Abstract: A method for requiring that a key used in a cryptographic apparatus be changed includes the steps of: storing a constraint value for a non-time parameter of the cryptographic apparatus, the non-time parameter being related to the operation of the cryptographic apparatus; and requiring the key to be changed when an actual value of the non-time parameter is not within a range defined by the constraint value.

Abstract: In a method and an arrangement for increasing the throughput of mail when franking with a security imprint, the editing of the print image data is undertaken by a postage meter machine processor, and the calculation of the security code is undertaken by a separate security module while the print image data are being edited. A high system clock performance is achieved by interleaving of the two calculation tasks.

Abstract: A system and corresponding method for verifying digital postal marks on mailpieces or, more generally, for verifying a mark on any kind of document where the mark represents value and might be counterfeited or used fraudulently, the system including in the specific case of verifying a digital postal mark: a plurality of mail processing machine verification modules (MPMVMs), each responsive to information obtained from sampled mailpieces, and each further responsive to a control file specifying patterns of sampling and specifying responses to sampling results, each MPMVM performing local verification of the sampled mailpieces according to the control file, each MPMVM for providing the information obtained from the sampled mailpieces and optionally the local verification results; and a data center verification module (DCVM), responsive to the information obtained from the sampled mailpieces and also to the local verification results, for analyzing the information obtained from the sampled mailpieces, for period

Abstract: A method for certifying the public key of a user wishing to communicate using a public key encryption system by a plurality of certifying authorities. A plurality of certifying stations and a user station exchange information and the user station derives a public key from the exchanged information. The certifying stations also publish related information and their public keys. A third party can derive the public key corresponding to the user's private key by operating on the published information with a summation of the certifying station keys.

Abstract: A method for certification by a plurality of certifying authorities of the public key of a user wishing to communicate using a public key encryption system while asserting only a subset of rights. A plurality of certifying stations and a user station exchange information and the user station derives a plurality of private keys from the exchanged information. The certifying stations also publish related information and their public keys. The user communicates using a private key formed by summing selected ones of said plurality of private keys corresponding to asserted rights. A third party can derive the public key corresponding to the user's summed private key by operating on the published information with a summation of the certifying station public keys.

Abstract: A method for recovering postage for metered mail pieces that have not been posted, the method includes: placing information that uniquely identifies the mail piece in a postal indicia; storing the information that uniquely identifies each metered mail piece at a remote site; requesting a refund for a mail piece that has not been posted; determining if the information in the postal indicia that uniquely identifies the mail piece is the same as the information that uniquely identifies the mail piece that is stored in the remote site; and refunding the postage if the information in the postal indicia that uniquely identifies the mail piece is the same as the information that uniquely identifies the mail piece that is stored in the remote site.

Abstract: A postal apparatus, particularly a postage meter machine, has a chip card write/read unit for reloading fee schedule change data by chip card. In combination. with a first-time insertion of the chip card, an appertaining controller of the postage meter machine allows a first reloading and—as a result thereof—a writing of data into the chip card. The use data in the chip card are thereby modified in a predetermined way, so that, given a repeated data loading, the chip card supplies usable data only in the same postage meter machine. The use data are stored in a first memory area of the chip card and include the remaining use data and variable data, or a crypto code following the initial use. A protective code, formed after the. initial use for the authorization of the use data is stored in a second memory area of the chip card.

Abstract: The present invention is an improved shipping system that provides for third-party billing and shipment of a package from a first location to a second location where neither the first or second location is the location of the third-party. An embodiment is disclosed in which a pre-existing call-tag system is modified to permit third-party billing and anywhere to anywhere functionality.

Abstract: A method for verifying that the expected components of a postage metering system includes alternate embodiments for verifying a PSD coupled to a host system is the expected PSD. The method further includes verifying the host system as the expected host system. A first message is encrypted in the PSD using a first cryptographic key to obtain a first encrypted message. The first encrypted message is sent to the host system which decrypts the first encrypted message using a second cryptographic key. The host system then encrypts a second message derived from the decrypted first encrypted message using the second cryptographic key. The host system then sends the encrypted second message to the PSD which decrypts the second encrypted message in the PSD using the first cryptographic key.

Abstract: The present invention is a system for providing secure access and execution of application software stored on a first computer by a second computer using a communication device while a communication link is maintained between the first and second computers. More specifically, the present invention is a secure software rental system. The system enables a user in a remote location using a personal computer and a modem to connect to a central rental facility, transfer application software from the central rental facility to the remote computer, and execute the application software on the remote computer while electronically connected to the central rental facility. When the communication link between the central rental facility and the remote computer is interrupted or terminated, the application software no longer executes on the remote computer. The application software stored on the central rental facility is integrated with the header software to provide a security feature of the present invention.

Abstract: A remote postage meter resetting system includes apparatus for sending a request to recharge the postage meter by the postage recharge amount together with first data indicative of a first user prepaid postage account resident in a prepaid postage account data base having a plurality of prepaid postage accounts; and a data center including apparatus for receiving from the sending apparatus the first data together with the request to recharge the postage meter by the postage recharge amount; a line of credit database having a plurality of lines of credit each of which is associated with at least one of the plurality of prepaid postage accounts; a computer, in communication with the receiving apparatus, which is programmed to 1 ) obtain the first data and the postage recharge amount from the receiving apparatus, and 2) communicate with the prepaid postage account data base to determine if sufficient funds are in the first user prepaid postage account to cover the cost of the postage recharge amount, wherein at

Abstract: User-sealed postage printing apparatus and method comprises a printing device, operable to print a postage indicium and a processor. A weighscale is connected to the processor by an analog to digital converter, for example. A cavity for receiving a secure metering device (SMD) is provided. The cavity has an electrical connector for establishing a connection between the processor and the SMD. The SMD, once inserted, cannot be removed without being rendered unusable for postage printing and/or leaving visible evidence of tampering.

Abstract: A PSD has a private key which is associated with a specific public key that is stored in the host PC. The host PC sends the PSD public key private key to the PSD. If the PSD determines that the received PSD public key corresponds to its private key, the system has determined that the expected PSD is connected to the Host system and the PSD is activated to accept postal value requests from the host PC. Additionally, a PSD state identification, such as a checksum of a PSD transaction log file stored in the host may be verified by the PSD, which also has stored therein a PSD transaction log file. In this manner the PSD verifies that the PSD has performed all transactions with the host PC sending the checksum. Methods for verifying in the PSD that the expected host PC is coupled to the PSD mirrors the two embodiments for verifying the expected PSD.

Abstract: A secure and reliable method for verifying in the host system that the expected PSD is coupled to the host system includes generating a random number in the host system and encrypting the random number with a PSD state identification number. The encrypted random number is then sent to the PSD. The PSD decrypts the encrypted random number received using the PSD state identification number and sends the decrypted random number to the host system. The host system compares the decrypted random number received from the PSD to the random number generated in the host system. If they are the same, the host system has verified the expected PSD and has also verified that the PSD has not completed any transactions apart from the host system. A method for verifying that the expected host is coupled to the PSD mirrors the method for verifying the expected PSD.

Abstract: A postage meter includes a memory including an ascending credit register to store an accumulated value of credit and an ascending tote register to store an accumulated tote value of postage charge dispensed by the postage meter in franking mail items. Accounting means of the postage meter determines whether the sum of a required postage value to be applied to a mail item and the accumulated tote value is equal to or less than the accumulated total value of credit stored in the ascending credit register and, if the sum of the required postage value and the accumulated tote value is equal to or less than the accumulated credit value, operates printing means to print a franking impression on the mail item and increments the accumulated tote value stored in the tote register by an amount equal to the required postage value.

Abstract: In accordance with the present invention, there is provided a greatly improved Postal Security Device (PSD) incorporating periodic and automatic self implementation of a public/private key pair. According to the invention, it is provided that the appropriate resources are contained in a PSD, thereby permitting the PSD generate a new set of public/private key pairs as required to change the secure cryptographic identity of the PSD. Such generation may occur in response to an arbitrary criterion, such as a request, a change in usage patterns, the amount spent, and/or the number of pieces processed. The number of key pair generations may be limited to a predetermined maximum. The appropriate authorities are then notified of the new PSD Public key. The new PSD key pair is used upon receipt of the appropriate certificate from the Certification Authority.