Abstract: Systems and methods which prevent or limit access to protected content (e.g., value bearing indicia (VBI)) by a general purpose user interface application (e.g., web browser) are shown. Embodiments implement techniques to avoid displaying protected content by a general purpose user interface application, or displaying protected content during a time in which a user does not have access to particular functions of the general purpose user interface application, to protect the content from various operations, such as repeated printing, electronic copying, etc. Data presentation formatting control in the form of style sheets may be utilized to control access to content. Additionally or alternatively, executable code or an executable object may be implemented within a page or other content to control access to content. Similarly, separate areas, such as windows or pages, may be utilized to control access to content.

Abstract: Disclosed herein are systems and methods for executing a transaction via a locker. A seller is provided initial access to the locker to deposit a good in the locker. The seller deposits the good in the locker. Following the seller depositing the good in the locker, the seller's access is revoked, and the buyer is provided access to the locker. The buyer may then arrive at the locker and provide authentication information to an authentication device. When the buyer is authenticated, the locker door (with the good inside the locker) is unlocked. The buyer can then inspect and accept the good. When the good is accepted, funds may be transferred from an account associated with the buyer to an account associated with the seller.

Abstract: Techniques for secure remote access of computing resources are described herein. In some examples, when a client requests to access a computing resource, a computing service may generate a first password value for the computing resource and transmit the first password value to the client. The client may then generate and transmit key data for entry of the first password value back to the computing service. The client may generate and transmit the key data on the user's behalf, without requiring any activation or selection of keys by the user. Upon receiving the key data, the computing service may enter the first password value into the computing resource, thereby allowing the client to access the computing resource. The computing service may detect the accessing of the computing resource and may change the first password value to a second password value.

Abstract: Systems described herein for controlling, requesting, and coordinating the creation and generation of labels can be a label broker, providing a centralized location for storing label information created by various entities, and managing the requests for generation of physical labels coming from various sources and entities.

Abstract: Embodiments of the present invention teach use of a single-platform with its own authentication-process (i.e., its own “single-platform-authentication-process” or its own selection of secure single-platform-authentication-processes), but that may allow third party service provider companies (Organizations) that want to offer/provide service(s) on the single-platform, to still utilize their own authentication-processes, i.e., to still utilize the given Organization's own “organization-specific-authentication-process,” at least once in the initial user onboarding process, and thereafter to rely upon the common authentication-processes of the single-platform; which then permits a multitude of services, including the possibility of diverse and different services to be deployed from the single-platform.

Abstract: A computer implemented system for electronic verification of credentials including at least one processor and data storage is described in various embodiments. The system includes cryptographic mechanisms and electronic communication between one or more computing systems that in concert, provide verification of a prover's credentials in accordance to logical conditions of a verifier's policy without providing additional information to a verifier entity.

Abstract: There are provided systems and methods for location detection devices for use in a courier services network. A first user may travel to a location for a particular reason, such as item purchases or appointments. While at the location, the user may be identified at the location by a server offering courier services to a seller and a second user purchasing items from the seller. Based on the first user's reason for traveling to the location and other indicia of trustworthiness or fraud, the server may determine whether the first user can be trusted as a courier. If the user is trusted as a courier, the server may update the first user and the seller to arrange delivery of the item to another location set by the second user. The first user may also be provided with additional items for the second user to deliver to further locations.

Abstract: Systems, methods, and computer-readable media are disclosed for identification of inaccurate addresses for package deliveries. In one embodiment, an example method may include determining a shipping address for a package that includes a product. A recurrent neural network may generate an address deliverability score by providing the shipping address as input. A set of corrective actions corresponding to the address deliverability score may be determined. The address deliverability score and the set of corrective actions may be presented. A selection of a corrective action from the set of corrective actions to implement prior to delivery of the package may be received.

Abstract: A printed document manager manages printed documents and is separate from Document Management Systems (DMSs) that manage electronic soft copy documents. One or more DMSs are registered with a postmark server. A client computing device executes a postmark client, detects a print event for a specified document, and queries a postmark server to determine whether the print event for the specified document should include a graphical postmark. In response, the postmark server queries one or more of the registered DMSs to determine whether the specified document matches a document in any of the repositories of the registered DMS(s). When the specified document to be printed matches a document in a registered DMS, the postmark server authorizes the postmark client to add the graphical postmark in a print stream corresponding to the print event for the specified document.

Abstract: An identifier is received with a portion of a postal address. That portion is compared against multiple additional postal addresses associated with the identifier. If a match is detected, a confirmation is transmitted to a requestor who originally sent the identifier and the portion of the postal address.

Abstract: Different residences can be communicatively linked to a communication backbone via a multi-access gateway, where each residence comprises an adapter through which a set of IP devices directly connect to the multi-access gateway via IPSec compliant communication channels. The multi-access gateway can connect each of the IP devices to remotely located resources. Telecommunication services can be provided to the IP devices in the residences for fees. The multi-access gateway can controls specifics of the telecommunication services, which can include emergency (e.g., 911) services, home control services, and residential administration services. Any of the telecommunication services can be initiated, modified, or terminated by a carrier maintaining the multi-access gateway on a per residence basis for any of the different residences.

Abstract: A server device includes a communication unit, a storage unit, and a control unit. The control unit is configured to perform determining whether or not the residual amount of recording material in a cartridge is equal to or less than a first threshold, and determining whether or not the estimated number of cartridges is equal to or less than a second threshold. In response to determining that the recording material is not more than the first threshold and the number of cartridges is not more than the second threshold, the control unit transmits to an external device via the communication unit an order instruction to deliver a cartridge to the user of the image forming apparatus.

Abstract: A system of border detection on a document and for producing an image of the document is provided. In an exemplary embodiment, the system comprises: a frequency specific reflective border on the document; an image capture device; a filter tuned to the frequency of the reflective border; a border detection algorithm; and a processor communicatively linked to the image capture device, to the notch filter, and to the border detection algorithm. The image capture device is configured to capture an image of the document. The processor is configured to apply the filter to the captured image and to produce a second frame. The processor is further configured to apply the border detection algorithm to the second frame to determine a document border mask. The processor is further configured to apply the border mask to the captured image to produce a document image.

Abstract: The invention relates to a method 30 for managing at least one processing relating to an application supported or to be supported by a token. The token comprises means for processing data, means for storing data and means for communicating with outside. According to the invention, the method comprises steps in which at least one token user is required to give or not to give her/his authorization 38 before executing the at least one processing relating to an application supported or to be supported by the token; and the token verifies 316 whether the at least one token user gives or does not give her/his authorization. The invention relates also to a corresponding token likely to cooperate with a terminal.

Abstract: Even for encrypted programs, when all modules are decrypted all at once at the time of execution, it is possible to analyze codes stored within a storage area. Therefore, a program execution and decryption method that prevents easy analysis via reverse-engineering is required. In order to solve the aforementioned problem, this invention provides a program complex that allows execution of modules while modules are being decrypted upon execution, even if a program has been started. Thereby, modules cannot be easily analyzed and program tamper resistance can be improved.

Abstract: Method for granting a plurality of electronic communication devices access to a local area network (LAN) via an access point using a single cryptographic key to secure communications exchanged through the LAN. The method comprising an activation phase performed once at initialization of the LAN and an operating phase wherein the electronic communication devices accesses the LAN. The activation phase comprising: providing the cryptographic key in a digital form by the access point; transferring the cryptographic key to a master device, switching the access point into a secure mode in which any further communication with the access point is secured with the cryptographic key. The operating phase comprising: transferring the cryptographic key from the master device to the electronic communication devices. The cryptographic key is converted from its digital form into a graphic form and then transferred in the graphic form to the electronic communication devices during the operating phase.

Abstract: A system and method enabling a recipient correspondent of a keyed PV signature to convert it to a signature with properties similar to a traditional signature (i.e., where the message is public and may be verified by anyone), removing the keyed aspect of the signature. The recipient correspondent may transfer the converted signature to a third party and provide the third party with a proof of knowledge such that the third party may be convinced that the originator of the signature signed the message.

Abstract: A method of generating a digital signature at a postage meter, in which method a postal imprint is printed on a mail item once said mail item has been weighed and once its postage amount has been determined, said postal imprint being associated with a digital signature generated by means of a secret key on the basis of constant data and variable data, said variable data comprising only a fingerprint code extracted upstream of the weighing from a three-dimensional structure of the fibers of the mail item.

Abstract: The present invention is directed to systems and methods which restrict the use of Value Bearing Indicia (VBI) such that a general purpose interface application can be used to securely and/or precisely print VBI. A method and/or system of embodiments of the invention, includes a general purpose interface application being operated on a general purpose processor to request VBI, and in response to that request, receiving a content object comprising both the VBI and defined parameters which are controlled such that the general purpose interface application's use of the VBI is restricted.

Abstract: A system and method for generating a return label for merchandise being returned from a buyer or consumer in a first country to a merchant in a second country. A name and address of a consumer in the first country desiring to return merchandise and merchant or seller information including a merchant identifier is received. An address for receiving returns for the merchant or seller in the second country is accessed based on the merchant information. One or more machine readable identifiers for use by a first country carrier and for use by a second country carrier based at least on the consumer information, and information for routing the return merchandise are generated. A return label for merchandise being returned from the consumer to the merchant is generated. The return label can include the machine readable identifiers and a customs declaration for the merchandise.

Abstract: Systems and techniques for mediating user communications. A user persona manager maintains one or more user profiles and manages user interactions with other parties and with service providers based on user preferences associated with the user profile or profiles selected for a particular interaction. The persona manager receives a single set of user authentication information to establish the user identity, and provides previously stored information to other parties and service providers as appropriate, and otherwise conducts user interactions involving communications initiated by or on behalf of the user. The persona manager also examines interactions initiated by others, selects user profiles appropriate to the interactions, and routes and responds to the interactions based on information stored in the user profiles.

Abstract: In an embodiment, an apparatus includes a control logic to selectively audit transactions between the apparatus and a separate entity based on a type for the transactions. The apparatus also includes an encryption logic to encrypt an audit log that includes at least one attribute of one of the selectively audited transactions.

Abstract: Electronic messages may be processed using a stamp authority by receiving an electronic message, identifying a stamp associated the message, determining if the stamp is valid, and, if the stamp is determined to be valid, distinguishing the message from messages with which a valid stamp is not identified.

Abstract: A method for transporting a set of items includes predetermining a destination point for each item of the set and for each further item which passes through the sorting system, generating for each item a current image of the item from a predetermined viewing direction, determining the predetermined destination point of the item, and initiating a transport of the item to the destination point. The method includes further transmitting a computer-readable description of the set to a data processing system which is connected to the sorting system. The description includes a reference image of the item from the viewing direction. For each item which passes through the sorting system, the method includes automatically deciding by the data processing system whether or not the item belongs to the set, wherein the data processing system compares the generated current image of the item with the reference image.

Abstract: In a method and an arrangement for provision of at least one secured service via a security module of a franking machine for at least one procedure for data processing that is executed in a data processing device that can be connected with the franking machine, the procedure requests a secured first service from the security module in a request step; and the security module provides the first service in a provision step subsequent to the request step. The security module verifies an authorization to request the first service via the procedure in a verification step preceding the provision step.

Abstract: Methods and systems for verification of indicia that do not require key management systems, and in which revocation of key pairs is easily performed without adding costs to the verification process are provided. Indicia are generated and authenticated utilizing an identity-based encryption (IBE) scheme. A key generating authority generates a private key for a PSD, distributes the private key securely to the PSD, and provides public information for use by a verification service when verifying cryptographic digital signatures generated with the private key. The corresponding public key is a string consisting of PSD information that is provided as part of the indicium. The verification service can verify the signature of each indicium by obtaining the public key string from the indicium, and utilizing the key generating authority's public information.

Abstract: This invention relates to system and method for conducting a competition. Specifically, the invention relates to a computer-implemented peer-to-peer anonymous evaluation to determine a winner of a competition.

Abstract: Particular embodiments provide a method for orchestrating an order fulfillment business process that includes a sub-process. In one embodiment, abstraction of business processes from an underlying information technology (IT) infrastructure is provided. An orchestration process can be designed using sub-processes such that the sub-process is assembled at run-time into an executable process. The sub-process may be defined in an interface as a single step. A plurality of services as then assembled as steps in the executable process at run-time.

Abstract: A utility financial model involves the setting of a new utility rate after the introduction of a new utility technology that provides immediate capacity relief, reducing the base load capacity and the peak load capacity to electric power providers. The new utility rate is not based solely on performance of the new utility technology but rather based on fixed and variable costs to introduce the new utility technology.

Abstract: A method and system for secure package delivery utilizing digital signatures is described. In one configuration, data regarding the weight, dimensions and origination are cryptographically processed to create an authentication digital signature with message retrieval capability. The data is read and independently verified at the package destination.

Abstract: An initiator service executed by a host server manages communications with wireless client devices concerning information accounts centrally stored in a data repository. In response to authenticating a user of a wireless client device, the initiator service may prompt the user to specify information to be retrieved from his information account and to specify a recipient of the retrieved information. The initiator service may then manage the retrieval and distribution of the specified information. The initiator service may also interact with a wireless client device to establish and distribute temporary authorizations to access information accounts. The initiator service may further receive promotion codes from wireless client devices and may query databases for data associated with each promotion code. Data received from the database may be transferred by the initiator service into an information account owned by the user of the wireless client device.

Abstract: An embodiment defines access control allowing the expression of access control rules using ontology based semantics and references an ontology subset using XPath as the ontological expression. The access control rules or access criteria are defined by an access control statement and may be expressed using classification criteria and ontology classes. The access control statement comprises a structural description that is used to define an asset and a logical expression that may be used to express the classification criteria. The access control statement defines access policy for various assets.

Abstract: A method and system of providing postage indicia to a user. The method includes receiving an account number of the user at a computer server associated with a postage provider and receiving a request to print one or more postage indicia from the user at the computer server. The method further includes selectively prompting the user to enter an activation code associated with a plurality of postage labels by the computer server, wherein the prompting is waived if a predetermined parameter is satisfied; and sending, by the computer server, an authorization to print one or more postage indicia on at least one of the plurality of postage labels to the user if the activation code is valid.

Abstract: An on-line value bearing item (VBI) printing system that includes one or more cryptographic modules and a secure database is disclosed. The secure database includes account balances and other information for all of the on-line value-bearing item system customers and is capable of preventing access by unauthorized users. Also, a secure communication network is in operation to prevent unauthorized access to the users' data stored in the database. A plurality of subsystems located on the server system side of the on-line VBI system provide services related to purchasing, accounting, and printing of VBI. In addition to the secure database, the server system includes one or more cryptographic modules for authenticating, processing value for the VBI, and generating indicia data for the plurality of users.

Abstract: There is provided a method and system for producing a label that can be applied onto a mailpiece. An exemplary method comprises providing a data service via a network node, the data service being performed in a provider server of a service provider. The exemplary method also comprises performing a one-time printing of the label via a control program, such that an intelligent document is transmitted from the provider server via a network to a user client, the one-time printing being done if a network connection exists between the user client and the provider server, and if, on the basis of a query to the provider server, it has been ascertained that that label had not been printed before. The exemplary method additionally comprises transmitting a message from the user client to the provider server when the label is printed for the first time. The exemplary method further comprises logging the printing in the provider server in response to the message.

Abstract: In a franking system, a postal security device (PSD) is used to account for postage dispensation, and generate digital signatures for inclusion in postage indicia to authenticate same. In accordance with the invention, the PSD includes multiple crypto processors which participate in franking transactions and generate the digital signatures in a multiplexed manner. Each crypto processor verifies the accounting of postage dispensation leading to and including the transactions in which the crypto processor participates. In addition, the crypto processors re-create transaction records and store them therein in a distributed manner.

Abstract: In a system including a postage printing device and a data center, wherein the postage printing device and the data center have a first set of keys for use in requesting and downloading a plurality of postage data records from the data center for use in printing postal indicia, a method of securely transferring the postage printing device and any postage value stored therein from a first user to a second user. According to the method, a new set of keys for requesting and downloading postage data records is generated, any current postage value stored in the printer device is securely transferred to the second user using the new keys and some of the first set of keys, and the first set of keys is zeroed, thereby protecting the first user from any potential theft or fraud of postage funds on the part of the second user.

Abstract: Electronic messages may be processed using a stamp authority by receiving an electronic message, identifying a stamp associated the message, determining if the stamp is valid, and, if the stamp is determined to be valid, distinguishing the message from messages with which a valid stamp is not identified.

Abstract: A method of processing a mailpiece that bears identifiers for postal use and identifiers other than for postal use, in which method said identifiers other than for postal use are printed on the mailpiece prior to it being fed into a franking machine suitable for printing a postal imprint on the mailpiece, wherein the identifiers other than for postal use are printed in an ink that is erased after the process of printing said postal imprint.

Abstract: A closed loop postage metering system includes networked meters that provide mailers and/or recipients the capability to request additional or modified services during processing of a mail piece by a carrier. The networked meter allows the Post to charge the mailer, or even the recipient for these services or to provide them with a refund or credit. The services can include changing the processing of the mail piece. Further, the closed loop postage metering system enables more precise methods of paying for services when multiple carriers handle a mail piece. A special case of such multiple carriers handling is the handling of international mail.

Abstract: Methods and systems for providing a proof of mailing service include receiving from a user a designation of a recipient to receive an item to be mailed, and receiving a free-form description of the item. Postage indicia is printed bearing an amount of postage for a mail piece containing the item. In response to the mail piece being processes by a postal authority, a transmission from the postal authority containing a scanned image of the mail piece is received. The recipient is then sent a notification that the item has been mailed, and the notification includes the free-form description of the item and access to the scanned image.

Abstract: Fraud detection mechanisms and methods that are adapted for inconsistent data collection are provided. Data is analyzed to determine normal operational variations from ideal system behavior. Profiles are developed for each individual sender, e.g., the number of multiple scans performed per confirmation number generated by each sender, and other parameters, such as delivery areas, e.g., the number of multiple scans performed per specific geographic area. If the sender's profile differs significantly from the normal operational variations, there is an indication of potential fraudulent activity and an investigation can be initiated. By analyzing a combination of sender and delivery scan data with system wide scan data, the effect of inconsistent data is minimized to significantly reduce the number of erroneous indications of fraudulent activity while still providing a high level of fraud detection.

Abstract: The present application generally relates to address data maintenance services using a mail processing system. The present application discloses techniques and equipment to update address information and usage of mail processing equipment to print delivery point barcodes that represent the current and accurate address information available for the addressee. The present application also provides a new approach for storing and searching address and name run time directories as part of a mail processing system using address reader technology.

Abstract: An on-line value bearing item (VBI) printing system that includes one or more cryptographic modules and a central database is disclosed. The cryptographic modules are capable of implementing the USPS Information Based Indicia Program Postal Security Device Performance Criteria and other required VBI standards. The modules encipher the information stored in the central database for all of the on-line VBI system customers and are capable of preventing access to the database by unauthorized users. Additionally, the cryptographic module is capable of preventing unauthorized and undetected modification, including the unauthorized modification, substitution, insertion, and deletion of VBI related data and cryptographically critical security parameters.

Abstract: The invention relates to a method for providing postal items with postal prepayment impressions, characterized in that data are generated in the customer system that are encrypted in such a manner that the value transfer center is able to decrypt them. To this end, the data are transmitted from the customer system to the value transfer center. The value transfer center then decrypts the data and re-encrypts them with a code not known to the customer system and transmits the encrypted data to the customer system.

Abstract: Systems, methods, and an article of manufacture for printing a new postal authority code on a mail piece prepared by and received from an inserter or wrapper. A barcode post-processing system receives a mail piece from an inserter and communicates with the image capture equipment. The barcode post-processing system during performs various functions. The functions can include receiving legacy address block information from the mail piece from the image capture equipment, processing the captured legacy address block information to determine one or more missing parameters of the new postal authority code to create processed data, and supplementing the captured legacy address block information data with the one or more missing parameters of the new postal authority code received from one or more data source.

Abstract: A reputation server is coupled to multiple clients via a network. Each client has a security module that detects malware at the client. The security module computes a hygiene score based on detected malware. The security module provides the hygiene score and an identifier of a visited web site to a reputation server. The security module also provides identifiers of files encountered at specified web sites to the reputation server. The reputation server computes secondary hygiene scores for web sites based on the hygiene scores of the clients that visit the web sites. The reputation server further computes reputation scores for files based on the secondary hygiene scores of sites that host the files. The reputation server provides the reputation scores to the clients. A reputation score represents an assessment of whether the associated file is malicious.

Abstract: Systems and methods are provided in which remote installed devices may be assigned various call-in times to contact a host controller. The host may schedule remote devices sequentially across multiple modems. Additional modems may be added to the system as more bandwidth is desired or required. The system may include additional, unscheduled bandwidth to account for calls made by devices outside of the assigned call times.

Abstract: In a method and arrangement for authenticated transmission of a personalized data set or program to a hardware security module in a device such as a franking machine, a system manufacturer buys security modules, from a security module manufacturer and incorporate the security modules at a production site in the device and loads a data set and/or an application program into the security module, making the device operable. Authentication occurs using a first security module-specific fixed code, a second security module-specific fixed code that is calculated from the first code according to a given algorithm, and a third security module-specific fixed code that is calculated from the second code and the data in the data set and/or in the program.

Abstract: A system and method for broadcast response generally employing RDS, DARC, or similar technology is provided, including a method for responding to a broadcast comprising extracting an event identifier from a broadcast signal; detecting a response by a user to the broadcast signal; polling a communications device to determine a user identifier; and communicating the event identifier and the user identifier when the user response is detected.