Abstract: A method and system for validating the creation and submission of absentee ballots is provided. An authentication/validation mark is generated and printed on an absentee ballot and/or the envelope that contains the absentee ballot. The authentication/validation marks include information such as, for example, the date and time of printing, an identification and location of the vote validator that generated and printed the mark, a unique identifier of the mark, and a digital signature of the authentication/validation data. Upon receipt of the absentee ballot by election officials, the authentication/validation marks printed on the absentee ballot and/or envelope containing the ballot can be verified by authenticating the digital signature and verifying the validity of the data in the mark. If the mark is verified, the authenticity and creation/submission dates of the absentee ballot are guaranteed and the absentee ballot can be accepted as a valid absentee ballot for election purposes.

Abstract: In a method and arrangement for protecting a device against operation with unauthorized consumables a code number range for a device is allocated to a customer number in the memory of a data bank remote from the device. The consumable is aggregated with a generated code number which has a predetermined relationship to a reference code number from a group of reference code numbers that are stored in the device and lie in the aforementioned reference code number range. The allocation is stored in the data bank as a dataset with a customer number, a code number and an identification number of the consumable. In a device remote from the data center, a recognition of the need to change the consumable is recognized, whereupon a message is displayed for entering the code number, the validity and authenticity of the consumable in the device is checked on the basis of the entered code number and the reference code number range. The currently stored reference code number is then made unavailable for further use.

Abstract: A method and a system for enabling secure authentication of a user in a computerized card access transaction. A card, identified by an identification number is issued to the user, containing software for generating a surrogate number referred to as a Cybercoupon for use in place of the regular card number. Online intrusion is avoided and the system is rendered portable for use on any computer equipped with a compatible operating system, by avoiding storage of any part of the system on the user's computer, placing the entire system instead on the card itself. The card contains advertising which appears on the user's computer screen. The card is protected by a password. If an incorrect password is entered more than a preset number of times, an “alert” Cybercoupon is generated containing a code advising the card issuer that an irregular attempt has been made to access the card.

Abstract: A secure system for creating digital receipts, while minimizing the amount of data that is encoded in the digital receipt. The digital receipt provides authentication for a transaction. A digital receipt may be printed in the form of a code. The digital receipt digitally encodes a transaction identification code, a transaction amount or number of units authorized, and a digital signature. The digital receipt may be scanned or read to verify the authenticity of the transaction.

Abstract: A method of reissuing secured postage indicium includes the steps of dispensing from a postage meter an original postage indicium as evidence of postage dispensed for a requested postage transaction, the original postage indicium including postage information and authentication information; storing within the postage meter a transaction record for the dispensed original postage indicium, the transaction record including the postage information and the authentication information; and receiving at the postage meter a request to reissue the original postage indicium.

Abstract: A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services.

Abstract: Methods and apparatus are disclosed for using existing envelope feeding machines to print IBIP indicium, and CASS approved address information and bar code information. The invention is shown to include a print head operative in response to a print signal and a controller, electrically connected to the print head, for generating the necessary print signal. A frame defining a printing attachment mechanism adapted for being positioned proximate the feeding machine is provided for attachment of the print head oriented so that envelopes traveling along the feed path will pass proximate the print head. It is preferred for the printing attachment mechanism to include a plurality of print heads. In an alternative embodiment, the controller is operative in response to a control signal and a computer is provided for generating the control signal.

Abstract: The transmission and reproduction of an original document transferred via a data network can be assured when the printing mechanism generates a unique serial number for the document being printed. The sender of the document is assured that the intended recipient received the document, paid for it, and was able to print it by receipt of the unique serial number and a request for an encryption key by which certain information in the document was encrypted.

Abstract: A system and method is disclosed for providing confirmation relating to the distribution of a mailpiece within an international mailing system. The invention includes a determination of postal data required for performing value-added services desired for the mailpiece. The value-added services data includes addressing information for a return receipt from an intended mailpiece recipient through a final handling postal authority and a first postal authority to the original mailer. A machine readable mark is created which includes return data and value-added services data. During the delivery process, the value-added service is captured by the final handling postal authority, the mailpiece is delivered to the intended recipient, the value-added service is performed, and the data related to the delivery is captured by the final handling postal authority.

Abstract: A system for managing shipping parcels that includes a specially adapted set of load planning tables, or, from another aspect, a set of load planning tables for use with a system for managing shipping parcels. The system includes: a planning system for providing a rated route; and a shipping database for providing stored planning information and for providing a stored rated route for shipping the parcel.

Abstract: FIG. 6 shows the operation of modules 22 in processing a request for a digital postal indicium. At 72 the selected one of modules 22 receives the indicium request and the requested meter record and, at 76 confirms that sufficient funds are available. If not the request is rejected at 78; again in a manner whose details form no part of the subject invention. At 80 the selected module constructs an indicium message having an appended indicium signature, which when printed in relevant part on a mailpiece will evidence payment of postage in the amount shown, and at 84 updates the requested meter record and appends a meter record signature. Generation of indicia and updating meter records is more fully described in specifications for the Information Based Indicia Program (IBIP) published by the United States Postal Service and further discussion is not believed necessary for an understanding of the subject invention.) At 86 the selected module updates the audit data.

Abstract: A postage meter includes a vault that accounts for postage dispensed by the postage meter; and a printhead module having a printhead for printing the postage dispensed; a smart card chip having a ROM having software code stored therein; an EEPROM having an encrypted key and executable code stored therein, a CPU; a RAM; and a flash memory having an encrypted pointer data file stored therein.

Abstract: A system and corresponding method for enabling the use of digital postage or, more generally, digital coin. The system includes, in the case of enabling digital postage, a digital postage generator, responsive to a request for digital postage, and further responsive to an initial pointer value, for providing a supply of digital postage, and further for providing verifying data for use in verifying portions of the digital postage when imprinted on mailpieces, wherein the digital postage is based on a random sequence of bits, wherein the digital postage generator includes a bitstream generator for providing a random sequence of bits associated with the initial pointer value, and also includes a digital postage manager for providing as the digital postage the random sequence of bits and the initial pointer value, and for providing as verifying data information indicating at least a portion of the random sequence of bits.

Abstract: A system that determines if mail contains life-harming materials before the mail enters the interior of a receptacle, i.e., mail box. This invention accomplishes the foregoing by issuing identification cards that uniquely identify mailers; having a scanner at a receptacle read the identification card and send the unique identifying code contained in the card to a data center that checks if the card is genuine; and stores the card's unique code before mail is permitted to enter the interior of the receptacle.

Abstract: System and method for providing confirmation relating to the distribution of a mailpiece within a mailing system includes a determination of postal data required for postage evidencing of a mailpiece originated by a mailer. The postal data is combined with other data related to value-added services desired for the mailpiece. The value-added services data includes addressing information for a return receipt to the mailer. A digital postmark which includes the postal data and the value-added services data is created. At delivery of the mailpiece, the digital postmark is read and the value-added services data is captured from the read digital postmark. A confirmation message is sent to the mailer and/or other interested third parties, in accordance with information contained in the value-added services data.

Abstract: A method and system for providing external user interfaces is described. In one configuration a co-located external processor and a business machine negotiate a communications connection. The co-located external processor then utilizes a server to determine a shared secret in order to pair a wireless connection with the business machine in order to act as the user interface for the business machine. In another configuration, the co-located external processor is connected to a remote data center that authenticates the user and provides the user interface code and secret pairing information to the co-located external processor. In another configuration, the co-located external processor performs data processing for providing a cryptographically processed print stream to a postage meter.

Abstract: A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services.

Abstract: A system and method for remote postage metering of postage indicia, including demanding a desired postage amount and subsequently printing the postage indicia onto a piece of mail. A user inputs certain necessary information, as well as additional desired information, into a local processor-based system. The local system then assembles a postage demand in suitable format and transmits the same to a remote postage metering device. The remote postage metering device then verifies the demand for authority to demand and valid funding. Upon verification, the remote postage meter serves the transaction by configuring a shared device using virtual user device data structures and assembles a data packet representing an authorized postage indicia. The data packet is transmitted to the local system for printing. Printing of the postage indicia may be unaccompanied, or may include additional information.

Abstract: In a contents sale system, original contents data are encrypted into encryption-resultant contents data in response to original playback key data. The original playback key data are encrypted into first encryption-resultant playback key data. The first encryption-resultant playback key data are encrypted into second encryption-resultant playback key data in response to an ID of a sale destination terminal apparatus. The encryption-resultant contents data and the second encryption-resultant playback key data are transmitted to the sale destination terminal apparatus. The sale destination terminal apparatus is enabled to decrypt the second encryption-resultant playback key data into the first encryption-resultant playback key data in response to the ID of the sale destination terminal apparatus. The sale destination terminal apparatus is enabled to decrypt the first encryption-resultant playback key data into the original playback key data.

Abstract: A cryptographic method for providing a level of security by a postage security device, which generates a digital token using a cryptographic key. When it is required to make a key change in order to improve the level of security, the postage security devices replaces the cryptographic key with a new cryptographic key, wherein the new cryptographic key has a key length that is equal to or greater than the replaced cryptographic key. The new cryptographic key can be generated by the postage security device based on a given key length, or selected from a plurality of replacement keys stored in a storage device.

Abstract: An on-line value bearing item (VBI) printing system that includes one or more cryptographic modules and a central database is disclosed. The cryptographic modules are capable of implementing the USPS Information Based Indicia Program Postal Security Device Performance Criteria and other required VBI standards. The modules encipher the information stored in the central database for all of the on-line VBI system customers and are capable of preventing access to the database by unauthorized users. Additionally, each cryptographic module is capable of providing audit support functions that enable secure logging of all sensitive actions.

Abstract: A payment processing system includes a data center, a postage metering system and a control system in operative communication with the data center and the postage metering system. The postage metering system is located remotely from the data center. The control system obtains payment data via the postage metering system where the payment data includes a payee and a payment amount. Further, the control system dispatches payment from the data center to the payee for the payment amount.

Abstract: A transaction evidencing system includes a plurality of computer systems operatively configured to form a network with one of the computer systems functioning as a server and the remaining computer systems functioning as clients. Each of the computer systems includes a processor, memory and storage media. At least some of the storage means includes non-metering application programs that are selectively run on the client computer systems. An unsecured printer is operatively coupled to at least one of the computer systems for printing in accordance with the non-metering application programs. A portable vault card, which is removably coupled to the server computer system, includes digital token generation and transaction accounting processing. The client computer systems issue requests for digital tokens to the server computer system in response to requests for indicia from the non-metering application programs.

Abstract: In a method and an arrangement for increasing the throughput of mail when franking with a security imprint, the editing of the print image data is undertaken by a postage meter machine processor, and the calculation of the security code is undertaken by a separate security module while the print image data are being edited. A high system clock performance is achieved by interleaving of the two calculation tasks.

Abstract: A method for certifying the public key of a digital postage meter using a public key encryption system by a certifying authority. A certifying station and a user station, or a digital postage meter, exchange information and the user station and downloads, or the meter derives, a public key from the exchanged information. The certifying station also publishes related information and its public key. A third party can derive the public key corresponding to the meter's private key by operating on the published information with the certifying station public key.

Abstract: A postage metering system includes a base and a user interface mounted to the base. The user interface includes a micro controller, an internal socket for receiving an integrated circuit chip and a smart card reader interface connector for interfacing with an external smart card. The micro controller is configurable to address either the internal socket or the smart card reader interface connector to access postage metering functionality.

Abstract: An improved system for providing early warning preemptive postal equipment replacement. Selected performance parameters the postal equipment are monitored and compared against predetermined operational boundaries. The system is capable of providing for variability in the performance parameters, wherein these parameters may be permitted to vary over time and usage of the equipment. The monitoring gives an indication of the overall system performance. If the system performance goes outside of operational boundaries, or changes significantly over time, replacement of the equipment can then be scheduled with minimal inconvenience to the customer.

Abstract: A method for acquiring customers for meter licenses for PC postage. The method includes the steps of a meter vendor obtaining a first meter license from the Post for a first meter; loaning the use of a first meter licensed in the customer's zip code to a customer; requesting a second meter license for the customer; initializing the first meter for use by the customer; and transferring the first meter to the Customer's meter license when the second meter license is received. Alternatively, when the second meter license is received a second meter is assigned to the customer and the first meter is reassigned to the meter vendor.

Abstract: A secure postage-metering device has a computer and a printhead drivable by the computer for imprinting indicium on a piece of mail. Also included is a receiver for receiving programming instructions from a remote location for operation of the computer, and apparatus for establishing an amount of postage to be imprinted as part of the indicium on the piece of mail. The computer is operative in response to the programming instructions to cryptographically encode the indicium by use of a coding key included within the programming instructions. The computer is operative further in response to the programming instructions to authorize an amount of postage to be placed on the mail. An encoded indicium on the piece of mail is readable by a reading device of the Postal Service for verification of authenticity of postage appearing on the piece of mail.

Abstract: The invention relates to a method for verifying the authenticity of a franking note placed on a postal article. According to the invention, cryptographic information contained in the franking note is decoded and used for verifying the authenticity of the franking note. The inventive method is characterized in that the reading unit graphically records the franking note and transmits it to a verification unit and in that the verification unit controls a sequence of partial tests.

Abstract: A method, system, and apparatus for authenticating transactions and records is disclosed. A nonce stamp is a physical article that is relatively difficult to copy illicitly, and that bears a “nonce” number. The “nonce” is a relatively unique identifier, in that it is chosen from a distribution such that any given user/customer is extremely unlikely to obtain two nonce stamps bearing the same nonce. The method includes: presenting a nonce stamp having a nonce number; presenting a numbered digital certificate derived securely from the nonce number; and authenticating the transaction by comparing the number on the digital certificate and the nonce number. The digital certificate is typically obtained by users/customers in exchange for the purchase price of a desired transaction. The apparatus is an information-based indicium including a nonce stamp, and a digital certificate including a number derived securely from the nonce.

Abstract: A method and device for improving the efficiency of a postage meter by using a sensing to detect the edges of an incoming envelope in order to initiate a multi-speed profile for transporting the envelope with different speeds through the postage meter. With the multi-speed profile, the postage meter is allowed to have sufficient time to process mail related data and provide mail related data to a print head before the envelope reaches a print zone where the print head starts printing an indicia on the envelope.

Abstract: A postal system includes a local computer having a user interface and an associated storage unit for storing a secure data file that contains postal (e.g., accounting) data. A secure processing unit interfaces with the local computer and performs the secure processing normally associated with a secure postal environment. The secure processing unit can be designed to receive power from the computer to which it couples, and generally does not require special interconnect. By using the secure processing unit to perform the secure processing and the local computer to perform other postal functions (e.g., user interface), complexity is reduced which translates to faster speed of operation and a more economical hardware design.

Abstract: A method and apparatus for providing pay programs to viewers, distributes program guide information representing the program subject which will be broadcast receives subscription information from a person who has received the distributed program guide information and wishes to subscribe to the program, charges a subscription charge to a person who wishes to subscribe on the basis of the subscription information, and distributes the program as a broadcast signal, which is produced or purchased by using the subscription charge that has been collected at the step of charging, so that it is possible to provide only programs that meet the viewer's demands.

Abstract: A method for communicating a re-keying message from a postage meter to a registration authority includes the steps of determining at the postage meter that a current key needs to be replaced with a new key; generating in the postage meter the new key; creating in the postage meter the re-keying message, the re-keying message including at least a device identifier and the new key; using the postage meter for printing the re-keying message in a machine-readable form on a recording medium; and mailing the recording medium to the registration authority.

Abstract: A postage metering system includes a plurality of computers operatively connected as part of a computer network and operating as client computers on the computer network. At least one postal security device (PSD) is coupled to at least one of the client computers (local client computer). The PSD includes unique identification the ability to store postal value and generate digital signatures. The client computers function as a postage metering network wherein a client computer other than the local client computer (remote client computer) requests evidence of postage payment from the PSD for concluding a postage metering transaction. The local client computer functions as a meter server and the remote client computer functions as a meter client on the postage metering network. The remote client computer initiates a postage metering transaction in the PSD by sending a request for evidence of postage payment to the local client computer.

Abstract: A system and corresponding method for verifying digital postal marks on mailpieces or, more generally, for verifying a mark on any kind of document where the mark represents value and might be counterfeited or used fraudulently, the system including in the specific case of verifying a digital postal mark: a plurality of mail processing machine verification modules (MPMVMs), each responsive to information obtained from sampled mailpieces, and each further responsive to a control file specifying patterns of sampling and specifying responses to sampling results, each MPMVM performing local verification of the sampled mailpieces according to the control file, each MPMVM for providing the information obtained from the sampled mailpieces and optionally the local verification results; and a data center verification module (DCVM), responsive to the information obtained from the sampled mailpieces and also to the local verification results, for analyzing the information obtained from the sampled mailpieces, for period

Abstract: A file system security driver and vault method and system particularly applicable to a system in which protected data is segregated from other data, which allows for back-channeling of file data in order to ensure that files created by applications using secured data do not cause data leaks of secure data. In a preferred embodiment, a file system security driver is a driver resident on the kernel level which monitors file system requests and allows limited access to files resident on the vault and creation of files within the vault when necessary.

Abstract: In a postage meter system (FIG. 2), a user enters information,indicative of a batch of mail pieces to be franked (30). The mail pieces are franked(31), and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine(33). The data digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD)(32). The data are communicated(34), preferably by means of public-key cryptography(35). These data are then made available to the postal authority in a secure way.

Abstract: System and method is provided for adding addressing information to an indicium printed by a closed system metering device. A scanning device is coupled to a closed system postage meter for scanning addressing information printed on a mailpiece. The addressing information is combined with other information relating to the postage payment for the mailpiece to obtain postal data relating to the mailpiece. The postal data, including the addressing information is used to generate an indicium for the mailpiece. The indicium includes cryptographic evidencing of postage payment. The closed system metering device prints the indicium on the mailpiece.

Abstract: System and method for performing cryptographic operations include providing at least one processor for performing cryptographic operations, memory coupled to the processor for use in performing the cryptographic operations; and a storage component coupled to the processor for storing and retrieving information calculated and used in the cryptographic operation. The processor, memory and storage component are securely enclosed whereby direct access to the cryptographic operations is prevented. A power source, which is external to the secure enclosure, is coupled to and supplies power to the processor, the memory and the storage component. Circuitry within the enclosure maintains a constant power drain on the power source.

Abstract: Systems and mehods for electronic postmarking of location data are provided. Electronic postmarking of location data (S.20) includes generating a hash value corresponding to merged data (S.30). Electronic postmarking further includes generating an electronic postmark data structure (S.40) comprising the hash value and a date/time stamp. The electronic postmarking data structure (S.40) may further include a digital signature.

Abstract: Systems and methods are disclosed for providing secure electronic archiving of customer (120) data over a network (110). Electronic postmarks are used to track archival of the data, access request for the archived (101) data, and fulfillment of the access requests.

Abstract: In a method and arrangement for variable generation of cryptographic securities of communications in a host device, for cryptographic security of a communication for a first purpose a first signature is used and for cryptographic security of a communication for a second purpose a second signature is used, the signatures being differentiated from each other by the type of their generation. A cryptologic module has a number of logic circuits and a changeover switch and is arranged externally of the postal security device and is connected at its output with an information input of the postal security device that has a logic circuit that applies a digital signal algorithm to the output signal supplied by the output in order to generate a signature.

Abstract: A method of downloading information to an indicia marking device includes generating a request for information for the device, providing a description of the information to the device in response to the request, confirming the request based on the description, and providing the requested information upon recognizing the confirmation. The method also includes providing an authorization code to the device, and utilizing the authorization code to install files associated with the information. The method further includes establishing a real time connection between a first computer and the device through a second computer, and providing files associated with the information through the real time connection. The method still further includes retrieving files and storing files associated with the information, and providing the files to the device during a next occurring communication.

Abstract: The invention provides a method of processing an information form such as a postal change of address form. Such a form includes various data elements, such as a name of a person submitting the form and the information on which action is to be taken. In the case of mail forwarding, these data elements would include, for example, the name of the person that wishes mail to be redirected, an old address to which mail for that person was previously sent, and a new address to which mail for that person should be sent.

Abstract: A method for certifying the public key of a user wishing to communicate using a public key encryption system by a plurality of certifying authorities. A plurality of certifying stations and a user station exchange information and the user station derives a public key from the exchanged information. The certifying stations also publish related information and their public keys. A third party can derive the public key corresponding to the user's private key by operating on the published information with a summation of the certifying station keys.

Abstract: A cryptographic device and method of operation for encrypting messages. The device can be incorporated into a postage metering system to provide cryptographically secured postal indicia. The device and method provide increased security against side-channel attacks such as differential power analysis (DPA). An encryption key is transformed with a first function to generate temporary key as a function of a random number. A message is encrypted with the temporary key to generate a modified message. The modified message is transformed with a second function to generate an encryption. The encryption generated is identical to a direct encryption of the message with the untransformed key. The temporary key is changed frequently to protect against side-channel attacks.

Abstract: The invention relates to a method for providing letters and parcels with postal remarks. A client system loads a fee amount from a value transmission center through a data line, and the client system controlling the printing of postal remarks on letters and parcel sand the value transmission center transmitting a data packet to the client system. The method is characterized in that the value transmission center generates a code and transmits the code to the client system. The invention also relates to a client system for franking letter and parcels and to a value transmission system for using in a franking method.

Abstract: A method for certification by a plurality of certifying authorities of the public key of a user wishing to communicate using a public key encryption system while asserting only a subset of rights. A plurality of certifying stations and a user station exchange information and the user station derives a plurality of private keys from the exchanged information. The certifying stations also publish related information and their public keys. The user communicates using a private key formed by summing selected ones of said plurality of private keys corresponding to asserted rights. A third party can derive the public key corresponding to the user's summed private key by operating on the published information with a summation of the certifying station public keys.