Abstract: Authorized printout of an image corresponding to print data received at a print node from a network. The authorized printout comprises encrypting print data by a print node and storing the encrypted print data without printout, receiving authentication of an intended recipient to print the print data, and decrypting the encrypted print data by the print node and printing the decrypted print data by an image forming device, responsive to receipt of authentication in the receiving step. The print node may be the image forming device itself or a gateway to multiple image forming devices. The print node encrypts the print data with either a symmetric key or an asymmetric key.

Abstract: This invention relates generally to a method and apparatus, as implemented by a software program on a computer system, for digitally producing counterfeit-deterring scrambled or coded indicia images, typically in a printed form. This method and system are capable of combining a source image with a latent image so the scrambled latent image is visible only when viewed through a special decoder lens. The digital processing allows different latent images to be encoded according to different parameters. Additionally, latent images might be encoded into single component colors of an original visible image, at various angles from each other. A second embodiment teaches a method of forming an optical surface having diffraction properties that vary over the optical surface in accordance with a security graphic image that includes an encoded recognizable indicium formed as a parallax panoramagram image through a lenticular line screen.

Abstract: A plurality of ground-tint patterns are prepared. A ground-tint pattern adding unit adds a ground-tint data to a printing data to be output to a printer. The ground-tint data includes a copy-suppression pattern that is prepared by combining optically readable copy-surviving patterns with optically difficult-to-read copy-extinctive pattern and are manifested in reproductions. The ground-tint pattern adding unit changes the copy-suppression pattern in the ground-tint data to be added to the printing data with time.

Abstract: The disclosure describes systems for creating and authenticating printed objects using authentication and copy detection watermarks. For example, one verification system includes a watermark decoder and a verification module. The watermark decoder detects a copy detection watermark in a printed object to determine whether the printed object has been reproduced. The verification module processes a message decoded from an authentication watermark on the printed object to authenticate the printed object or bearer of the printed object. The authentication and copy detection watermarks may be implemented as the same or different watermarks. For example, the copy detection watermark may be a fragile watermark that carries the message and that degrades in response to a reproduction operation, such as photocopying or scanning and then reprinting the object. Alternatively, the authentication and copy detection watermarks may be separate watermarks embedded in an image that is printed on the object.

Abstract: System and method is provided for adding addressing information to an indicium printed by a closed system metering device. A scanning device is coupled to a closed system postage meter for scanning addressing information printed on a mailpiece. The addressing information is combined with other information relating to the postage payment for the mailpiece to obtain postal data relating to the mailpiece. The postal data, including the addressing information is used to generate an indicium for the mailpiece. The indicium includes cryptographic evidencing of postage payment. The closed system metering device prints the indicium on the mailpiece.

Abstract: A network publishing authorization protocol, for use in a network connected to a printer, a server and a publisher of network publications. The protocol authorizes the printing of a publication at the printer. It includes the steps of: addressing the publication to a user; signing the publication using a private key; sending the publication to the printer; and confirming that the publication may be printed at the printer, by verifying the private key signature. Confirmation may take place at the printer or at the server.

Abstract: In a secure imaging system for securing documents or encrypting images, an image comprises an array of printed positions formed using a group of inks each having a predetermined spectrum. The positions are selected to form a predetermined image, either real or virtual, when the image is viewed through an optical processor. An image formed using inks having the same colors as experienced by the human eye, but not sharing exactly the same spectra, will fail to form the correct predetermined image.

Abstract: A document or message is protected against forgery or repudiation by processing a selected part or parts of the text of the document or message to form a hash, usually of fewer characters than the selected part or parts of the text. The processing comprises retrieving numerical values which define the respective characters of the selected part or parts of the text and making a calculation using the numerical values of the successive characters. Preferably the hash is added to the text.

Abstract: A method for certifying the public key of a user wishing to communicate using a public key encryption system by a plurality of certifying authorities. A plurality of certifying stations and a user station exchange information and the user station derives a public key from the exchanged information. The certifying stations also publish related information and their public keys. A third party can derive the public key corresponding to the user's private key by operating on the published information with a summation of the certifying station keys.

Abstract: A technique for password encryption and decryption for user authentication in a federated content management system. One or more commands are executed in a computer to perform a datastore operation on a datastore connected to the computer. A string of characters are received. The string of characters is encrypted based on a first character standard. Then, the encrypted string of characters is transformed to be compatible with a second character standard.

Abstract: An image processing method for detecting alteration of data formed on an image formation medium on which a main data image and a copy detection latent image are formed. The method comprises a first image creation step of creating an image in a state identical to a state of an image which is obtained by scanning the image formation medium on which the main data image and the copy detection latent image are formed, a one-way value operation step of effecting a one-way value operation on the image created at the first image creation step to calculate a one-way value, an image conversion step of converting the one-way value into an image representing the one-way value, a second image creation step of creating an image by superimposing the image representing the one-way value, the main data image and the copy detection latent image.

Abstract: A method for certification by a plurality of certifying authorities of the public key of a user wishing to communicate using a public key encryption system while asserting only a subset of rights. A plurality of certifying stations and a user station exchange information and the user station derives a plurality of private keys from the exchanged information. The certifying stations also publish related information and their public keys. The user communicates using a private key formed by summing selected ones of said plurality of private keys corresponding to asserted rights. A third party can derive the public key corresponding to the user's summed private key by operating on the published information with a summation of the certifying station public keys.

Abstract: A pattern generating section forms two patterns based on a pattern size, an embedding strength, and a pattern attenuation ratio. When corresponding pixels in two patterns are added to each other, all of elements become zero. When all of pixels in each of patterns are added to each other, the added pixels become zero. Each of patterns has two edges, which include discontinuous pixel values and pass through a center portion of each of patterns in difference directions from each other. Absolute values of pixel values of the patterns are the largest at a center thereof. The absolute values of pixel values of the patterns decrease as being away from the center thereof. A pattern selecting section selects one of the two patterns in response to additional information. A pattern superimposing section superimposes the additional information on the image data to embed it into the image data.

Abstract: A reader and printer system is provided that is capable of reading data from a substrate, decoding the data and printing information derived from the data. The data is carried on the substrate as an array of dots. The substrate carries an image and the data is a digital representation of the image and so a digital copy of the image may be made from the data carried on the substrate.

Abstract: A method and apparatus using a duplex printer to print indicia on the back side of a printed page to provide privacy for confidential information appearing on the front side and/or indicia to indicate that information which previously appeared on the back side of a printed sheet is not relevant to the information appearing on the front side of the printed sheet.

Abstract: A print (e.g., on paper) user interface (PUI) device for decoding an embedded message to activate a function is described. The PUI can be used for transforming an embedded message into cognizable human sensory inputs. The device includes a reader and a processor. The reader can sense light from a pattern of pixels on a printed surface and determines the pixel values of the pixels. The pattern of pixels constitutes a foreground visual image that conveys cognizable information to an observer. The primary function of the embedded message need not be to launch a Web-site but to display more information related to the cognizable information.

Abstract: An added information encoding part repeatedly arranges two kinds of copy inhibition code arrays of the unit two-dimensional arrays to which copy inhibition codes are assigned, and condition code arrays of the unit two-dimensional arrays to which codes for removing the copy inhibition are assigned, into a two-dimensional array according to given rules. A background image formation part generates a background image in which copy inhibition pattern image areas and condition pattern image areas are repeatedly and two-dimensionally arranged according to given rules, while referring to this array, and the pattern images corresponding to respective codes stored in the background image formation part, and stores the generated background image into a background image buffer. An image composing part reads out document images from a document image buffer, and the background image from the background image buffer, and superimposes them into a composite image.

Abstract: In a method of processing a primary print job corresponding to a primary image using an identification card manufacturing system, a watermarked image is generated that includes a combination of the primary image and a watermark image. The watermark image includes embedded data. Next, the watermarked image is printed on a card substrate. Also provided is an identification card manufacturing system that is adapted to implement the above-described method.

Abstract: A tampering judgement system is provided which is capable of easily checking whether or not a printed document has been tampered. An image feature information extracting section extracts image feature information from a document image. An image feature information embedding section gives image feature information integrally as original image feature information to a document and a document image output section outputs the information as a printed document. When the printed document is given to the tampering judgement system, the image data is read by a document image reading section. An image feature information extracting section extracts image feature information contained in a document being an object for judgement on tampering. An embedding information extracting section extracts original image feature information from image data.

Abstract: A technique for identifying digital object using a digital watermark. The technique includes the steps of encrypting a message derived from source data on the digital object, to obtain an encrypted message digest (S); deriving a watermark from the encrypted message digest (S); and incorporating the watermark into the source data. The encryption is preferably done with a public key encryption system. The message to be encrypted can be obtained via performing a hash function on the source data on the digital object to obtain a message digest (M). The message digest (M) is the message encrypted with the signature encryption key to obtain the encrypted message digest (S). The watermark is resistant to cropping, scaling, and truncation.

Abstract: A secure print system comprises a sending computer entity and a plurality of receiving entities, each capable of decrypting and printing a specified number of copies of a document. The sending computer entity and the plurality of receiving devices are each pre-registered with each other by means of unique device identification number, which is embedded in inaccessible hardware, firmware or software components at the point of manufacture, linking the sending computer entity and the plurality of receiving devices. The receiving devices, after decrypting a received message, print a specified number of copies only, before deleting the electronic data from which the document copies have been printed.

Abstract: The invention is a method for creating a self-authenticating value document at a senders location and for verifying it at a receivers location. At the senders location a document is created having a machine readable data field, a taggant containing extractable first tag data, and a storage medium with clear text data and the first tag data extracted from said taggant written on it. The clear text, first tag data and data from a machine readable data field collectively make up a document message. The document message is hashed with a hashing algorithm to create a first message digest. The first message digest is digitally signed with a private key to create a digital signature which is written on the storage medium in addition with the clear text data, and the first tag data.

Abstract: An authorization service is provided for use with a multifunctional printing system. The printing machine includes a first document processing service and a second document processing service. The first document processing service includes a first set of one or more document processing operations with each of the first set of one or more document processing operations being performable relatives to the electronic document. The second document processing service includes a second set of one or more document processing operations with each of the second set of one or more document processing operations being performable relative to the electronic document. The system also includes a programmable authorization system that controls a manner in which a first set of users accesses the first set of one or more document processing operations and a second set of users access the second set of one or more document processing operations.

Abstract: It is an object to provide an adding technique for enabling additional information to be certainly decoded from an image to which two or more kinds of additional information was added to an input image so that it is difficult to discriminate by the human eyes. To accomplish this object, for example, a plurality of kinds of additional information is periodically added to the input image at different periods so that it is difficult to discriminate by the human eyes. The image to which those additional information was added is outputted to an image forming unit.

Abstract: A method for securing passwords, personal identification numbers and identifying patterns utilizes a MasterCode camouflaged within a grid which contains all the characters, symbols or pictograms of which the MasterCode is a subset. For securing numeric sequences, the MasterCode is comprised of ten characters randomly associated to a corresponding digit (including zero). The characters thereby associated with each numeric password are expanded into an ordinary, natural language word, a SecureWord using non-associated letters. The MasterCode is masked by its unique placement in a MasterGrid known only to the user. For securing passwords comprised of alpha numeric symbolic characters, each unique character, the MasterCode, is assigned a sequential number which becomes a sequence of positions in the MasterGrid with each MasterCode character placed in the appropriate position and the remainder of the character set filled in. SecureNumbers are the positions in the MasterGrid of each character in a password.

Abstract: Computer-based products such as postal security devices are manufactured as generic, nondescript units. Each has a unique identifier or embedded hardware serial number readable by data communications such as serial electrical communications. At customization time, a human-readable marking is placed on the device, along with a bar code indicative of the human-readable marking. A bar-code reader reads the bar code. The embedded hardware serial number is read. A record is made in a database indicative of the embedded hardware serial number and the bar code information. Software may then be selected based on the bar code information, and loaded into the device, typically within a cryptographically secure area within the device. At a later time the device may be retired from service and reprogrammed, in which case a new human-readable marking and bar code are affixed to the device. The embedded hardware serial number and new bar code information are read and appropriate new data records are created.

Abstract: A system and method are provided for secure communications to a network-connected printer. The method comprises: receiving documents encrypted with a public key; spooling the encrypted documents into a printer memory; accepting a private key corresponding to the public key used to encrypt the documents; in response to accepting the private key, generating a list of documents encrypted with a corresponding public key; creating a graphical user interface (GUI) dialog box to invoke the selection of an encrypted document; decrypting the documents with the private key; and, printing the decrypted documents in response to selecting a document. The printer has a card reader to read code from SMART cards, and accepting a private key includes using the code read by the card reader as the private key. Alternately, the printer has a keyboard interface to accept an alpha-numeric code.

Abstract: An object of the present invention is to provide a printing system in which a user can obtain permission to use an encrypted copyrighted image by paying a royalty to a creator of the image so as to print the image, a printing method, and an ink tank which can be used to attain the printing system. The printing system comprises a computer and a printer which is connected to the computer. The computer can acquire an encrypted image with a print key which is distributed from an Internet distribution company. The printer has an ink tank replaceably mounted thereon, and the ink tank incorporates a security chip. The security chip contains a certificate key, generates a decryption key from a combination of the certificate key and the print key, and decrypts the encrypted image into print data which can be printed by the printer by use of the decryption key.

Abstract: It is an object to provide an adding technique for enabling additional information to be certainly decoded from an image to which two or more kinds of additional information was added to an input image so that it is difficult to discriminate by the human eyes. To accomplish this object, for example, a plurality of kinds of additional information is periodically added to the input image at different periods so that it is difficult to discriminate by the human eyes. The image to which those additional information was added is outputted to an image forming unit.

Abstract: A document transfer system enabling a consumer to obtain a document from an owner upon payment using a cryptographic protocol involving the consumer, the owner, a document source, such as printer, and a mediator, according to which protocol the consumer requests a document, the owner provides the source with first and third portions of the key and provides the mediator with a fourth portion of the key, which fourth portion can combine with said first portion to generate the complete key, the consumer provides the owner with the payment and the owner provides the source with a second portion of the key which can combine with said first portion to generate the complete key.

Abstract: A secure print system comprises a sending computer entity and a plurality of receiving entities, each capable of decrypting and printing a specified number of copies of a document. The sending computer entity and the plurality of receiving devices are each pre-registered with each other by means of unique device identification number, which is embedded in inaccessible hardware, firmware or software components at the point of manufacture, linking the sending computer entity and the plurality of receiving devices. The receiving devices, after decrypting a received message, print a specified number of copies only, before deleting the electronic data from which the document copies have been printed.

Abstract: A document printer includes an authenticity verifier for examining an electronic document to verify predetermined authentication information in the electronic document. The authentication information may be an electronic signature, or a digital watermark. The authenticity verifier may be included in the printer controller, and examines the authentication information of the document to verify that the document is unchanged from when it was transmitted by the source computer, and for authenticating the source of the document. If the authenticity verifier confirms the authentication information, the printer automatically performs one print function, such as printing the document with an authentication mark. If the authenticity verifier does not confirm the authentication information, the printer automatically performs a different print function, such as not printing the document, or printing the document with an authenticity warning.

Abstract: A counterfeit-resistant document comprises a contrasting layer and a dynamic camouflaging layer. The contrasting layer is highly contrastive and includes a latent message that can be reproduced over a broad range of copy device control settings. The dynamic camouflaging layer is applied over the contrasting layer to suppress the latent message. The visual density of the dynamic camouflaging layer, which comprises a camouflage pattern that is printed in thermochromic ink, inversely varies with temperature. In this manner, the dynamic camouflaging layer is inactivated at room temperatures so that the latent message is suppressed on the original document, and activated at scanning temperatures so that the latent message is exhibited on a reproduction of the original document.

Abstract: Predetermined additional information is superposed as a dot pattern on image information read by an image scanner, and the image information superposed with the additional information is modulated. The modulated information is demodulated and recorded on a recording medium to perform a series of operations, i.e., to simultaneously satisfy both pattern addition and modulation/demodulation.

Abstract: When managing a job inputted via a network or a console according to a job management command issued likewise via the network or the console, peripheral equipment managed by a directory server connected via the network decrypts an access ticket included in the job, decrypts the access ticket included in the job management command, and manages the job according to the decrypted contents of the access ticket included in the job and the access ticket included in the job management command.

Abstract: An item handling system, comprising: at least one item preparation station for printing machine-readable symbols on items; and at least one item handling station for receiving items from the at least one item preparation station and being operable to machine read and process information contained in the symbols printed on the items; wherein: the at least one item handling station includes a messaging unit for generating messages representative of the readability of symbols read thereby and transmitting the messages to the at least one item preparation station; and the at least one item preparation station includes an indicator for providing an indication of a readability of symbols printed thereby in response to messages received from the at least one item handling station.

Abstract: In a system for making a print of a digital image including a computer for storing a digital image data and a printing device for making the print of the digital image data, a method comprises a step of transmitting from the computer to the printing device the digital image data along with information indicative of a location of the digital image data in the computer, a step of making at the printing device the print based on the transmitted digital image data, and a step of adding at the printing device the transmitted information to the print.

Abstract: A cryptographic encoded, ticket issuing and collection system for real-time purchase of tickets by purchasers at remote user stations in an information network that includes a plurality of remote user stations coupled to a server in an information network, e.g., the Internet, for purchase of services, products, or tickets to an event. An operator of the remote user station selects a ticket for purchase to an event using standard protocols of information network. An electronic ticket is transmitted to the operator and includes a cypher code created using a public key cryptography system. The operator displays the electronic ticket for verification purposes and proceeds to print out the ticket at the station. The ticket is presented to a ticket collector whereupon the ticket is scanned by a portable terminal for decoding the cypher code using a public key reloaded into the terminal by the producers of the event.

Abstract: A system and method for printing an outbound and/or an associated return postage meter stamp, including a desired postage amount, onto a label or onto an outbound document and/or an associated return document. A processor based system is programmed to interact with a customer to produce individualized documents, printed address labels, and a printed postage meter stamp having in one embodiment, a customized postage indicia. The processor based system automatically calculates the postage due for each specific document, prints that postage amount as a meter stamp, interacts with the customer to generate a personalized stamp indicia, encrypts selected information into a machine readable format, and prints the information entered by the customer in a selected format, all on the document or documents for transfer to the outside of a mailing envelope.

Abstract: Digital watermarking of audio, image, video or multimedia data is achieved by inserting the watermark into the perceptually significant components of a decomposition of the data in a manner so as to be visually imperceptible. In a preferred method, a frequency spectral image of the data, preferably a Fourier transform of the data, is obtained. A watermark is inserted into perceptually significant components of the frequency spectral image. The resultant watermarked spectral image is subjected to an inverse transform to produce watermarked data. The watermark is extracted from watermarked data by first comparing the watermarked data with the original data to obtain an extracted watermark. Then, the original watermark, original data and the extracted watermark are compared to generate a watermark which is analyzed for authenticity of the watermark.

Abstract: The present invention provides an apparatus and method for confirming, timestamping, and archiving documents using telecopiers (e.g., facsimile machines). A user sends a document to a timestamping service via facsimile, which archives the transmission with a timestamp. A submission receipt, containing size-reduced images of the submission and a document identification value (DIV), is prepared and sent to the sender. The DIV can later be submitted to the timestamping service to obtain verification that the document was received at the indicated time. In addition, the invention allows for various other forms of document transmission, document identification, and timestamp verification. The invention is thus useful in any situation where it is desired to prove that a document was in existence at a given time. Other embodiments of the invention provide senders of facsimile and telecopier transmissions with confirmation that their transmissions were received successfully.

Abstract: A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services.

Abstract: An electronic watermarking scheme is proposed that can significantly increase the security of copy protection mechanisms. The watermarking methods works at high level in the hierarchy of the (MPEG) source signal. This ensures that the watermark is easily detectable, but difficult to erase without significant transcoding effort. Such transcoding is considered a difficult and expensive task that may furthermore lead to loss of quality or increase in bit rate.

Abstract: The present invention is a method of encrypting unique addressee information into the indicium of a mail piece and verifying the indicium. Local digital tokens are printed in the indicium of the mail piece and point to pivotal address characters in the addressee block. The pivotal address characters are also printed in the indicium. Additionally, a global digital token is included in the indicium.

Abstract: A system is described whereby a document may be authenticated by an issuer thereof and verified by a recipient. Data from the document, at least a portion of which is specific to the document and identifies the document, is input to an authenticating device using an input device. A computing device, including a cryptographic processor and a memory, is coupled to said input device and receives a signal representing the data. The computing device performs a cryptographic operation based on the data to produce encrypted authentication data unique to the document. An output device is coupled to the computing device and affixes a representation of the authentication data on the document. A similar device, including a display device, is used to input the encrypted data, perform a cryptographic operation to decrypt the data, and compare the decrypted data with document identification data to verify the document. Encryption and decryption are performed using a private key/public key pair.

Abstract: Secure financial transactions may be made with insecure facsimile transmissions using encoded customer-specific information that can be readily decoded and confirmed by a merchant. The encoded information is affixed to an order form using, for instance, a label. The encoded information may include a serial number for use in confirming the order. Other information such as a card number (e.g., credit card) and expiration date may also be included.

Abstract: A visible seal or label containing a serial number is placed in plain view on the product packaging. The visible label contains the serial number as well as a first public key encrypted version of the serial number. A second or hidden label inside of the package has thereon a second a second encrypted version of the serial number made using a second public key. The hidden label may be secured inside of the package out of sight or may be placed on the back of the visible label and therefore viewable through a transparent case when opened or visible when peeled off. The private keys are known only to the manufacturer. Using a corresponding public key provided by the manufacturer, the consumer, law enforcement agent, or customs inspector can verify that the encrypted version matches the serial number. An advantage to this method is that only the manufacturer can produce matching pairs.

Abstract: The present invention provides a cryptosystem for encrypting an original image or voice file by using a camouflaging image or voice file. Each of the original and camouflaging files comprises a plurality of basic units arranged according to a predetermined sequence. The cryptosystem comprises a memory for storing the original and camouflaging files and programs, a processor for executing the programs stored in the memory, and an encrypting program stored in the memory for encrypting the original file by using the camouflaging file.

Abstract: A proof-of-postage generating system wherein funds, application of those funds, the replenishment of those funds and the auditing of those funds are secure against attempts at fraud. The system may either be a Closed System (CS) wherein the proof-of postage printing means are housed within the system computational means or within a cryptographically secure boundary. Further, the system my be an Open System (OS) wherein the proof-of postage printing means are external to the system computational means.

Abstract: A postage meter that is contained in a kiosk may be used to produce verifiable receipts for commercial transactions. The imbedded digital metering cryptographic technology that is contained in a postage meter may be used to produce a verifiable receipt. Several of the collected "commercial" transaction data elements are presented to the existing meter encryption module for processing as the meter was processing an envelope. The output encrypted data string is used as a new field in the receipt. Assuring that the receipt is authentic. Verification can be performed as follows: using the printed receipt as a source of data (at some later time) periodically on the archived records stored in the kiosk during the day on the uploaded "order" files before actual processing.