Cloud Postage Architecture With HSM Accounting Separation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional postage metering systems require multiple postal security devices (PSDs) per customer, leading to system complexity, high storage of funds in each device, and inefficiencies in managing customer accounts, especially for low-volume mailers.
Innovation Solution
A cloud-based postage generating system using a Hardware Security Module (HSM) for cryptographic functions and a separate transaction server for accounting, with an Integrity Monitor Server ensuring transaction consistency and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple postal security devices (PSDs) are deployed per customer, then postage generation security and reliability are improved, but system complexity and device quantity increase
Solution Approach 1:
The patent segments the traditional monolithic PSD into separate functional components: cryptographic operations are performed by cloud-based HSMs, while accounting and transaction management are handled by a postage meter server. This segmentation allows each component to be optimized independently and eliminates the need for multiple redundant PSDs per customer.
Solution Approach 2:
The patent implements a shared PSD model where a single PSD can serve multiple customers sequentially. The PSD is dynamically allocated to different customers based on transaction requests, allowing one device to perform the functions that previously required multiple dedicated devices. This universal approach reduces overall system complexity while maintaining security through proper isolation and authentication mechanisms.
2Reliability
If multiple postal security devices (PSDs) are deployed per customer, then postage generation security is improved, but the amount of funds stored in devices increases
Solution Approach 1:
The patent merges the accounting function with the cryptographic function in a centralized postage meter server. Instead of storing funds distributed across multiple PSDs, the system consolidates fund management in a single location while using cloud-based HSMs for cryptographic operations. This merging reduces the total quantity of funds that need to be stored across multiple devices while maintaining security through the separation of cryptographic keys from fund balances.
3Reliability
If dedicated PSDs are assigned to each customer, then individual account security is improved, but ease of operation and account management deteriorate
Solution Approach 1:
The patent introduces a postage meter server as an intermediary between customers and the cryptographic infrastructure. This server manages customer accounts, tracks postage purchases, and coordinates with cloud-based HSMs for cryptographic operations. The intermediary handles account management tasks centrally, making operations easier while maintaining individual account security through proper authentication and authorization mechanisms.
4Productivity
If multiple servers with multiple PSDs are added to handle increasing customers, then customer service capacity is improved, but system complexity and infrastructure costs increase
Solution Approach 1:
The patent implements dynamic resource allocation where a single PSD can be sequentially assigned to different customers based on transaction requests. The system dynamically manages PSD allocation, cloud HSM connections, and server workloads rather than requiring static dedicated assignments. This dynamic approach allows the infrastructure to scale more efficiently to handle increasing customer capacity without proportionally increasing system complexity.
Data Source
AI summary
A postage generating system and method that allows for the generation of postage without the use of a PSD, while still maintaining the necessary data integrity and non-repudiation aspects. The cryptographic and accounting functions are performed separately when an indicium is generated and reconciled to ensure that every transaction is properly accounted for and funds are deducted from the user's account. The cryptographic functions for an indicium are performed utilizing a cloud-based Hardware Security Module (HSM). Transaction records for indicium generated by an HSM are stored in a database. The accounting is performed by a transaction server, separate and remote from the HSM, to make updates to the client's account to account for generated indicia. An Integrity Monitor Server monitors the consistency of the transactions, i.e., that every transaction performed by an HSM is properly accounted for by the transaction server and funds are deducted from the user's account.