Pitney Bowes Inc.

Louis J Loglisci

Robert A Cordery

Frederick W Ryan, Jr

Leon A Pintsov

Kevin D Hunter

Steven J Pauly

Walter J Baker

John H Steinmetz

Maria P Parkos

Brad L Davies

Mark A Scribe

Kathryn V Lawton

Feliks Bator

David K Lee

Wesley A Kirschner

Richard P Schoonmaker

Monroe A Weiant, Jr

Yakup J Igval

Gary M Heiden

Frank M D'Ippolito

George T Monroe

Ian A Siveyer

Henry Bleggi

John A Toto

Richard A Rudolph

Terence G Beer

Edward J Naclario

Joel L Wald

A method providing for programming reprogramming at least some software into flash memory of a postage machine or other mailing apparatus. The method calls for providing the software to be programmed into the flash memory in at least two builds, with one build providing kernel software that includes the functionality needed for programming/reprogramming (including functionality for linking to a personal computer by which the software to be programmed may be provided), and the other build providing non-kernel software, usually routines providing application-oriented functionality, and not essential to programming the flash memory. The first build, of the at least two builds, is written into sectors of the flash memory that are then locked. The system provides, in some applications, for writing the non-kernel software using a paging algorithm that writes several sectors worth of non-kernel software at a time. Once the programming of the kernel software is completed, at least part of the flash memory, the part hosting the non-kernel software, can be programmed or reprogrammed using the functionality provided by the kernel software. In some applications, three builds are provided, with a bare minimum of kernel software, including only a subset of flash programming utilities and routines providing for a basic serial I/O link for linking to a personal computer. In such an application, all of the operating system software, i.e. the software providing for system-level functionality of the mailing machine, is provided as a second, non-protected build, and a third build is provided including application software.

Method for providing for programming flash memory of a mailing apparatus

A system controls the downloading of images from a portable device into a postage meter so that the downloaded images can be subsequently printed by the postage meter. The portable device is useable in conjunction with a fixed number of meter serial numbers and can be used for downloading of images into any meter until the fixed number has been met and accounted for by the portable device. At this point in time, the portable device is only capable of downloading the image into the specific meters that previously had the images downloaded from the portable device.

Method and apparatus for controlling use of the downloading of graphical

The apparatus comprises: a first module including a universal key; a second module including a unique identifier and a unique key wherein the unique key is derived from the unique identifier and the universal key and incorporated into the second module during manufacture of the second module. The second module is in communication with the first module. The apparatus further comprises a controller for performing the following subsequent to manufacture of the first module and the second module: initiating a communication session between the first module and the second module; transmitting the unique identifier from the second module to the first module; and deriving the unique key in the first module using the unique identifier and the universal key. A method for synchronization of cryptographic keys between modules of a distributed system and a method of manufacturing a postage evidencing system are also provided.

Synchronization of cryptographic keys between two modules of a

A postage evidencing system including a plurality of domains for partitioning a population of postage meters according to an operating characteristic, a data center, a postage meter in operative communication with the data center and a printer in operative communication with the postage meter. The postage meter is initialized to operate in a particular domain while the printer is capable of operating in each of the plurality of domains. To update or enable a domain in the printer, the postage meter transmits an indication of the particular domain to the data center. Then, the data center encrypts the indication and transmits the indication to the postage meter which in turn forwards the encrypted indication to the printer. The printer decrypts the encrypted indication and using the indication enables a respective domain in the printer corresponding to the particular domain of the postage meter. A method for updating domains in a postage evidencing system is also provided.

Updating domains in a postage evidencing system

A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain. The Key Management System installs the master keys in the transaction evidencing device and validates the tokens. The secure boxes include a key generation box for generating, encrypting and signing a master key; a key installation box for receiving, verifying and decrypting the signed master key and for installing the master key into the transaction evidencing device; a key verification box for verifying the installation of the master key in the transaction evidencing device, a token verification box for verifying the tokens, and at least one manufacturing box for generating domain keys and distributing the domain keys among the secure boxes for each of the domains.

Cryptographic key management and validation system

A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier. The step of registering the master key to a logical security sub-domain in the Key Management System further includes the steps of assigning a sub-domain to the digital meter; installing a postal identifier into the digital meter; associating the postal identifier to the unique device identifier; generating a registration token in the digital meter based on the postal identifier and the unique device identifier; generating registration tokens using the master key recorded in the archives; verifying that the registration tokens are identical; and recording the master key in the sub-domain. The steps are repeated for each domain assigned to the digital postage meter.

Method of manufacturing generic meters in a key management system

Growing community of inventors

Stamford, CT, United States of America

Louis J Loglisci