Abstract: Systems and methods which are adapted to generate multiple indicia in a single secure environment session are described. Embodiments provide for generation of a plurality of postage indicia in a single postage security device (PSD) transaction, whereby the PSD loads and unloads corresponding virtual PSD information a single time for generating the plurality of postage indicia (i.e., in a single secure environment session). The indicia generated in a same secure environment session according to embodiments of the invention may comprise a plurality of indicia requested by a same, single user. Additionally or alternatively, the indicia generated in the same secure environment session may comprise a plurality of indicia requested by multiple different users.

Abstract: Data is received that includes a feed of images of a plurality of objects passing in front of an inspection camera module forming part of an inspection system. Thereafter, a representation for each image is generated using a first machine learning model and based on the received data. Later, one or more second machine learning models can cluster the images using the corresponding representations into groups that each correspond to one of a plurality of different object attributes. Thereafter, access to the groups can be provided to a consuming application or process for analysis and the like. In some variations, the representations are analyzed by at least one third machine learning model prior to the clustering. In other variations, the representations are analyzed by at least one third machine learning model after the clustering. Related apparatus, systems, and methods are also described.

Abstract: A method and system for maintaining privacy in private postal mail, such as privileged or other legal postal mail or medical mail, at a correctional facility comprising a privacy verification system to verify a privacy status of a sender and generate privacy status identifiers to be used on the legal postal mail. The privacy status identifiers when scanned or observed at a mail processing facility that processes incoming mail sent to inmates who are incarcerated in a correctional facility provides an indication to the mail processing facility that the mail is private so that appropriate measures can be taken to maintain privacy status.

Abstract: A method clusters each character on a document into one of a plurality of clusters based on widths of at least a portion of the characters on the document and measures distances between characters on the document. A threshold for each of the plurality of clusters is calculated based on at least a portion of the distances between characters in each cluster. The method then segments characters into units using the thresholds for the plurality of clusters. A distance between two characters in the document is compared to a threshold for a cluster to classify the two characters as being part of a unit when the distance is less than the threshold and not being part of the unit when the distance is greater than the threshold. Then, the method performs a recognition process on the document using the units.

Abstract: There is provided a framework to record to a blockchain unique identification (signatures) of physical items which have unique, random properties. Physical items are analysed using spectral imaging to determine the unique identifications. Hardware is shown to perform the analysis and various nodes of a peer-to-peer network are shown and described, which nodes may be configured to provide proof of location, privacy, trust and authentication. The solution can work even if the item is modified in some way if a subset of the unique properties remain.

Abstract: Methods and apparatus are provided for detecting potential repeating content, such as commercials, in a video data stream by receiving one or more video data streams, parsing each video data stream into a plurality of segments, creating a representation of each segment such as a segment fingerprint, storing the plurality of segment representations in a database, and identifying any segment representations in the received and parsed one or more video data streams that match segment representations in the database that were previously stored from video data streams that were previously received and parsed.

Abstract: Methods and apparatus are provided for detecting potential repeating content, such as commercials, in a video data stream by receiving one or more video data streams, parsing each video data stream into a plurality of segments, creating a representation of each segment such as a segment fingerprint, storing the plurality of segment representations in a database, and identifying any segment representations in the received and parsed one or more video data streams that match segment representations in the database that were previously stored from video data streams that were previously received and parsed.

Abstract: A method is for operating a cryptographic device to reduce effects of power analysis and time attacks. The method may include executing a first set of cryptographic algorithm computations with a first crypto-processor of the cryptographic device. The first set of cryptographic algorithm computations may provide encryption of a first set of data to be protected with a first secret key stored in the cryptographic device. The method may further include executing a second set of cryptographic algorithm computations with a second crypto-processor of the cryptographic device for providing encryption of a second set of data different from the first set of data to be protected with a second different secret key.

Abstract: A method for securing the exchange of data between a client module and a server module includes steps where: the token module initializes a token and the client module sends the data, which includes a unique identifier and the initialized token to a first security module of the server module; the first security module and the second security module exchange security data bilaterally with one another; the server module transforms the received token; the client module receives the server data, verifies the token and transforms the latter; the client module sends the data, which includes the transformed token to the second security module of the server module, which receives the data, and verifies the identifier and the transformed token; and the second security module communicates with the destination module.

Abstract: The invention relates to a printing object (10) and a printer (11) for printing a printing object (10). The printing object (10) has a printable printing region (1) and an identification region (2), wherein an identification mark is provided in the identification region (2). According to the invention, a barcode identification mark (4, 5) with a plurality of individual bars (6) arranged behind one another is provided as identification mark. In this way, a printing object (10) is provided, by way of which it can be ensured in a simple and reliable way that optimum printing takes place.

Abstract: Information from a package is read. An encryption key is generated from the information read from the package. A text unit is encrypted using the encryption key. The encrypted text unit is affixed to the package.

Abstract: The present invention includes methods for operating a mailing machine. A permit mail imprint is generated in the mailing machine on the basis of input signals entered into the mailing machine via a user interface of the mailing machine. At least some of the input signals may represent alphanumeric characters. For example, the permit number may be entered via a keypad or keyboard in the form of numeric characters.

Abstract: The exemplary embodiment of the present invention will provide computer systems and methods for printing computer-based value-bearing items such as, for example, an exemplary image-customized computer-based postage label 1 in an exemplary embodiment of the present invention as depicted in FIG. 1. With reference to FIG. 1, the exemplary customized computer-based postage label 1 will bear an image 2 that would be provided by a corresponding user, namely by the user that orders the customized computer-based postage label. The user may provide image 2 in an electronic form, such as by uploading a digital representation of image 2. In a variation of the exemplary embodiment, a user could alternatively provide a hardcopy image. The exemplary customized computer-based postage label 1 will bear a human-readable indication of the country 4 for which the postage is approved. The exemplary customized computer-based postage label 1 will also bear a human-readable indication of an amount of postage 5.

Abstract: According to one embodiment, a POS terminal includes a printer, a display, a screen display section, a selection operation input section, and an issue section. The printer prints and issues a receipt related to a commodity transaction. The display displays information. The screen display section displays, on the display, a selection screen for selecting an information item to be printed on the receipt. The selection-operation input section selects, according to selection operation in the selection screen displayed by the screen display section, the information item to be printed on the receipt. The issue section issues a receipt on which the information item selected by the selection-operation input section is printed and an information item not selected by the selection-operation input section is not printed.

Abstract: A method for labeling an object such as a biological sample, including printing at least two different light-emitting species onto a substrate which are capable of displaying a unique optical signature when excited; and externally attaching the object to the printed at least two different light-emitting species.

Abstract: A method of watermarking an image. A visible watermark is inserted in the image to obtain a visibly watermarked image. Information allowing removal of the visible watermark is protected to obtain protected information that is inserted as an invisible watermark in the visibly watermarked image to obtain a visibly and invisibly watermarked image. The information allowing removal of the visible watermark may be image values of the pixels to be covered by the visible watermark and, possibly, the position and size of the visible watermark, in which case these values are first memorized. The visible watermark may be opaque. Also provided are an apparatus for inserting the watermarks, a method for removing the visible watermark, essentially by performing the method “in a mirror”, and an apparatus for removing the visible watermark.

Abstract: A method for authenticating messages in a communication network includes forming a super message having a plurality of individual messages such that at least two of the individual messages are intended for separate receiving entities. The method further includes creating a message authentication code (MAC) using a private key, such that the MAC is configured to permit authentication of the super message using a public key.

Abstract: Particular embodiments provide a method for orchestrating an order fulfillment business process that includes a sub-process. In one embodiment, abstraction of business processes from an underlying information technology (IT) infrastructure is provided. An orchestration process can be designed using sub-processes such that the sub-process is assembled at run-time into an executable process. The sub-process may be defined in an interface as a single step. A plurality of services as then assembled as steps in the executable process at run-time.

Abstract: The present invention provides apparatus, systems and methods for the computerized generation and printing of a U.S. Postal Service Shipping Label over the Internet that provides postage, shipping address, delivery address, and shipment and delivery tracking indicia. According to the invention, human-readable postage payment indicia is formatted in such a way that the actual price of shipping postage is obscured; postage payment can only be translated from the postage payment indicia by someone who knows the format template. The present invention further provides a United States Postal Service shipping label comprising a representation of paid postage, said representation of paid postage comprising a human-readable character string, said character string comprising imbedded postage price information. The present invention further provides a United States Postal Service shipping label, comprising a machine-readable representation of paid postage and a ship to address.

Abstract: A method and system for secure package delivery utilizing digital signatures is described. In one configuration, data regarding the weight, dimensions and origination are cryptographically processed to create an authentication digital signature with message retrieval capability. The data is read and independently verified at the package destination.

Abstract: An embodiment defines access control allowing the expression of access control rules using ontology based semantics and references an ontology subset using XPath as the ontological expression. The access control rules or access criteria are defined by an access control statement and may be expressed using classification criteria and ontology classes. The access control statement comprises a structural description that is used to define an asset and a logical expression that may be used to express the classification criteria. The access control statement defines access policy for various assets.

Abstract: The present invention provides an intuitively-based (WYSIWYG) user interface for generic value bearing item label custom specification of each label on a multi-part label set. According to the present invention, an interactive display such as is depicted in FIG. 13 would be provided on a display monitor of a plurality of independently interactive panels, wherein each panel corresponds to a particular label on a multi-part label set. As depicted in FIG. 13, the exemplary WYSIWYG generic custom VBI label specification interface of the present invention displays an interactive label display (1110) in which each separate label panel (e.g., 1120-11 through 1120-45) displays an independent postage rate class input field (e.g., 1125-11 with a postage rate class menu button, e.g., 1123-11). Once the user has selected the “Custom” option (1150), the user can set the price for each label by clicking on the individual rate input field (e.g., 1121-11) of the particular label panel (e.g.

Abstract: Systems and methods are defined for facilitating the factoring process involving a business client, one or more factors, and a third-party (i.e., a debtor doing business with the business client) providing confirmations for the accounts receivables upon the client's request. The client requests confirmation of accounts receivables from a confirmation system, the confirmation system queries the debtor(s) for confirmation of their accounts payable to the client, and the confirmation system provides completed accounts receivables to one or more factors designated by the client (i.e., initially provided to the confirmation system with the accounts receivable data that initiates the confirmation process).

Abstract: A network system and a method of address resolution are provided. The network system includes a network, a plurality of virtual machines, a routing module and a path directory module. Each virtual machine includes an internet protocol (IP) address and N media access control (MAC) addresses, so as to connect the network through N transmission routes. The routing module detects and calculates states of the transmission routes. The path directory module receives and decodes an address resolution protocol (ARP) request presented by at least one source virtual machine to reply path information, which includes N MAC addresses corresponding to an IP address of a destination virtual machine and states of the N transmission routes. Thus, the virtual machines present the ARP request without broadcast, so that the problem of network congestion is solved.

Abstract: There is provided a method and system for producing a label that can be applied onto a mailpiece. An exemplary method comprises providing a data service via a network node, the data service being performed in a provider server of a service provider. The exemplary method also comprises performing a one-time printing of the label via a control program, such that an intelligent document is transmitted from the provider server via a network to a user client, the one-time printing being done if a network connection exists between the user client and the provider server, and if, on the basis of a query to the provider server, it has been ascertained that that label had not been printed before. The exemplary method additionally comprises transmitting a message from the user client to the provider server when the label is printed for the first time. The exemplary method further comprises logging the printing in the provider server in response to the message.

Abstract: Apparatus and methods are provided for embedding or embedding digital data into an analog host or cover signal. A distributed signal feature of the cover signal in a particular domain (time, frequency or space) is calculated and compared with a set of predefined quantization values corresponding to an information symbol to be encoded. The amount of change required to modify the signal feature to the determined target quantization value is calculated and the cover signal is modified accordingly to so change the feature value over a predefined interval. Information symbols are extracted by the opposite process. In one embodiment, the predefined value is a short term auto correlation value of the cover signal.

Abstract: A method is provided for authenticating an image printed at a predefined print resolution or in accordance with a predetermined print grid. The method includes the steps of scanning the image to produce digital data and segmenting the data into first and second groups corresponding, respectively, to first and second predefined sections of the image. Next, a determination is made concerning the anticipated spatial position of select columns of digital data from each of the first and second groups of data. By examining the data, differences may be identified between the anticipated and actual spatial position of the columns, to determine the authenticity of the image. The identified differences which may include (i) a rotary/linear displacement in the actual spatial position of the select columns. (ii) a change in beat frequency between sections of the image, and/or (iii) a phase shift in a beat frequency.

Abstract: In a system including a postage printing device and a data center, wherein the postage printing device and the data center have a first set of keys for use in requesting and downloading a plurality of postage data records from the data center for use in printing postal indicia, a method of securely transferring the postage printing device and any postage value stored therein from a first user to a second user. According to the method, a new set of keys for requesting and downloading postage data records is generated, any current postage value stored in the printer device is securely transferred to the second user using the new keys and some of the first set of keys, and the first set of keys is zeroed, thereby protecting the first user from any potential theft or fraud of postage funds on the part of the second user.

Abstract: A method provided herein includes the following steps: storing seal data of an electronic seal, a digital certificate, electronic signature program and a private key of a sealer in an external portable apparatus; performing a Hash conversion to a file to be sealed and the seal data of the electronic seal to generate a data digest, wherein the file to be sealed is a layout file; sealing, in the portable apparatus, the data digest using the private key of the sealer and the electronic signature program to generate an electronic signature result; and combining the file to be sealed, the seal data of the electronic seal, the digital certificate and the electronic signature result to generate a seal combination file.

Abstract: Fraud detection mechanisms and methods that are adapted for inconsistent data collection are provided. Data is analyzed to determine normal operational variations from ideal system behavior. Profiles are developed for each individual sender, e.g., the number of multiple scans performed per confirmation number generated by each sender, and other parameters, such as delivery areas, e.g., the number of multiple scans performed per specific geographic area. If the sender's profile differs significantly from the normal operational variations, there is an indication of potential fraudulent activity and an investigation can be initiated. By analyzing a combination of sender and delivery scan data with system wide scan data, the effect of inconsistent data is minimized to significantly reduce the number of erroneous indications of fraudulent activity while still providing a high level of fraud detection.

Abstract: A printing apparatus includes a data reading unit that reads data from a storage device that can store pieces of data, the data reading unit being connectable to the storage device, an input panel that accepts an input a password used to decrypt encrypted data stored in the storage device, a password storing unit that stores the input password, a data decrypting unit that decrypts the encrypted data by using the stored password, a decrypted data storing unit that temporarily stores the decrypted data, and a re-decrypting unit that decrypts other encrypted data stored in the storage device by using the stored password.

Abstract: A method, system, and apparatus for authenticating transactions and records is disclosed. An information-based indicium includes an article bearing a first identifier, wherein the first identifier substantially prevents a single user from accumulating multiple articles bearing the same first identifier, and a first digital certificate that is derived in part by encoding the first identifier, wherein the first digital certificate and the article may be presented together to authenticate the indicium by comparing the first digital certificate and the first identifier.

Abstract: A reputation server is coupled to multiple clients via a network. Each client has a security module that detects malware at the client. The security module computes a hygiene score based on detected malware. The security module provides the hygiene score and an identifier of a visited web site to a reputation server. The security module also provides identifiers of files encountered at specified web sites to the reputation server. The reputation server computes secondary hygiene scores for web sites based on the hygiene scores of the clients that visit the web sites. The reputation server further computes reputation scores for files based on the secondary hygiene scores of sites that host the files. The reputation server provides the reputation scores to the clients. A reputation score represents an assessment of whether the associated file is malicious.

Abstract: Systems, methods, and an article of manufacture for printing a new postal authority code on a mail piece prepared by and received from an inserter or wrapper. A barcode post-processing system receives a mail piece from an inserter and communicates with the image capture equipment. The barcode post-processing system during performs various functions. The functions can include receiving legacy address block information from the mail piece from the image capture equipment, processing the captured legacy address block information to determine one or more missing parameters of the new postal authority code to create processed data, and supplementing the captured legacy address block information data with the one or more missing parameters of the new postal authority code received from one or more data source.

Abstract: An authentication mechanism is provided to authenticate both client and user of a portable computing device when the user causes a client to request a protected resource on the portable computing device. Upon receiving a request a protected resource by the client, the authentication mechanism determines which authentication method is specified for authentication of the client, and authenticates the client accordingly. Upon a determination that the client is authentic, the authentication mechanism invokes a user interface that is separate and distinct from the client to solicit input from the user. Based on the input solicited from the user, the authentication mechanism determines whether the user is an authentic user of the portable computing device. If it is determined that the user is an authentic user, the authentication mechanism determines based on an indication from the user whether the client should be authorized to access the protected resource requested.

Abstract: A method, system, and apparatus for authenticating transactions and records is disclosed. A method for authenticating an information-based indicium includes receiving an article bearing a first identifier, wherein the first identifier substantially prevents a single user from accumulating multiple articles bearing the same first identifier, receiving a first digital certificate that is derived in part by encoding the first identifier, and comparing the first digital certificate and the first identifier to authenticate the information-based indicium.

Abstract: There is provided a cryptographic round dater and its method of use. By capturing customer profile information and encoding the information on a label affixed to the customer's submitted mailpiece, fraudulent or criminal use of the mail may be deterred by providing traceability to the source of the mail piece. The information attached to the mailpiece may be both human readable and machine readable, said machine readable portion being optionally encrypted to protect the privacy and security of the encoded information. Further benefit is provided by allowing the handling of a mailpiece to be traced, allowing for effective remediation or investigation in the event of an unauthorized use of mail.

Abstract: Systems and methods for providing funds recovery for mailing machines including integrated circuits such as those used in postal security devices are described, and in certain configurations, systems and methods for recovering data such as postal funds records from a partially disabled single integrated circuit in a postal security device are described.

Abstract: In a franking method and a mail transport system, a franking image is calculated before generation thereof on a mail piece. The franking image includes a franking image key, and for each new franking image, the franking image key therefor is derived from a predecessor franking image key according to a first crypto-algorithm. An integrity check code is also generated based on the new franking image key, a key generation number, an apparatus identifier of the franking device, and a second crypto-algorithm. The franking image includes at least the device identifier, the key generation number and the integrity check code. Upon transport of the mail piece to a sorting center, the franking image is scanned and fees for billing are generated based thereon.

Abstract: The present invention includes apparatus and methods for printing and verifying postage stamps on demand via a personal postage stamp printer. The indicium by which the stamp is printed includes a color stripe and a data field including authentication data that corresponds to the color stripe. To authenticate the stamp, the authentication data in the data field is read and compared with authentication data extracted from the color stripe.

Abstract: Electronic messages may be processed using a stamp authority by receiving an electronic message, identifying a stamp associated the message, determining if the stamp is valid, and, if the stamp is determined to be valid, distinguishing the message from messages with which a valid stamp is not identified.

Abstract: An electronic system where messages include information carried by digital watermarks. The digital watermarks are used to control the transmission and/or receipt of messages including images or audio transmitted over the system. The system prevents the accidental dissemination of information to unauthorized receivers. Furthermore, while no security system is fool-proof, the system helps guards against the intentional, but unauthorized, dissemination of information to unauthorized receivers.

Abstract: A method for detection of fraudulent postage indicia such as a stamp or permit marking includes an initial step of introducing a mail piece for processing on an automated facing and canceling machine and imaging the mail piece as it is being processed on the automated facing and canceling machine, which image includes an image of the postage indicia. The image is analyzed according to predetermined criteria stored in a database to determine if the postage indicia meets the predetermined criteria and therefore has an enhanced probability of being valid. If the analysis is step results in a determination that the postage indicia as an enhanced probability of being invalid, then the method involved determining that the information corresponds to counterfeit postage indicia; and storing the resulting information and decision in the database.

Abstract: System and method for printing indicia on mailing items, such as envelopes, cards, or label media, has a host computer system connected to a postal security device. The postal security device stores postage funds and, responsive to the host computer postage requests, provides data to the host computer representing an IBI Lite barcode having at least part of a unique authentication code. The host computer utilizes such data to produce print data representing postage indicia, and send such print data to one of a mailing machine, stand-alone printer, or printing system, for printing on a mailing item to be associated with the authentication code. A plurality of host computer systems each with their respective PSD may be provided. A reset computer system can communicate with each PSD, via their respective host computer, to provide additional postage funds and to receive information representing transaction data stored in the host computer.

Abstract: The present invention uses an element of digital data that is created during digital postage mark (DPM) generation process from the digital image of the destination address block. The digital data is included into recoverable portion of the digital signature and imprinted on a mailpiece. During DPM verification, a representative portion of a destination address block image is retrieved in its original form from the digital signature itself. The retrieved portion of the image then can be compared with the similar digital data obtained from the scanned destination address block obtained during normal mail scanning and processing activities. If the comparison is under a predetermined threshold, then the DPM is declared authentic and the mailpiece can be processed and delivered with confidence. If, on the other hand, the threshold is not met, the DPM is declared a copy or a counterfeit of another DPM and the mailpiece can be subjected to further investigation.

Abstract: Provided is an electronic postal money order system and method comprising the purchase and fulfillment of a money order, having the steps of inputting, through a computer, money order identifying data, comprising at least the amount of the money order and addressee data and inputting payment authorization data through a payment authorization terminal. The system also transmits the money order identifying data and payment authorization data to a central server, authenticates the payment authorization data and, upon such authentication, prints a money order corresponding to the inputted money order identifying data and mails the money order to the addressee.

Abstract: Methods and systems for dispensing value are described. In one configuration, a unique tangible indicia is enabled with a value and then disabled after the value is redeemed. In another configuration, a user enables a unique coded stamp and associates a postage payment with the stamp. The postal service cancels the stamp by deactivating the stamp from a list of active stamps and optionally audits the payment association.

Abstract: A method and system for using an indexing identifier (such as, e.g., a tracking ID or the combination of a postage vendor ID, user account, and piece count) to decrease the size of the postage indicium transmitted to an end user computer, or eliminate transmission of the postage indicium altogether, is provided. When the postage indicium for the end user computer is generated, it is stored, and the indexing identifier, rather than the postage indicium, is transmitted to the end user computer. The indexing identifier is applied to a mail piece, which is then scanned by the postal authority. The postal authority can obtain the stored postage indicium by reference to the indexing identifier. In this manner, the postal authority has access to the postage indicium without having to apply it to the mail piece. The indexing identifiers can optionally be used to index sender identification information for verifying that the sender of a mail piece is a trusted individual or entity.

Abstract: In a mailing system for franking a postage indicium serving as a proof of postage, postal data including the postage needs to be communicated through such an indicium. Illustratively, the postal data is categorized into (a) invariable postal data, e.g, a device ID identifying the mailing system, which is unaffected by a franking transaction, and (b) variable postal data, e.g., the postage, which may change from one franking transaction to another. To avoid latency of the franking operation, the invariable postal data is preset for initial printing of the postage indicium, and the variable postal data is determined and set for printing in real time. In printing the postage indicium, the invariable postal data and the variable postal data are presented in that order in one or more symbols.

Abstract: A method and system for verifying a check that is being used for an on-line transaction, utilizes a hash code value either printed directly on the check, or obtained from an insert card provided by a check printer. To conduct an on-line transaction using a check, the customer enters in data obtained from a MICR line of the check, whereby the data includes a one-way hash value that is based on the data provided on the MICR line as well as private data not provided on the MICR line. A web server of an e-tailer for which the customer seeks to make the on-line transaction, receives the data entered by the customer. The web server of the e-tailer transmits, to a check verifier, the data entered by the customer. The check verifier verifies whether or not the check is valid, by comparing the hash code value entered in by the customer with a hash code value that is separately calculated by the check verifier, based on private data of the customer obtained by the check verifier from a database.