Secure data capture apparatus and method

Abstract

Abstract of Disclosure In a postage meter system, a user enters information indicative of a batch of mail pieces to be franked. The mail pieces are franked, and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine. The data are digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD). The data are communicated to a server, where the data are authenticated, preferably by means of public-key cryptographic means. These data are then made available to the postal authority in a secure way. Customer accounting is based on statistical data gathered by the postage printing base. Such data may be accumulated and stored in the PSD or in the postage printing base outside of the PSD. The cryptographic protection inherent in the PSD, of the sensitive data, effectively detects or prevents tampering. In addition effective backup and recovery mechanisms may be put into place to protect customer as well as third-party interests. In order to assure the authenticity and accuracy of the data collected, the use of a PSD solves both the guarantee of authenticity and accuracy of the data collected for use by the postal authority. Using the data collected by the PSD as input for the calculation of the discount allows for payback calculations due the customers (or allows for giving customers credit for future services).

Description

Cross Reference to Related Applications[0001] This application claims priority from U.S. appl. no. 60 / 339,530, filed November 16, 2001, which application is hereby incorporated herein by reference.Background of Invention[0002] The application relates generally to franking machines (postage meters) and systems that include franking machines. The application relates more particularly to capturing data regarding batches of franked pieces (mail pieces) and handling such data in a secure way.[0003] Postage meters offer many benefits to postal authorities when compared with postage stamps. If there is a rate change, postage-stamp customers need to be provided with stamps of new denominations. In contrast, postage meter customers merely set their meters to the new rates. Postage-stamp customers stand in line at post offices, making it necessary to provide postal clerks to sell the stamps individually, while meter customers purchase postage in bulk. Indeed in many jurisdictions meter custom...

AI Technical Summary

Benefits of technology

[0013] Customer accounting is based on statistical data gathered by the postage printing base. Such data may be accumulated and stored in the PSD or in the postage printing base outside of the PSD. The cryptographic protection inherent in the PSD, of the sensitive data, effectively detects or prevents tampering. In addition effective backup and recovery mechanisms may be put into place to protect customer as well as third-party interests. In order to assure the authenticity and accuracy of the data collected, the use of a PSD solves both the guarantee of authenticity and accuracy of the data collected for use by the postal authority. Using the data collected by the PSD as input for the calculation of the discount allows for payback calculations due the customers (or allows for giving customers credit for future services).

[0014] Data may be stored in small amounts and for relatively short periods of time in the PSD, cryptographically signed, and then stored for longer periods of time in the base (but not in the PSD) until a convenient time for a TMS data upload.

Problems solved by technology

This is, of course, error-prone and awkward.

Security flaws are routinely uncovered from time to time in commonly used software and operating systems.

None of these approaches is fully satisfactory in its handling of the problems and needs discussed here.

Images