Abstract: An indicia authentication system includes a franking device for embedding identification and encrypted authentication data into indicia and applying the indicia to an article, and a computing device for utilizing the identification data to retrieve a key for deciphering the encrypted authentication data, where the computing device is adapted to utilize the deciphered authentication data to determine the validity of the indicia.

Abstract: In a postage meter system, a user enters information indicative of a batch of mail pieces to be franked. The mail pieces are franked, and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine. The data are digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD). The data are communicated to a server, where the data are authenticated, preferably by means of public-key cryptographic means. These data are then made available to the postal authority in a secure way. Customer accounting is based on statistical data gathered by the postage printing base. Such data may be accumulated and stored in the PSD or in the postage printing base outside of the PSD. The cryptographic protection inherent in the PSD, of the sensitive data, effectively detects or prevents tampering. In addition effective backup and recovery mechanisms may be put into place to protect customer as well as third-party interests.

Abstract: Computer-based products such as postal security devices are manufactured as generic, nondescript units. Each has a unique identifier or embedded hardware serial number readable by data communications such as serial electrical communications. At customization time, a human-readable marking is placed on the device, along with a bar code indicative of the human-readable marking. A bar-code reader reads the bar code. The embedded hardware serial number is read. A record is made in a database indicative of the embedded hardware serial number and the bar code information. Software may then be selected based on the bar code information, and loaded into the device, typically within a cryptographically secure area within the device. At a later time the device may be retired from service and reprogrammed, in which case a new human-readable marking and bar code are affixed to the device. The embedded hardware serial number and new bar code information are read and appropriate new data records are created.

Abstract: Computer-based products such as postal security devices are manufactured as generic, nondescript units. Each has a unique identifier or embedded hardware serial number readable by data communications such as serial electrical communications. At customization time, a human-readable marking is placed on the device, along with a bar code indicative of the human-readable marking. A bar-code reader reads the bar code. The embedded hardware serial number is read. A record is made in a database indicative of the embedded hardware serial number and the bar code information. Software may then be selected based on the bar code information, and loaded into the device, typically within a cryptographically secure area within the device. At a later time the device may be retired from service and reprogrammed, in which case a new human-readable marking and bar code are affixed to the device. The embedded hardware serial number and new bar code information are read and appropriate new data records are created.