operatively coupled to the low capacity sensing mechanism, wherein the low capacity sensing mechanism may enable the scale to weigh both relatively heavy loads and relatively light loads to a minor division resolution associated with the low capacity sensing mechanism.

Abstract: A scale can include a low capacity sensing mechanism operatively coupled to a load, wherein the low capacity sensing mechanism may detect movement of the load. A transfer mechanism can be operatively coupled to the low capacity sensing mechanism, wherein the low capacity sensing mechanism may enable the scale to weigh both relatively heavy loads and relatively light loads to a minor division resolution associated with the low capacity sensing mechanism.

Abstract: An indicia authentication system includes a franking device for embedding identification and encrypted authentication data into indicia and applying the indicia to an article, and a computing device for utilizing the identification data to retrieve a key for deciphering the encrypted authentication data, where the computing device is adapted to utilize the deciphered authentication data to determine the validity of the indicia.

Abstract: A secure gateway for a postal services infrastructure includes a server for receiving credentials from a meter and operable to authenticate the meter utilizing the credentials, and circuitry for providing services from information associated with the authenticated meter.

Abstract: An indicia authentication system includes a franking device for embedding identification and encrypted authentication data into indicia and applying the indicia to an article, and a computing device for utilizing the identification data to retrieve a key for deciphering the encrypted authentication data, where the computing device is adapted to utilize the deciphered authentication data to determine the validity of the indicia.

Abstract: A cryptographic device comprises a memory pre-programmed with cryptographic key, a data processor connected to the memory, and an interface for connecting the interface to a computer.

Abstract: A method for communicating between applications on a network is provided. A first server having associated applications and a second server having associated applications are provided. The first and second servers are bridged together with a bridge functionality having at least one subscription list. A message is sent from at least one of the associated applications on the first server to the first server. The message is sent to the associated applications on the first server subscribing to the message and to the bridge functionality. The message is added to the at least one subscription list. The message is sent to the second server and the associated applications on the second server that subscribe to the message. The bridge functionality determines if the message is to be sent to the second server and the associated applications on the second server.

Abstract: A secure gateway includes a TLS server for authenticating connecting devices, a connection manager for routing requests from the TLS server to service provider adapters, and a key management system for providing key management functions, wherein when a device provides a manufacturing certificate to one or more servers of the gateway, servers identify the device as authentic by validating that the manufacturing certificate provided is signed by the same root that has signed the servers its own certificate.

Abstract: A system for providing franking services is provided. The system has at least one postal meter, at least one network and at least one data center. The at least one network is connected to the postal meter. The at least one network has user interfaces. The at least one data center is connected to the at least one postal meter via the at least one network. The at least one postal meter sends a notification communication to at least one user interface on a corresponding one of the at least one network.

Abstract: A mailing machine for franking mail items. The mailing machine has a franking section having a franking head, a feeder adapted to feed mail items from a mail stack to the franking section, a dynamic scale supporting the mail stack, and a processor connected to the franking section, the feeder and the dynamic scale. The dynamic scale measures the weight of the mail stack. The processor determines a weight difference of the mail stack corresponding to the weight of a mail item fed to the franking section.

Abstract: In a postage meter system (FIG. 2), a user enters information,indicative of a batch of mail pieces to be franked (30). The mail pieces are franked(31), and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine(33). The data digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD)(32). The data are communicated(34), preferably by means of public-key cryptography(35). These data are then made available to the postal authority in a secure way.

Abstract: In a postage meter system (FIG. 2), a user enters information,indicative of a batch of mail pieces to be franked (30). The mail pieces are franked(31), and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine(33). The data digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD)(32). The data are communicated(34), preferably by means of public-key cryptography(35). These data are then made available to the postal authority in a secure way.

Abstract: A set of procedures is described which permit signing digital audio recordings by means of private keys, and which permit later authentication of such recordings, for example in a courtroom, in a way that is well suited to comprehension by non-technical personnel. Importantly, the explanation leading to such comprehension does not enable the creation of tampered recordings that would appear to be authentic. The procedures call for signing by trusted and disinterested third parties and for distributing hardware tokens storing various keys and key pairs. The format of the digital audio recordings permits playback on conventional equipment and also on equipment having cryptographic capabilities for authentication.