Pitney Bowes Inc.

Other

Kevin D Hunter

Robert T Durst, Jr

Alfred C Schmidt

Barry H Axelrod

Ronald P Sansone

Leon A Pintsov

Arno Muller

Feliks Bator

Guy L Fougere

Robert A Cordery

Walter J Kulpa

Steven J Pauly

Perry A Pierce

Jose Pastor

Walter J Baker

Terrence M Doeberl

William G Hart, Jr

Kathryn V Lawton

Louis J Loglisci

Robert T Durst

Jacqueline Collins

William G Hart

Patricia B Baer

Frederick W Ryan, Jr

Morton Silverberg

David K Lee

David W Hubbard

George M Brookner

Jeffrey D Pierce

Monroe A Weiant, Jr

John C Hamma

Steven M Kaye

Wojciech M Chrosny

Gary M Heiden

Linda V Gravell

Frank M D'Ippolito

Ian A Siveyer

Fran E Blackman

Michael D O'Hare

John T Balga, Jr

Scott Korowotny

Thomas A D'Andrea

George B Edelmann

Wendy F Jai

Roman Bystrianyk

Iiya Shnayder

Edward Mailhot

A postage metering system is provided with a countdown time. The countdown timer issues a priority interrupt when the timer has timed out which interrupts the control system of the meter in such a manner as to hold the meter in reset preventing operation of the postage meter. The timer is reset to a fixed period upon each funds recharge after the meter has been placed in recharge mode but prior to exposure of the secure accounting memory to recharge information.

Metering system with automatic resettable time lockout

A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain. The Key Management System installs the master keys in the transaction evidencing device and validates the tokens. The secure boxes include a key generation box for generating, encrypting and signing a master key; a key installation box for receiving, verifying and decrypting the signed master key and for installing the master key into the transaction evidencing device; a key verification box for verifying the installation of the master key in the transaction evidencing device, a token verification box for verifying the tokens, and at least one manufacturing box for generating domain keys and distributing the domain keys among the secure boxes for each of the domains.

Cryptographic key management and validation system

A method of transferring update data from a microcomputer to a memory device having a transportable non-volatile memory median requiring that the transportable non-volatile memory median is divided into a plurality of sectors. Update data is to be written to data sectors of the transportable non-volatile memory median in accordance with a sector map. One of the sectors to be updated is the directory sector and another one of the sectors to be updated is the file access table sector. The microcomputer is programmed to reserve a specified number of sectors as a recovery area wherein some of the sectors of the recovery area are reserved for the sector map and other sectors of the recovery area are reserved for storage of the update data. The microcomputer identifies if a sector map resides in the recovery area. If no sector map resides in the sector map area of the recovery area, the microcomputer proceeds to identify which of the sectors are to be updated and generating a sector map accordingly. If a sector map resides in the recovery area, the microcomputer first writes data from the recovery area to the sectors according to the sector map and then proceeds to identify which of the sectors are to be updated and generating a sector map of the sectors to be updated. The microcomputer then writes the sector map and the update data to the recovery area before writing the update data to the sectors in accordance with the sector map. Once the respective sectors are updated the sector map is erased.

Method of transferring data to a memory medium in a mailing machine

A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier. The step of registering the master key to a logical security sub-domain in the Key Management System further includes the steps of assigning a sub-domain to the digital meter; installing a postal identifier into the digital meter; associating the postal identifier to the unique device identifier; generating a registration token in the digital meter based on the postal identifier and the unique device identifier; generating registration tokens using the master key recorded in the archives; verifying that the registration tokens are identical; and recording the master key in the sub-domain. The steps are repeated for each domain assigned to the digital postage meter.

Method of manufacturing generic meters in a key management system

An interface apparatus is provided with a number of communication ports for providing a communication interface between a postage meter and a plurality of external devices, such as, a scale and a modem. A principal communications port connectable to the postage meter. A secure communication port is provided for receiving messages on a secure scale using encrypted protocol signals. The interface unit includes an additional number of unsecured ports for communication with unsecured devices such as a modem or an unsecured scale utilizing conventional protocol signals. The interface further includes a programmable microcontroller in bus communication with a random access memory, a non-volatile memory and a program memory, a first communication bus connecting the principal port to the microcontroller and a second communication bus connecting one or more of the second communication ports to the microcontroller. The microcontroller of the interface unit is programmed to establish a communication link between one of the second communication ports and the principal port pursuant to a communication request signal from the principal port identifying which of the second communication ports for communication. Conversely, the microcontroller can establish a communication link between the second communication port and the principal communication port pursuant to a communication request from one of the second communication ports. The messages being communicated are comprised of a number of message frames and each of the message frames has a header, one of headers being designated for message frames which are intended to be directed to the interface unit. The interface unit monitors the header portion of each message frame and stripping the message frames from the messages having the designated message frame header for messages intended as instructions for the interface unit. An established communication link can be interrupted when a message having the designated message frame header and message frame instructs the microcontroller to establish communication between the microcontroller and the postage meter through principal port.

External interface unit having message routing and protocol conversion

An improved electronic meter for accounting for funding and transaction information includes a micro control system for controlling the operation of the meter in response to an operation program. The micro control system utilizes a microprocessor in bus communication with a plurality of addressable memory units and input device in bus communication with the microprocessor. The meter has a first mode of operation for performing transactions and accounting for the transactions and a second mode of operation for accessing the accounting information in response to a first security code. At least one of the memory units has a plurality of accounting registers for storing the accounting information in predetermined categories. The meter has a third mode of operation for accessing the registers of the first memory and initializing the registers in response to the input of a second security code. The accounting information including a REINIT table for creating a selected number of records representative of the accounting information of the accounting register in the respective categories upon each initialization of the accounting registers. The operation program prevents the record from being overwritten once the respective record has been created and the meter is in the first, second or third mode.

System for recording the initialization and re-initialization of an

In an electronic postage meter which has a thermal printer and a control system for causing the thermal printer to print a postage indicia, the thermal printer includes a linear array of thermal elements. The electronic postage meter control system is comprised of a print control circuit for producing lengthwise and serially, during a first mode of operation, a composite image having alphanumeric characters and graphic data. The image is divided into a plurality of widthwise sections. A first widthwise section has highly critical alphanumeric character information and graphic information. A second widthwise section of the image having less critical alphanumeric character information. The control system has a second mode of operation for producing serial test data coupled to the thermal elements such that the thermal print elements are selectively responsive to the serial test data for developing for each of the thermal elements an associated test signal during each second mode of operation. A comparison of each test signal for each of the thermal elements against an associated predetermined reference signal is performed in order to automatically generate an associated failure signal when a defective thermal element is detected during a second mode of operation. If, the failure is associated with first widthwise section and no failure are associated with the second widthwise section, than the image is shifted to avoid the failure, otherwise print is stopped. If the failure is associated with the second widthwise section and the failures are less that a predetermined number than the thermal printer continues to print, otherwise printing stop.

Epm having a system for detecting fault conditions of the thermal

A method and apparatus for controlling tension on a sheet material in a reel-to-reel transport system. The sheet material is feed along a defined path from a supply reel to a take-up reel. A motor is operatively connected to the take-up reel for applying a torque to the take-up reel while a sensor is positioned to detect rotation of the supply reel. A microcontroller enables the motor with an initial PWM pwm.sub.o to create torque on the take-up reel and then incrementally increases the PWM. When the sensor indicates that the supply reel has moved, the current PWM is stored in memory as pwm.sub.i. This pwm.sub.i is subsequently used by the apparatus to determine a desired tension on the thermal ribbon.

Method and apparatus for controlling tension on a sheet material in a

An apparatus and method is disclosed for controlling the operation of a mailing machine having a postage meter which includes a thermal printer which transfers wax ink from an ink ribbon to an envelope being fed through the mailing machine, in such a way that the printer cannot operate if the envelope is not is a proper position in the mailing machine to completely cover a feed roller which controls movement of the envelope and the ink ribbon. The mailing machine includes a microprocessor that responds to sensors positioned along the feed path of the envelope to prevent initiation of a printing operation if an envelope is not properly positioned in the mailing machine, and which terminates an ongoing printing operation in the event, either that the envelope becomes skewed with respect to the normal direction of feed such that it will expose a portion of the feed roller, or that the envelope is too short to receive the entire image which is intended to be printed thereon before the trailing edge of the envelope would uncover the feed roller.

Apparatus and method for detecting the position of envelopes in a

The improved user interface for a mail processing machine includes a barcode reader and an associated chart having barcodes which are readable by the barcode reader. The barcodes are respectively associated with commands, characters, and accounts such that messages may be constructed by reading selected barcodes from the chart for inputting commands and data into the mail processing machine. The barcode messages are converted into machine commands and data inputs for operation of the machine. Barcode information may also be supplied with batches of mail for ease of entry of pertinent control data for the batch.

Mail processing system having a barcode user interface

A postal finishing kiosk in which a user is provided with a mail piece, such as a postcard. The user supplies the name and address to which the mail piece is to be sent and the kiosk dispenses a finished mail piece to the user with the address printer thereon. A feature of the kiosk is that it stores the mail piece forms on a roll, but delivers a linear mail piece to the user. In an alternative to the invention, the kiosk dispenses a ticket to the user that can be used in activities of the environment in which the kiosk is found.

Postal finishing kiosk

The mailing processing system includes a postage meter for dispensing postage. The postage meter includes having a printing mechanism having value print elements and a postal inscription mechanism. The postal inscription mechanism has a plurality of printing surfaces. Each surface is embossed with a different mail class identifier. The mail processing system inclusive of the postage meter operates under the control of a microcomputer means for accounting for postage dispensed by the postage meter having accounting means for providing department accounting of said dispensed postage and for controlling said printing means. The microcomputer is programmed to enable permitted carrier and carrier fees sets in accordance with operator selected departmental account. The microcomputer is being further programmed to cause said postal inscription mechanism to position said respective printing surface for printing corresponding to the carrier class selected by said operator.

Automatic selection of postage meter print element based on mail class

The method and apparatus for providing a meter activity log is usable in a mail processing machine which is adapted to receive a plurality of postage meters. The mail processing machine includes a microcomputer control and nonvolatile memory storage means for storing meter accounting information. The meter accounting information is stored in association with a unique identification of each of a plurality of meters installed in the mail processing machine. Accounting information relating to the uniquely-identified meter activity which has occurred off-line is determined and stored. Information relative to the uniquely-identified meter activity upon the occurrence of each of a plurality of selected events which occur on-line is also stored. The log may be printed and the information cleared by command of the operator.

Mail processing system having a meter activity log

A metering system requires a user to provide periodic, accurate meter readings to a billing authority. The metering system includes a mechanism for dispensing postage or another accountable quantity, an accounting mechanism for updating and storing information regarding the amount of postage dispensed by the dispensing mechanism and an output mechanism for outputting the storing postage information. The system also includes a mechanism for storing a time deadline, a clock that provides a current date signal and a lock that disables the dispensing mechanism when the current date is not before the stored deadline. The system also includes a reset mechanism for extending the stored deadline. A user of the system reads the output of the system to obtain a current meter reading. The user then telephones the billing authority's data center, provides the current reading to the data center and receives back from the center an encrypted combination that reflects the reading provided by the user. The user enters the combination into the system. The meter decrypts the combination and verifies that the reading provided by the user matches the stored postage information. The meter then extends the stored deadline.

Metering system with remotely resettable time lockout

A method and system for analyzing the usage of postage meters with respect to the history of meter recharges for the purpose of detecting fraudulent or improper usage of the meters. The apparatus includes an optical character recognition system which scans mail pieces in a stream of mail pieces to recognize postage amounts and meter identification numbers imprinted on the mail pieces. The apparatus also includes inputs for input of data representing the recharge history for postage meters which correspond to authorized identification numbers and thresholds, i.e. parameters against which expenditures and the refill history of a particular meter will be tested. A data processing system compares cumulative amounts of postage expended by a particular meter to determine if the difference between totals expended and total recharges exceeds the thresholds, indicating the possibility of fraudulent or improper use of that meter. When such possible fraudulent or improper use is detected the apparatus diverts the suspect mail pieces from the mail stream. In one embodiment the apparatus may include an input for input of particular meter identification number to be diverted. In another embodiment the apparatus may check for incorrect dates on mail pieces.

Apparatus for the analysis of postage meter usage

Growing community of inventors

Stratford, CT, United States of America

Kevin D Hunter