摘要:
A mailing machine that optimizes throughput by reducing the amount of time necessary for the PSD to generate the digital signature and indicium for each mail piece is provided. The debit operation performed by the PSD, i.e., adjusting the PSD registers, is separated into three different sections, a pre-debit operation, a perform debit operation, and a complete debit operation. In addition, the calculation of the digital signature can optionally be pre-computed, or, alternatively, computed in stages, i.e., partial signature calculation. Utilizing this granularity, the cryptographic operations associated with generating the digital signature can be shifted between the three debit operations such that the execution time of the time critical portion of the debit operation (perform debit) can be optimized to meet the performance requirements of the mailing machine in which the PSD is deployed.
摘要:
A mailing machine that optimizes throughput by reducing the amount of time necessary for the PSD to generate the digital signature and indicium for each mail piece is provided. The debit operation performed by the PSD, i.e., adjusting the PSD registers, is separated into three different sections, a pre-debit operation, a perform debit operation, and a complete debit operation. In addition, the calculation of the digital signature can optionally be pre-computed, or, alternatively, computed in stages, i.e., partial signature calculation. Utilizing this granularity, the cryptographic operations associated with generating the digital signature can be shifted between the three debit operations such that the execution time of the time critical portion of the debit operation (perform debit) can be optimized to meet the performance requirements of the mailing machine in which the PSD is deployed.
摘要:
A method and system that protects against a replay attack in a closed system postage meter is provided. “Freshness” data is included along with each indicium message sent from the meter to the printer, thereby enabling the printer to detect “stale” indicium data, i.e., indicium data that was previously generated and is being replayed, and prohibit the printing of duplicate indicia. The freshness data includes a random nonce generated by the printer during initialization along with sequence data that the printer can verify against sequence data from the previous printed indicium. If in the current indicium message the nonce is different or the current sequence data is not greater than or equal to the sequence data from the previous printed indicium, indicating the current indicium data may have been previously generated and is a replay, the printer will not print the current indicium data.
摘要:
The apparatus comprises: a first module including a universal key; a second module including a unique identifier and a unique key wherein the unique key is derived from the unique identifier and the universal key and incorporated into the second module during manufacture of the second module. The second module is in communication with the first module. The apparatus further comprises a controller for performing the following subsequent to manufacture of the first module and the second module: initiating a communication session between the first module and the second module; transmitting the unique identifier from the second module to the first module; and deriving the unique key in the first module using the unique identifier and the universal key. A method for synchronization of cryptographic keys between modules of a distributed system and a method of manufacturing a postage evidencing system are also provided.
摘要:
A postage evidencing system including a plurality of domains for partitioning a population of postage meters according to an operating characteristic, a data center, a postage meter in operative communication with the data center and a printer in operative communication with the postage meter. The postage meter is initialized to operate in a particular domain while the printer is capable of operating in each of the plurality of domains. To update or enable a domain in the printer, the postage meter transmits an indication of the particular domain to the data center. Then, the data center encrypts the indication and transmits the indication to the postage meter which in turn forwards the encrypted indication to the printer. The printer decrypts the encrypted indication and using the indication enables a respective domain in the printer corresponding to the particular domain of the postage meter. A method for updating domains in a postage evidencing system is also provided.
摘要:
A system for generating direct offers includes a computer system adapted to generate a group of offers, a list of targeted recipients that may be potential customers, and a set of business rules for selecting appropriate ones of the offers based at least in part on certain personal recipient information. The system also includes a third party computer system and a database that stores in confidence personal information for each of the targeted recipients. The third party computer system is adapted to receive the offers, the list of targeted recipients, and the set of business rules, select an appropriate one of the offers, if any, for each targeted recipient according to the business rules based at least in part on the personal information of the targeted recipients, and construct and cause to be sent a final offer for each of the targeted recipients for which an offer has been selected.
摘要:
A mailing system is includes of a mailing machine operating under the control of a microcontroller having a communication port with a first channel and a second channel. The mailing system also includes a meter vault which operates under the control a microcontroller mounted in a secure housing and having a communication port with a first channel and a second channel. A printer is included which operates under the control of a microcontroller mounted in a secure housing and having a communication port having a first channel and a second channel. A printer interface is included for providing a number of independent communication paths. A first path provides communication between first channel of the mailing machine and the first channel of the meter vault. A second path provides communication between the second channel of the mailing machine and the second channel of the printer, and a third path for providing communications between the second channel of meter vault and the first channel of the printer.
摘要:
Methods and systems for verification of indicia that do not require key management systems, and in which revocation of key pairs is easily performed without adding costs to the verification process are provided. Indicia are generated and authenticated utilizing an identity-based encryption (IBE) scheme. A key generating authority generates a private key for a PSD, distributes the private key securely to the PSD, and provides public information for use by a verification service when verifying cryptographic digital signatures generated with the private key. The corresponding public key is a string consisting of PSD information that is provided as part of the indicium. The verification service can verify the signature of each indicium by obtaining the public key string from the indicium, and utilizing the key generating authority's public information.
摘要:
A method and system for securing the communication link between the accounting device and printer of a metering system by authenticating the data being sent via the link utilizing a Nonlinear Feedback Shift Register (NLFSR) based system is provided. A NLFSR is provided in each of the accounting unit and printing unit of a metering system. The NLFSR in the accounting unit is utilized to generate a message authentication code (MAC) for the image data being sent from the accounting unit to the printing unit. The printing unit generates a corresponding MAC for the received image data using the NLFSR in the printing unit. The MAC generated by the printing unit is compared with the MAC generated by the accounting unit. If the MACs are similar, the image data is accepted as authentic and the printing unit will print the image corresponding to the image data.
摘要:
A system, method, and medium, the method including receiving parameter information associated with a mailer, associating the parameter information with a mailing, receiving statistical information, the statistical information including historical performance data of at least one carrier, determining a delivery sequence for the mailing based on the received mailer parameter information and the statistical information, and outputting the determined delivery sequence for the mailing.