Abstract: A postage metering system that includes a secure metering device (SMD) coupled to a printer. The SMD generates an indicium and the printer receives and prints the indicium onto a label. The printed indicium label includes a human-readable portion, a machine-readable portion, and an identifier portion. The human-readable portion includes at least one data element, with each data element providing a particular postage information. The machine-readable portion includes a combination of one or more graphical representations and encoded texts. The identifier portion exhibits characteristics useful for authenticating the indicium label and can include a fluorescent strip, a micro printing portion, taggants, other identifiers, or a combination thereof.

Abstract: A method for printing an indicium with a printer coupled to a personal computer includes the steps of collecting indicium data in memory of the PC, generating an indicium bar code relating to the indicium data, creating in the PC memory a printable image of a valid indicium including the indicium bar code, printing the printable image, and destroying the printable image in the PC memory as soon as the printable image has been printed. Messages of the PC operating system can be monitored for printing activity such that the printable image can be modified after a first copy of the printable image has been printed. The step of creating a printable image includes determining if more than one copy of the indicium is to be printed, and changing the number of copies to be printed to one when more than one copy is determined. The step of creating a printable image renders an indicium image to a memory device context. The printable image can be destroyed by overwriting the printable image with other information.

Abstract: A method and system for providing external user interfaces is described. In one configuration a co-located external processor and a business machine negotiate a communications connection. The co-located external processor then utilizes a server to determine a shared secret in order to pair a wireless connection with the business machine in order to act as the user interface for the business machine. In another configuration, the co-located external processor is connected to a remote data center that authenticates the user and provides the user interface code and secret pairing information to the co-located external processor. In another configuration, the co-located external processor performs data processing for providing a cryptographically processed print stream to a postage meter.

Abstract: A system and method for instantly printing PC postage before establishing a postage meter account. The method includes the steps of a meter vendor obtaining a first meter license from the Post for a first meter; loaning the use of a first meter licensed in the customer's zip code to a customer; requesting a second meter license for the customer; initializing the first meter for use by the customer; and transferring the first meter to the Customer's meter license when the second meter license is received. Alternatively, when the second meter license is received a second meter is assigned to the customer and the first meter is reassigned to the meter vendor.

Abstract: A system is disclosed for distributing postage over a public network in a manner that is secure in the case of third party interception, indicia for which can be efficiently printed by a postal customer on items to be mailed, and that facilitates authentication of the printed indicia. When the postal customer purchases postage from the postal service, the postal service provides information which the postal customer uses to generate pseudo-random numbers associated with the respective units of postage. When the postal customer prints an indicium for a respective unit, it appends the associated pseudo-random number, which the postal service uses to authenticate the indicium. The pseudo-random numbers are generated using a methodology by which the postal customer can generate pseudo-random numbers for units which have been purchased, but not for units which have not yet been purchased.

Abstract: A method for recovering postage for metered mail pieces that have not been posted, the method includes: placing information that uniquely identifies the mail piece in a postal indicia; storing the information that uniquely identifies each metered mail piece at a remote site; requesting a refund for a mail piece that has not been posted; determining if the information in the postal indicia that uniquely identifies the mail piece is the same as the information that uniquely identifies the mail piece that is stored in the remote site; and refunding the postage if the information in the postal indicia that uniquely identifies the mail piece is the same as the information that uniquely identifies the mail piece that is stored in the remote site.

Abstract: The present invention relates to postal metering devices and mail systems that variously employ digital watermarking techniques. In one implementation we provide on an envelope a marketing image in addition to postage indicia. The marketing image includes a digital watermark embedded therein. The watermark includes a link to access information that is associated with the envelope's sender. In some cases the digital watermark is fragile, allowing us to determine whether the marking image or postal indicia is authentic.

Abstract: A postage metering system configurable to execute a security routine that inhibits certain transactions but maintains secure postage data. The system includes a security module coupled to a postage meter. The security module executes a set of transactions with the meter, and includes a processor and a memory. The processor executes a security routine upon occurrence of one or more defined events. The memory stores secure postage data. When the security routine is executed, selected ones of transactions between the meter and security module are inhibited, but the secure postage data stored within the memory is retained. The memory can also store security data (e.g., encryption keys) that are erased when the security routine is executed. The security routine can be initiated upon: (1) failure to receive an authorization signal by the security module within a particular time-out period, (2) detection of tampering with the security module, (3) receipt of a command from the meter, or other events.

Abstract: In a method for improving the security of postage meter machines in credit transfers, having at least two modes, the presence of a security flag is necessary for operation of the machine. The security flag is erased in a step of the system routine if an unauthorized action occurs in an attempt to operate the postage meter machine, and the postage meter machine is switched into a first mode in order to effectively shut it down. Otherwise, a special mode for negative remote crediting is entered by setting a special flag when a predetermined operating action for lateral entry into the special mode is undertaken upon machine turn-on. The communication with the data center sequences under time and status (flag) monitoring by the control unit of the postage meter machine until the transaction is completed. The data center monitors the behavior of the postage meter machine user on the basis of data communicated during the transaction.

Abstract: A system and method of evidencing postage payment includes a local postage printing system requesting to a remote data metering center for the generation of postage evidencing information. The request includes a postage amount to be printed on a mailpiece. The remote data metering center determines a postal origin corresponding to the request for postage evidencing information, then accounts for the postage amount in a general account corresponding to the local postage printing system and in a payment account corresponding to the determined postal origin. The remote data metering center generates postage evidencing information in response to the request. The postage evidencing information includes a digital token and the determined postal origin. The remote data metering center sends the postage evidencing information to the local postage printing system which prints the postage evidencing information and the determined postal origin on the mailpiece.

Abstract: In a postage meter system, a user enters information indicative of a batch of mail pieces to be franked. The mail pieces are franked, and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine. The data are digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD). The data are communicated to a server, where the data are authenticated, preferably by means of public-key cryptographic means. These data are then made available to the postal authority in a secure way. Customer accounting is based on statistical data gathered by the postage printing base. Such data may be accumulated and stored in the PSD or in the postage printing base outside of the PSD. The cryptographic protection inherent in the PSD, of the sensitive data, effectively detects or prevents tampering. In addition effective backup and recovery mechanisms may be put into place to protect customer as well as third-party interests.

Abstract: A method for communicating a re-keying message from a postage meter to a registration authority includes the steps of determining at the postage meter that a current key needs to be replaced with a new key; generating in the postage meter the new key; creating in the postage meter the re-keying message, the re-keying message including at least a device identifier and the new key; using the postage meter for printing the re-keying message in a machine-readable form on a recording medium; and mailing the recording medium to the registration authority.

Abstract: A method of remotely accessing a postage security account at a data center from a remote user device begins with a remote user assigning a password to the user's postage security account at a data center. A cryptographic key corresponding to the user's postage security account is provided to the remote user device and is stored at the data center. The password and the cryptographic key are combined at the remote user device and the data center respectively to obtain a user authentication key. An authentication algorithm is performed using the user authentication key to obtain a remote access message. The remote access message is sent to the data center to initiate request for access to the postage security account by the remote user device. The remote user device is authenticated for accessing the postage security account when the data center verifies the remote access message.

Abstract: The present invention relates to a method for electronic franking wherein the customer is provided with an authenticable code which may be written or otherwise printed on a mail piece or mail piece. Given the authentic nature of the code, the code may be provided remotely. The code may be linked to a delivery address, the relationship later verified. Alternatively, the code may be the result of applying a precode and date of purchase to an algorithm thereby producing a resulting code. The resulting code can be easily verified. The algorithm is complex and difficult to reverse engineer, including an encryption algorithm.

Abstract: A postage metering system that includes a central processing system and a remote postage printing device (RPPD). The central processing system includes a secure metering device (SMD) operatively coupled to a central computer and configured to store accounting information. The RPPD operatively couples to the SMD via a wireless communications link. The RPPD receives a user request for postage, transmits the user request to the SMD via the wireless communications link, receives a secure postage indicium from the SMD, and directs printing of an indicium. The secure postage indicium can be generated using digital signature, encryption, or encoding, or a combination thereof.

Abstract: A method and system for a virtual stamp dispensing metering system is provided wherein indicia of varying values are calculated at a data center and downloaded to a mailing machine on a periodic basis. The mailing machine securely stores the indicia and dispenses the indicia as needed. At the end of the period, any unused indicia are returned to the data center, the user's account is credited, and a new set of indicia are downloaded to the mailing machine. Accordingly, the processing requirements of the meter are reduced, as there is no longer any need to generate digital signatures, an attacker is prevented from generating indicia indefinitely if the security of the meter is compromised, as the cryptographic key is not resident at the meter, and tracking requirements of the meter are reduced, as the meter alone can not be used to generate postage funds.

Abstract: A system and method for providing postal services to a plurality of remote postal printing stations includes a communications facility for conducting communications between and a number of services provided by the system to the remote stations when the remote stations access the system. The services include at least one of key management, funds telemetering, software updating, postal rate updating, address cleansing, account management, and recording postal statistics. The communications facility may include an interface for Internet communication and an interface for modem communication. The interface for internet communication may include a remote access server and a plurality of application programming interfaces. A monitor may be provided for determining when any service is being accessed, to provide a signal to all other services that additional services can be provided to the remote station.

Abstract: A system (10) and method of evidencing postage payment include a local postage printing system (20, 22) requesting to a remote data metering center (30) for the generation of postage evidencing information (220, 320). The request includes a postage amount to be printed on a mail piece. The remote data metering center (30) determines a postal origin (220, 320) corresponding to the request for postage evidencing information (220, 230), then accounts for the postage amount in a general account (220, 320) corresponding to the local postage printing system (20, 22) and in a payment account corresponding to the determined postal origin (240, 340). The remote metering center (30) generates postage evidencing information (220, 320) in response to the request. The postal evidencing information includes a digital token and the determined postal origin (220, 320).

Abstract: A postage system includes a data center, a population of postage metering systems and a control system that is in operative communication with the data center and the population of postage metering systems. The population of postage metering systems are located remote from the data center and are geographically distributed. The control system receives an incoming telephone call at one postage metering system of the population of postage metering system, stores a voice message associated with the telephone call and retrieves the voice message from another postage metering system of the population of postage metering systems.

Abstract: A postage meter system includes a modem for receiving an incoming telephone call, a printer module for printing on a recording medium and a control system in operative communication with the modem and the printer module. The control system stores a voice message associated with the telephone call, translates the voice message into a computer based text and prints a print message using the printer module from the computer based text.

Abstract: A method and device for improving the efficiency of a postage meter by using a sensing to detect the edges of an incoming envelope in order to initiate a multi-speed profile for transporting the envelope with different speeds through the postage meter. With the multi-speed profile, the postage meter is allowed to have sufficient time to process mail related data and provide mail related data to a print head before the envelope reaches a print zone where the print head starts printing an indicia on the envelope.

Abstract: A method for controlling a postage metering system (1) defines a first set of postage parameters P1, P2, P3 to Pn associated with the generation of postage evidence in a postage metering system (10) and then initializes the postage metering system (10) with a subset of the first set of postage parameters F1, F2, F3 to Fn. The subset F1, F2, F3 to Fn defines a combination of the postage parameters for which the generation of postage evidence is not authorized. When a request for postage evidence is received, the request includes a second set of postage parameters P1, P2, P3 to Pn that are combined to form a postage parameter vector (PPV). The generation of postage evidence is inhibited when at least one of the postage parameters P1, P2, P3 to Pn in the second set matches one of the postage parameters in the first set F1, F2, F3 to Fn.

Abstract: A postage metering system includes a base and a user interface mounted to the base. The user interface includes a micro controller, an internal socket for receiving an integrated circuit chip and a smart card reader interface connector for interfacing with an external smart card. The micro controller is configurable to address either the internal socket or the smart card reader interface connector to access postage metering functionality.

Abstract: The present invention provides an intuitively-based (WYSIWYG) user interface for generic value bearing item label custom specification of each label on a multi-part label set. According to the present invention, an interactive display such as is depicted in FIG. 13 would be provided on a display monitor of a plurality of independently interactive panels, wherein each panel corresponds to a particular label on a multi-part label set. As depicted in FIG. 13, the exemplary WYSIWYG generic custom VBI label specification interface of the present invention displays an interactive label display (1110) in which each separate label panel (e.g., 1120-11 through 1120-45) displays an independent postage rate class input field (e.g., 1125-11 with a postage rate class menu button, e.g., 1123-11). Once the user has selected the “Custom” option (1150), the user can set the price for each label by clicking on the individual rate input field (e.g., 1121-11) of the particular label panel (e.g.

Abstract: A method and system includes sharing revenue between a plurality of parties providing a technology service in which an end user uses a position indicia reading stylus to collect position information from a product having position identifying indicia thereon and a network infrastructure communicates a signal representing, or derived from, position information collected from said stylus to a network node that performs a technological service based on the signal. An agreement is formed between the parties regarding a percentage of revenue that each party should receive. The service is provided via the network infrastructure to end users for a fee. The fee is collected from the end users, and a portion of the fee is distributed to each party based on the percentage of revenue allocated to each party in the agreement.

Abstract: A method for transmitting a key from a first device to a remotely located second device includes the steps of generating the key within the first device; selecting one of a plurality of one-time pad values from a one-time pad stored within the first device; creating a hash of at least the key and the selected one of the plurality of one-time pad values; and sending the hash and the key from the first device to the second device.

Abstract: A postal apparatus, particularly a postage meter machine, has a chip card write/read unit for reloading fee schedule change data by chip card. In combination. with a first-time insertion of the chip card, an appertaining controller of the postage meter machine allows a first reloading and—as a result thereof—a writing of data into the chip card. The use data in the chip card are thereby modified in a predetermined way, so that, given a repeated data loading, the chip card supplies usable data only in the same postage meter machine. The use data are stored in a first memory area of the chip card and include the remaining use data and variable data, or a crypto code following the initial use. A protective code, formed after the. initial use for the authorization of the use data is stored in a second memory area of the chip card.

Abstract: A postage metering system includes a base and a user interface mounted to the base. The user interface includes a micro controller, an internal socket for receiving an integrated circuit chip and a smart card reader interface connector for interfacing with an external smart card. The micro controller is configurable to address either the internal socket or the smart card reader interface connector to access postage metering functionality.

Abstract: A method for using cryptographic parameters in a postage meter for securing postage indicium data includes the steps of generating in the postage meter 1) first cryptographic parameters which are useable in conjunction with second cryptographic parameters by the postage meter to cryptographically secure postage indicium data and 2) a cryptographic key; storing the first cryptographic parameters but not the second cryptographic parameters in the postage meter during the registering of the cryptographic key with a certificate authority; receiving at the postage meter notification that the cryptographic key has been registered with the certificate authority; and subsequent to receiving the notification generating and storing the second cryptographic parameters in the postage meter such that the first and second cryptographic parameters are stored in the postage meter for use in cryptographically securing postage indicium data.

Abstract: The present invention is an improved shipping system that provides for third-party billing and shipment of a package from a first location to a second location where neither the first or second location is the location of the third-party. An embodiment is disclosed in which a pre-existing call-tag system is modified to permit third-party billing and anywhere to anywhere functionality.

Abstract: A system and method of evidencing postage payment includes a data center with a database storing a plurality of meter records. Each meter record includes meter information corresponding to a metering account. When a request for postage is received, a secure co-processor device in the data center obtains the appropriate meter record and verifies the authenticity of the meter record by verifying a signature in the meter record and comparing freshness data in the meter record to freshness data in the secure device. If verified, the secure device then accounts for an amount of postage to be evidenced, generates evidence of postage payment and updates the meter information, including the freshness data, in the meter record. The secure device then signs the updated meter information, stores the signature in the meter record, and returns the updated meter record to the database.

Abstract: In a postage meter machine, a method for the operation of a postage meter machine as well as method for data communication between a postage meter machine and a remote data center, the postage meter machine has a central processing device and a data transmission device connected thereto for the transmission of information between the processing device and the remote data center via a telecommunication network. The data transmission device has a connection unit for making the connection to a telecommunication line of the telecommunication network. A monitoring device in the postage meter machine monitors the usage status of the telecommunication line.

Abstract: A method for generating digital postage stamps wherein a data center receives a request from a PC for a selected number of digital postage stamps, concludes a payment transaction for the selected number of digital postage stamps, generates a digital book of postage stamps, which the PC downloads to its hard drive. The digital book of postage stamps includes a read-only software module that prints each digital postage stamp using stamp related information contained within the software module. The stamp related information includes stamp information, which is required for each postage stamp, user information, which identifies the requester and the PC, data center server information, which is unique to each digital postage stamp and a digital signature of at least some of the user, stamp and/or server information.

Abstract: The present invention discloses a technology for providing a method in on-line shopping and the like that allows products to be delivered efficiently and with no delivery errors to intermediary establishments, e.g., convenience stores, where packages can be picked up at a location other than a user's home address. A computer is set up to mediate delivery and receives a user selection via a network regarding whether a product is to be shipped to the user's home or to another site. If another site is selected, a map of the area showing potential destinations is displayed, and the recipient makes a selection from the map. Special offers available when the package is picked up at a site are also displayed. When the recipient specifies a delivery destination, a coupon containing a recipient authentication certificate and special offers is issued.

Abstract: A method for processing controlled acceptance mail includes creating, at a first location, a batch of mail including a plurality of mailpieces, each of the plurality of mailpieces having unique indicia data printed thereon which identifies a source of creation of the batch of mail and a unique identifier for a corresponding one of the plurality of mailpieces upon which the unique indicia data is printed; generating, at the first location, a manifest containing all of the unique indicia data for each of the plurality of mailpieces; cryptographically protecting the manifest; sending the cryptographically protected manifest to a second location; verifying the authenticity of the cryptographically protected manifest at the second location; providing the batch of mail to a carrier distribution system for distribution; as part of the carrier distribution system reading unique indicia data from selected mailpieces being distributed therein and sending the unique indicia data for each of the selected mailpieces to th

Abstract: A method for requesting a postage refund includes the steps of generating a postage indicium having a postage value and first data indicative that a refund of the postage value is requested; and printing the postage indicium on a mailpiece.

Abstract: A postage metering system that includes a host PC, an SMD, and a printer. The host PC includes a user interface to receive postage information. The SMD operatively couples to the computer via a communications link and includes a processor and a tamper evident enclosure. The processor is configured to receive the postage information from the computer, direct generation of an indicium, and account for the indicium. The tamper evident enclosure houses the processor and other security sensitive elements of the SMD. The printer couples to the SMD and is configured to receive and print the indicium. The SMD can further include a memory element, an interface circuit, and an enclosure. The memory element is configured to store accounting information and information related to the operation of the metering device. The interface circuit is configured to receive a message that includes a code that identifies that message. The processor operatively couples to the memory element and the interface circuit.

Abstract: A system for verifying printed indicia. The system comprises an indicia generating apparatus adapted to create digitally signed indicia on an item having an associated value and an indicia verifying apparatus adapted to read the indicia on the item and verify that the item is valid. The item can be used as payment for a good or service.

Abstract: A method of reissuing secured postage indicium includes the steps of dispensing from a postage meter an original postage indicium as evidence of postage dispensed for a requested postage transaction, the original postage indicium including postage information and authentication information; storing within the postage meter a transaction record for the dispensed original postage indicium, the transaction record including the postage information and the authentication information; and receiving at the postage meter a request to reissue the original postage indicium.

Abstract: A system for controlling a franking machine from a remote computer comprises control software for controlling the franking machine, communications apparatus for the franking machine to communicate with the computer, a user application operating on the computer to interface with the control software via the communications apparatus, and a programming library for communicating with the user application, the programming library providing the user application with a series of functional controls of the franking machine. A method for operating a franking machine using the functional controls. A computer readable medium containing the programming library.

Abstract: In a postage meter machine that has a printing unit with a replaceable print head, a print head for such a postage meter machine and a method for the authentication of such a print head, a number of manipulation possibilities are precluded, such as refilling an authorized print head, unauthorized ink usage of a printhead and using an authorized print head in a conventional printer without paying fees for franking. For this purpose a security code is generated by an encryption algorithm from a first identification code attached to the print head and from a second identification code stored in a memory unit allocated to the print head, and is compared to a security code that is likewise stored in the memory unit when the print head is manufactured.

Abstract: The present invention provides a method and apparatus for creating computer-based postage that may be used on any date and with an undetermined addressee includes generating a request to print postage, determining the means for generating the request, determining the master serial number for label stock, tracking the master serial number and printing the postage.

Abstract: A method for verifying that the expected components of a postage metering system includes alternate embodiments for verifying a PSD coupled to a host system is the expected PSD. The method further includes verifying the host system as the expected host system. A first message is encrypted in the PSD using a first cryptographic key to obtain a first encrypted message. The first encrypted message is sent to the host system which decrypts the first encrypted message using a second cryptographic key. The host system then encrypts a second message derived from the decrypted first encrypted message using the second cryptographic key. The host system then sends the encrypted second message to the PSD which decrypts the second encrypted message in the PSD using the first cryptographic key.

Abstract: A postal system includes a local computer having a user interface and an associated storage unit for storing a secure data file that contains postal (e.g., accounting) data. A secure processing unit interfaces with the local computer and performs the secure processing normally associated with a secure postal environment. The secure processing unit can be designed to receive power from the computer to which it couples, and generally does not require special interconnect. By using the secure processing unit to perform the secure processing and the local computer to perform other postal functions (e.g., user interface), complexity is reduced which translates to faster speed of operation and a more economical hardware design.

Abstract: A mailing list is created including destination addresses for mailpieces to be submitted to a carrier service for delivery. A unique mailpiece identifier associated with mailpieces on the mailing list is generated by the carrier or other trusted third party. The unique mailpiece identifier is printed on the mailpiece with which it is associated. The -mailpieces with the printed unique identifier are submitted to the carrier service. The carrier service obtains the printed unique identifier from the mailpiece. The obtained unique identifier from each said mailpiece is utilized to verify that data associated with the mailpiece has been processed by the carrier or trusted third party. When the unique number has been obtained from the mailpieces, the carrier service, if desired, may note this fact in the carrier records to prevent reuse of the unique identifier.

Abstract: In an arrangement and a method for data exchange between a postage meter machine and chip cards, a postage meter machine is equipped with a chip card write/read unit and appertaining control system wherein first, corresponding to a succession number a specific insertion sequence for valid chip cards is required in order to reload (update) data, and second, an authorized user is allowed to define a specific sequence for the insertion of lower-ranking, suitably initialized chip cards in order to simplify the function and data entered into the postage meter machine. These latter chip cards set a limited function scope within the postage meter. For their initialization, a table with a specific hierarchic (tree) structure is produced by the user by modifying a pre-stored structure in the postage meter machine.

Abstract: A postal system includes a local computer having a user interface and an associated storage unit for storing a secure data file that contains postal (e.g., accounting) data. A secure processing unit interfaces with the local computer and performs the secure processing normally associated with a secure postal environment. The secure processing unit can be designed to receive power from the computer to which it couples, and generally does not require special interconnect. By using the secure processing unit to perform the secure processing and the local computer to perform other postal functions (e.g., user interface), complexity is reduced which translates to faster speed of operation and a more economical hardware design.

Abstract: A method and apparatus for interfacing a weighing scale and one or more peripheral devices which includes a single intelligent interface cable assembly connected between a weighing scale and a plurality of peripheral devices, the IICA detects the peripheral device protocol by receiving a logic signal indicating which protocol is in operation, if necessary, the IICA then switches the signal protocol of the weighing scale to correspond with the signal protocol of the detected peripheral device protocol. Simultaneous, tripping of a mailing machine to print postage amounts may occur.

Abstract: A system and method for instantly printing PC postage before establishing a postage meter account. The method includes the steps of a meter vendor obtaining a first meter license from the Post for a first meter; loaning the use of a first meter licensed in the customer's zip code to a customer; requesting a second meter license for the customer; initializing the first meter for use by the customer; and transferring the first meter to the Customer's meter license when the second meter license is received. Alternatively, when the second meter license is received a second meter is assigned to the customer and the first meter is reassigned to the meter vendor.

Abstract: Methods and apparatus for authentication of postage indicia are disclosed. A secret key is read from store and modified in dependence upon postage data to be printed in a postage indicium. The modified key is then utilised to generate an authentication code dependent upon the postage data to be printed. Authentication of the indicium is effected by reading the authentication code and postage data from the printed indicium and repeating the process of generating an authentication code. The generated authentication code is compared with the authentication code read from the indicium. A control code based on a value in an accounting register may be included in the indicium. The value may be a value of postage dispensed in a determined expired period.