Cryptographic key management and validation system
    3.
    发明授权
    Cryptographic key management and validation system 失效
    加密密钥管理和验证系统

    公开(公告)号:US5812666A

    公开(公告)日:1998-09-22

    申请号:US553812

    申请日:1995-10-23

    摘要: A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain. The Key Management System installs the master keys in the transaction evidencing device and validates the tokens. The secure boxes include a key generation box for generating, encrypting and signing a master key; a key installation box for receiving, verifying and decrypting the signed master key and for installing the master key into the transaction evidencing device; a key verification box for verifying the installation of the master key in the transaction evidencing device, a token verification box for verifying the tokens, and at least one manufacturing box for generating domain keys and distributing the domain keys among the secure boxes for each of the domains.

    摘要翻译: 一种密钥管理系统,用于生成,分发和管理信息交易系统使用的加密密钥,该信息交易系统采用加密手段来产生信息完整性的证据。 该系统包括可操作地彼此耦合的多个功能不同的安全盒。 每个安全盒都执行密钥生成,密钥安装,密钥验证或令牌验证的功能。 可操作地耦合到安全盒的计算机提供系统控制并促进安全盒之间的通信。 多个单独的逻辑安全域提供用于密钥生成,密钥安装,密钥验证和使用密钥管理功能由域内的交易证明设备产生的令牌的验证的域过程。 分别对应于每个安全域的多个域归档安全可靠地记录每个域的密钥状态记录和主密钥。 密钥管理系统将主密钥安装在事务证明设备中,并验证令牌。 安全盒包括用于生成,加密和签名主密钥的密钥生成盒; 用于接收,验证和解密签名的主密钥并将主密钥安装到交易证明设备中的密钥安装箱; 用于验证主密钥在交易证明设备中的安装的关键验证框,用于验证令牌的令牌验证盒,以及用于生成域密钥的至少一个制造盒,以及在每个的安全盒中分配域密钥 域名

    Network open metering system
    7.
    发明授权
    Network open metering system 失效
    网络打开计量系统

    公开(公告)号:US6151590A

    公开(公告)日:2000-11-21

    申请号:US575109

    申请日:1995-12-19

    IPC分类号: G07B17/00 H04L9/00

    摘要: A transaction evidencing system includes a plurality of computer systems operatively configured to form a network with one of the computer systems functioning as a server and the remaining computer systems functioning as clients. Each of the computer systems includes a processor, memory and storage media. At least some of the storage means includes non-metering application programs that are selectively run on the client computer systems. An unsecured printer is operatively coupled to at least one of the computer systems for printing in accordance with the non-metering application programs. A portable vault card, which is removably coupled to the server computer system, includes digital token generation and transaction accounting processing. The client computer systems issue requests for digital tokens to the server computer system in response to requests for indicia from the non-metering application programs. The requests for digital tokens include predetermined information required by the token generation processing. The server computer system communicates with the vault card when the vault card is coupled to the server computer system, sending the requests for digital tokens to the vault card and receiving from the vault card the generated digital tokens. The server computer system sends each digital token to the client computer system that requested the digital token. The requesting client computer system generates an indicia bitmap from the digital token. The server computer system receives from the vault a transaction record that includes the digital token and the predetermined information and stores the transaction record in its storage media.

    摘要翻译: 交易证明系统包括多个计算机系统,可操作地配置为形成网络,其中一个计算机系统用作服务器,其余的计算机系统用作客户端。 每个计算机系统包括处理器,存储器和存储介质。 至少一些存储装置包括选择性地在客户端计算机系统上运行的非计量应用程序。 根据非计量应用程序,不安全的打印机可操作地耦合到至少一个计算机系统进行打印。 可拆卸地耦合到服务器计算机系统的便携式存储卡包括数字令牌生成和事务记帐处理。 响应于来自非计费应用程序的标记的请求,客户端计算机系统向服务器计算机系统发出针对数字令牌的请求。 数字令牌的请求包括令牌生成处理所需的预定信息。 当保险库卡耦合到服务器计算机系统时,服务器计算机系统与保管库卡进行通信,向数据库卡发送数字令牌请求并从保管库卡接收生成的数字令牌。 服务器计算机系统将每个数字令牌发送到请求数字令牌的客户端计算机系统。 请求客户端计算机系统从数字令牌生成标记位图。 服务器计算机系统从存储库接收包括数字令牌和预定信息的事务记录,并将交易记录存储在其存储介质中。

    System and method of verifying cryptographic postage evidencing using a
fixed key set
    8.
    发明授权
    System and method of verifying cryptographic postage evidencing using a fixed key set 有权
    使用固定密钥集验证加密邮资证明的系统和方法

    公开(公告)号:US06058193A

    公开(公告)日:2000-05-02

    申请号:US340592

    申请日:1999-06-28

    IPC分类号: G07B17/00 H04L9/00

    摘要: A method for controlling keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document comprises the steps of generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys; generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device; calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; encrypting the verifier token key set with a privacy key; and distributing the set verifier token keys and the privacy key to verifiers. The token keys are a function of the verifier master keys and a code valid for a limited time. The pointer algorithm is an appropriate symmetric key cryptographic algorithm and the code is function of a date dependent parameter. The master keys are distributed to postal and vendor data centers.

    摘要翻译: 一种用于控制用于验证由交易证明设备产生并被打印在文档上的编码信息的密钥的方法包括以下步骤:生成多个随机验证器主密钥以获得由固定数量的密钥组成的一组验证者主密钥 ; 通过对所述交易证明设备唯一的数据应用伪随机算法来生成至少一个指针; 计算多个验证者令牌密钥以获得与所述验证者主密钥集合相对应的验证者令牌密钥集; 用隐私密钥加密验证者令牌密钥集; 并将设置的验证者令牌密钥和隐私密钥分发给验证者。 令牌密钥是验证者主密钥和有限时间内有效的代码的函数。 指针算法是适当的对称密钥加密算法,代码是日期相关参数的函数。 主密钥分发给邮政和供应商数据中心。

    Network open metering system
    10.
    发明授权
    Network open metering system 有权
    网络打开计量系统

    公开(公告)号:US06865557B1

    公开(公告)日:2005-03-08

    申请号:US09452404

    申请日:1999-12-01

    IPC分类号: G07B17/00 G06F17/60

    摘要: A transaction evidencing system includes a plurality of computer systems operatively configured to form a network with one of the computer systems functioning as a server and the remaining computer systems functioning as clients. Each of the computer systems includes a processor, memory and storage media. At least some of the storage means includes non-metering application programs that are selectively run on the client computer systems. An unsecured printer is operatively coupled to at least one of the computer systems for printing in accordance with the non-metering application programs. A portable vault card, which is removably coupled to the server computer system, includes digital token generation and transaction accounting processing. The client computer systems issue requests for digital tokens to the server computer system in response to requests for indicia from the non-metering application programs. The requests for digital tokens include predetermined information required by the token generation processing. The server computer system communicates with the vault card when the vault card is coupled to the server computer system, sending the requests for digital tokens to the vault card and receiving from the vault card the generated digital tokens. The server computer system sends each digital token to the client computer system that requested the digital token. The requesting client computer system generates an indicia bitmap from the digital token. The server computer system receives from the vault a transaction record that includes the digital token and the predetermined information and stores the transaction record in its storage media.

    摘要翻译: 交易证明系统包括多个计算机系统,可操作地配置为形成网络,其中一个计算机系统用作服务器,其余的计算机系统用作客户端。 每个计算机系统包括处理器,存储器和存储介质。 至少一些存储装置包括选择性地在客户端计算机系统上运行的非计量应用程序。 根据非计量应用程序,不安全的打印机可操作地耦合到至少一个计算机系统进行打印。 可拆卸地耦合到服务器计算机系统的便携式存储卡包括数字令牌生成和事务记帐处理。 响应于来自非计费应用程序的标记的请求,客户端计算机系统向服务器计算机系统发出针对数字令牌的请求。 数字令牌的请求包括令牌生成处理所需的预定信息。 当保险库卡耦合到服务器计算机系统时,服务器计算机系统与保管库卡进行通信,向数据库卡发送数字令牌请求并从保管库卡接收生成的数字令牌。 服务器计算机系统将每个数字令牌发送到请求数字令牌的客户端计算机系统。 请求客户端计算机系统从数字令牌生成标记位图。 服务器计算机系统从存储库接收包括数字令牌和预定信息的事务记录,并将交易记录存储在其存储介质中。