Abstract: A network connectivity device that when coupled to a mail processing machine enables a cloud application running on a personal computer or other device to interface with and control the mail processing machine without requiring any software to be installed on the personal computer other than a web browser. The network connectivity device plugs into a standard USB port on the mail processing machine to allow wired or wireless connectivity to a network. There is no software or other code required to run on the personal computer other than a standard web browser running a hosted web application. The network connectivity device allows the mail processing machine to be found and addressed by the hosted web application. This allows a user to control operations of the mail processing machine, as well as giving the mail processing machine network connectivity for outside world communication activities.

Abstract: A network connectivity device that when coupled to a mail processing machine enables a cloud application running on a personal computer or other device to interface with and control the mail processing machine without requiring any software to be installed on the personal computer other than a web browser. The network connectivity device plugs into a standard USB port on the mail processing machine to allow wired or wireless connectivity to a network. There is no software or other code required to run on the personal computer other than a standard web browser running a hosted web application. The network connectivity device allows the mail processing machine to be found and addressed by the hosted web application. This allows a user to control operations of the mail processing machine, as well as giving the mail processing machine network connectivity for outside world communication activities.

Abstract: A method includes receiving at a sub-program a request from an external entity the request comprising at least one parameter and a return address, utilizing the return address and an address list associated with the sub-program to authenticate the external entity, and processing the request if the external entity is authenticated.

Abstract: In a value dispensing system, a system and method for securely loading and executing software in a secure device that does not include any non-volatile programmable memory is provided. A non-secure portion of the value dispensing system stores software for loading into the secure portion when needed. Commands being sent to the secure printer are monitored to determine if the secure has the necessary software to execute the command. If the secure device currently does not have the necessary software to execute the command, the command is delayed and the proper software is loaded from the non-secure portion to the RAM of the secure device. A signature associated with the software is verified to ensure the authenticity of the software. If the signature is verified, the command is passed to the secure device, and, utilizing the software in the RAM, the command is executed by the secure device.

Abstract: In a value dispensing system, a system and method for securely loading and executing software in a secure device that does not include any non-volatile programmable memory is provided. A non-secure portion of the value dispensing system stores software for loading into the secure portion when needed. Commands being sent to the secure printer are monitored to determine if the secure has the necessary software to execute the command. If the secure device currently does not have the necessary software to execute the command, the command is delayed and the proper software is loaded from the non-secure portion to the RAM of the secure device. A signature associated with the software is verified to ensure the authenticity of the software. If the signature is verified, the command is passed to the secure device, and, utilizing the software in the RAM, the command is executed by the secure device.

Abstract: A control system for a mailing machine includes a user interface having a display, a memory having a screen region, a plurality of screens stored within the screen region and a control program for displaying the plurality of screens on the display and for controlling the operation of the mailing machine. Each of the plurality of screens has pre-function data and background function data, respectively. The pre-function data includes image data relating to a screen image for display. The control program uses the pre-function data to identify a pre-function to be executed before displaying the screen image and uses the background function data to identify a background function to be executed during the display of the screen image.

Abstract: System and method for securely backing up and reliably retrieving vault data in a metering system that includes a host processor operatively coupled to a vault. Whenever a transaction is completed by the vault, the vault cryptographically signs the vault data, including ascending register, descending register and piece count and sends the cryptographically signed vault data to the host processor where it is stored in a data file assigned to the vault. Each storage of the cryptographically signed vault data is indexed to create a historical log of vault transactions. If the vault is lost or damaged so that vault data cannot be retrieved from the vault, the cryptographically signed vault data is retrieved from the host processor data file and verified.

Abstract: A system for providing items of value, charging the items to a smart card, and for recharging the smart card. The system includes a station for providing the items of value, which may be postal services, and debiting the cost of the items to a smart card; the smart card being charged with funds equivalent data. The station also communicates with a Data Center for recharging the smart card. Users of the system communicate with the data center to request recharge of a particular smart card and in response to an authorized request the data center generates an encrypted authorization message which includes an identification number, the amount of recharge requested, and control data which preferably includes a control sum formed by adding the amounts stored in a descending register, which stores the amount available on the smart card, and an ascending register which stores the total of the amounts by which the card has been charged since initialization. Thus, the authorization message may be used only once.

Abstract: A method for thresholding a gray scale matrix representative of an image to generate binary matrix representative of the image. Elemental features of the image are determined and characterized, and a plurality of thresholding algorithms is selected. For each algorithm a sequence of binary matrices is generated as scaling factor applied to the algorithm is varied. Features of each binary matrix are determined and characterized and compared to elemental features of the image. For each determined feature which matches a an elemental feature of the image a score is incremented; and for each determined feature which does not match the score is decremented. The binary matrix having the highest score is selected.

Abstract: A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain.

Abstract: System and method for securely backing up and reliably retrieving vault data in a metering system that includes a host processor operatively coupled to a vault. Whenever a transaction is completed by the vault, the vault cryptographically signs the vault data, including ascending register, descending register and piece count and sends the cryptographically signed vault data to the host processor where it is stored in a data file assigned to the vault. Each storage of the cryptographically signed vault data is indexed to create a historical log of vault transactions. If the vault is lost or damaged so that vault data cannot be retrieved from the vault, the cryptographically signed vault data is retrieved from the host processor data file and verified.

Abstract: A value dispensing system comprising a portable data carrier and a terminal. The portable data carrier including a memory having stored therein accounting information indicative of an amount of value available for dispensing. The terminal including a memory and means for dispensing value and adapted to receive the portable data carrier and process a transaction which dispenses a given value in response to a digital token generated by the portable data carrier using a first cryptographic key. For the value dispensed, the postage evidencing system creates a transaction record having a secret portion which is indicative of the amount of value available for dispensing on the portable data carrier wherein the secret portion of the transaction record is encrypted using a second cryptographic key derived from the first cryptographic key, and the transaction record is stored in the terminal memory.

Abstract: A method of manufacturing a secure box in a Key Management System that includes a plurality of functionally distinct secure boxes initializes a first manufacturing box if one does not exist. The method creates in a manufacturing box at least one logical security domain including encryption keys needed to perform Key Management System processes within the domain, and provides a target secure box with the capability to perform at least one Key Management System function from a plurality of functions required by the Key Management System. The method authenticates the target secure box to the manufacturing box, installs a unique secure box identification in the target secure box, and creates at least one logical security domain in the target secure box corresponding to a logical security domain in the manufacturing box.

Abstract: A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier.

Abstract: A system and method of fault tolerant key management of cryptographic keys includes a key distribution computer and primary and secondary key management computers coupled to the key distribution computer, Primary and secondary server computers are each coupled to the primary and secondary key management computers, One of the primary and secondary key management computers is operational at a time, The operational one of the primary and secondary key management computers writes key data received from the key distribution computer to an archive database in each of the primary and secondary server computers, The method includes the steps of requesting storage of key data by an operational one of the primary and secondary key management computers; monitoring the operational status of each of primary and secondary server computers; writing key data to an archive database in each of the primary and secondary servers that are operational; writing key data to a log file in an operational one of the primary and seconda

Abstract: An apparatus for producing items in selected configurations and a system, and method for controlling the same. More particularly, an apparatus for producing mail pieces and a system and method for controlling it to produce mail pieces in a variety of configurations are disclosed. The apparatus includes a laser printer and folding sealing apparatus controlled by a data processor. The folder sealer apparatus combines sheets printed by the laser printer with pre-printed sheets and envelope forms, which also may be printed by the laser printer or may be windowed envelopes, folds the sheets as necessary and folds and seals the envelope form about the folded sheets to produce a mail piece. A user inputs a configuration for the mail piece which is translated by the data processor into a data structure and transmitted to the controller of the folder sealer apparatus.

Abstract: An apparatus for producing items in selected configurations and a system and method for controlling the same. More particularly, an apparatus for producing mail pieces and a system and method for controlling it to produce mail pieces in a variety of configurations are disclosed. The apparatus includes a laser printer and folding sealing apparatus controlled by a data processor. The folder sealer apparatus combines sheets printed by the laser printer with pre-printed sheets and envelope forms, which also may be printed by the laser printer or may be windowed envelopes, folds the sheets as necessary and folds and seals the envelope form about the folded sheets to produce a mail piece. A user inputs a configuration for the mail piece which is translated by the data processor into a data structure and transmitted to the controller of the folder sealer apparatus.

Abstract: An apparatus and control system for producing items in selected configurations and a system and method for controlling the same. More particularly, an apparatus for producing mail pieces and a system and method for controlling it to produce mail pieces in a variety of configurations are disclosed. The apparatus includes a laser printer and folding sealing apparatus controlled by a data processor. The folder sealer apparatus combines sheets printed by the laser printer with pre-printed sheets and envelope forms, which also may be printed by the laser printer or may be windowed envelopes, folds the sheets as necessary and folds and seals the envelope form about the folded sheets to produce a mail piece. A user inputs a configuration for the mail piece which is translated by the data processor into a data structure and transmitted to the controller of the folder sealer apparatus.