摘要:
A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with another aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.
摘要:
A method for processing controlled acceptance mail includes creating, at a first location, a batch of mail including a plurality of mailpieces, each of the plurality of mailpieces having unique indicia data printed thereon which identifies a source of creation of the batch of mail and a unique identifier for a corresponding one of the plurality of mailpieces upon which the unique indicia data is printed; generating, at the first location, a manifest containing all of the unique indicia data for each of the plurality of mailpieces; cryptographically protecting the manifest; sending the cryptographically protected manifest to a second location; verifying the authenticity of the cryptographically protected manifest at the second location; providing the batch of mail to a carrier distribution system for distribution; as part of the carrier distribution system reading unique indicia data from selected mailpieces being distributed therein and sending the unique indicia data for each of the selected mailpieces to the second location; and comparing, at the second location, the unique indicia data received from the carrier distribution system for each of the selected mailpieces with all of the unique indicia data in the manifest to determine if any one of the unique indicia data received from the carrier distribution system matches any of the unique indicia data in the manifest.
摘要:
A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.
摘要:
A transaction evidencing system includes a personal computer (PC) comprising a processor, memory and hard drive, with a plurality of non-metering application programs that selectively run on the PC. An unsecured printer is operatively coupled to the PC for printing in accordance with the non-metering application programs. A portable vault card that is removably coupled to the PC is programmed to generate tokens generation and perform transaction accounting. An application interface module in the PC, which interfaces with the non-metering application programs, issues a request for digital tokens in response to requests for indicia from a non-metering application program. A secure communications module in the PC, which securely communicates with the vault card when the vault card is coupled to the PC, sends the request for digital token to the vault card and receives a digital token generated by the vault card. An indicia bitmap generation module generates an indicia bitmap in the PC from the digital token and stores it in memory. The indicia bitmap is accessed by the non-metering application program when a print indicia operation is selected. A transaction capture module in the PC stores on the hard drive a transaction record corresponding to each issued digital token and associated postal data. The application interface module, the secure communications module, the indicia bitmap generation module and the transaction capture module are part of a dynamic link library module in the PC.
摘要:
A transaction evidencing system includes a plurality of computer systems operatively configured to form a network with one of the computer systems functioning as a server and the remaining computer systems functioning as clients. Each of the computer systems includes a processor, memory and storage media. At least some of the storage means includes non-metering application programs that are selectively run on the client computer systems. An unsecured printer is operatively coupled to at least one of the computer systems for printing in accordance with the non-metering application programs. A portable vault card, which is removably coupled to the server computer system, includes digital token generation and transaction accounting processing. The client computer systems issue requests for digital tokens to the server computer system in response to requests for indicia from the non-metering application programs. The requests for digital tokens include predetermined information required by the token generation processing. The server computer system communicates with the vault card when the vault card is coupled to the server computer system, sending the requests for digital tokens to the vault card and receiving from the vault card the generated digital tokens. The server computer system sends each digital token to the client computer system that requested the digital token. The requesting client computer system generates an indicia bitmap from the digital token. The server computer system receives from the vault a transaction record that includes the digital token and the predetermined information and stores the transaction record in its storage media.
摘要:
System and method for performing cryptographic operations include providing at least one processor for performing cryptographic operations, memory coupled to the processor for use in performing the cryptographic operations; and a storage component coupled to the processor for storing and retrieving information calculated and used in the cryptographic operations. The processor, memory and storage component are securely enclosed whereby direct access to the cryptographic operations is prevented. At least the processor is comprised in an integrated circuit. A first power source, which is external to the secure enclosure, is coupled to and supplies power to the processor, the memory and the storage component. A second power source, which is within the housing of the integrated circuit, is coupled to and supplies power to at least the processor. A switch is included for switching from the first power source to the second power source when the cryptographic operations are being performed and for switching from the second power source to the first power source when non-cryptographic operations are being performed.
摘要:
System and method for performing cryptographic operations include providing at least one processor for performing cryptographic operations, memory coupled to the processor for use in performing the cryptographic operations; and a storage component coupled to the processor for storing and retrieving information calculated and used in the cryptographic operations. The processor, memory and storage component are securely enclosed whereby direct access to the cryptographic operations is prevented. A first power source, which is external to the secure enclosure, is coupled to and supplies power to the processor, the memory and the storage component. A second power source, which is internal to the secure enclosure, is coupled to and supplies power to at least the processor. A switch is included for switching from the first power source to the second power source when the cryptographic operations are being performed and for switching from the second power source to the first power source when non-cryptographic operations are being performed.
摘要:
An apparatus for issuing money orders and similar instruments and for securing payment therefor is provided as a subsystem of an existing kiosk of a type including, but not limited to postal kiosks, informational kiosks, Automated Teller Machines (ATM), Point of Sale terminals (POS), vending machines and the like, or any combination thereof. Payment is secured by drawing funds directly from a customer's bank account; by drawing funds from a smart card, or by accepting currency through a bill acceptor. The apparatus further includes facilities for redeeming money orders and dispensing cash amounts corresponding thereto.
摘要:
A method for controlling keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document comprises the steps of generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys; generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device; calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; encrypting the verifier token key set with a privacy key; and distributing the set verifier token keys and the privacy key to verifiers. The token keys are a function of the verifier master keys and a code valid for a limited time. The pointer algorithm is an appropriate symmetric key cryptographic algorithm and the code is function of a date dependent parameter. The master keys are distributed to postal and vendor data centers.
摘要:
A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.