Pitney Bowes Inc.

Maria P Parkos

Robert A Cordery

John H Steinmetz

Brad L Davies

Mark A Scribe

John A Hurd

Roger J Ratzenberger, Jr

G Thomas Athens

Frederick W Ryan, Jr

Wallace Kirschner

Richard A Malin

Jerome E Jackson

Young W Lee

Michael J Lorello

Edward J Naclerio

Edward R Bass

George T Monroe

Louis J Loglisci

Flavio M Manduley

George J Doutney

Thomas A D'Andrea

Edward P Cornell

Edward J Naclario

David T McPherson

Joel I Wald

Joel L Wald

Thomas G Athens

Roger Jr Ratzenberger

Roger Ratzenberger

A mailing machine that optimizes throughput by reducing the amount of time necessary for the PSD to generate the digital signature and indicium for each mail piece is provided. The debit operation performed by the PSD, i.e., adjusting the PSD registers, is separated into three different sections, a pre-debit operation, a perform debit operation, and a complete debit operation. In addition, the calculation of the digital signature can optionally be pre-computed, or, alternatively, computed in stages, i.e., partial signature calculation. Utilizing this granularity, the cryptographic operations associated with generating the digital signature can be shifted between the three debit operations such that the execution time of the time critical portion of the debit operation (perform debit) can be optimized to meet the performance requirements of the mailing machine in which the PSD is deployed.

Method and system for optimizing throughput of mailing machines

A method and system that protects against a replay attack in a closed system postage meter is provided. 'Freshness' data is included along with each indicium message sent from the meter to the printer, thereby enabling the printer to detect 'stale' indicium data, i.e., indicium data that was previously generated and is being replayed, and prohibit the printing of duplicate indicia. The freshness data includes a random nonce generated by the printer during initialization along with sequence data that the printer can verify against sequence data from the previous printed indicium. If in the current indicium message the nonce is different or the current sequence data is not greater than or equal to the sequence data from the previous printed indicium, indicating the current indicium data may have been previously generated and is a replay, the printer will not print the current indicium data.

Method and system for protection against replay of an indicium message in a closed system meter

A mailing machine base includes a docking system for a User Interface Controller (UIC) that provides a feedback signal to the mailing machine based on the presence of the UIC. When the UIC is inserted into a docking connector of the mailing machine, the mailing machine detects the presence of the UIC. A delay circuit within the mailing machine provides a signal to a power control circuit after a predetermined time delay. The power control circuit, based on the signal from the delay circuit, will provide power to the UIC only after the UIC has been securely docked for the full predetermined time delay. When the UIC is removed from the mailing machine, the mailing machine, based on the feedback signal, will quickly remove the power provided to the docking connector. Thus, the mailing machine can remain powered during removal and replacement of the UIC.

Auto power-on, hot-pluggable user interface controller for mailing machines

A mailing machine that includes a docking system for the User Interface Controller (UIC) that provides a safety interlock to protect the user from accessing potentially hazardous voltages when the UIC is removed is provided. A docking board provides a connection between the mailing machine and the UIC. The UIC mates with a docking connector on the docking board. Potentially hazardous signal levels pass through a relay on the docking board to the docking connector. A supply voltage for the relay's coil passes through docking board to the UIC and back to the relay on the docking board. If the UIC is removed, the supply voltage for the relay's coil will be removed, causing the relay to open and preventing any of the potentially hazardous signals from being transmitted to the docking connector on the docking board.

Mailing machine having a user interface controller safety interlock to provide protection from hazardous voltages

Mailing machine including a controller, a printer module including a connector, a print head controller for producing print data signals necessary to print a postal indicia on an envelope and a replaceable print head cartridge having a plurality of print elements which are selectively energizable in response to the print data signals. The print head cartridge is detachably mounted to the connector. The controller in operative communication with the printer module for: determining if a valid print head cartridge is installed; and if a valid print head cartridge is not installed, preventing the print data signals from reaching the connector.

Disabling a mailing machine when a print head is not installed

The apparatus comprises: a first module including a universal key; a second module including a unique identifier and a unique key wherein the unique key is derived from the unique identifier and the universal key and incorporated into the second module during manufacture of the second module. The second module is in communication with the first module. The apparatus further comprises a controller for performing the following subsequent to manufacture of the first module and the second module: initiating a communication session between the first module and the second module; transmitting the unique identifier from the second module to the first module; and deriving the unique key in the first module using the unique identifier and the universal key. A method for synchronization of cryptographic keys between modules of a distributed system and a method of manufacturing a postage evidencing system are also provided.

Synchronization of cryptographic keys between two modules of a

A postage evidencing system including a plurality of domains for partitioning a population of postage meters according to an operating characteristic, a data center, a postage meter in operative communication with the data center and a printer in operative communication with the postage meter. The postage meter is initialized to operate in a particular domain while the printer is capable of operating in each of the plurality of domains. To update or enable a domain in the printer, the postage meter transmits an indication of the particular domain to the data center. Then, the data center encrypts the indication and transmits the indication to the postage meter which in turn forwards the encrypted indication to the printer. The printer decrypts the encrypted indication and using the indication enables a respective domain in the printer corresponding to the particular domain of the postage meter. A method for updating domains in a postage evidencing system is also provided.

Updating domains in a postage evidencing system

A method of printing an image on an image receiving medium utilizing ink jet printing technology is disclosed. The image, particularly a postage meter indicia, is composed of two discrete portions, one having graphic information which need not be machine readable, the other having alpha-numeric information which must be machine readable and therefore must be water fast. The graphic information, however, must be printed with an ink that contains fluorescent material. The image is thus printed with two separate ink jet printing devices operating simultaneously, one of the printing device being supplied with fluorescent ink that is not water fast, and the other being supplied with water fast ink.

Method of printing using inks having different characteristics

A mailing system includes a mailing machine having a printing mechanism for printing an indication of postage value on a mailpiece and structure for controlling relative movement between the printing mechanism and the mailpiece to ensure the mailpiece is properly positioned relative to the printing mechanism during printing of the indication of postage value; a meter vault having a securely sealed housing, and apparatus, within the securely sealed housing, for accounting for the printed indication of postage value, wherein the meter vault is removably mounted in the mailing machine for easy removal via a plug-in connector; and a printing mechanism control module for securely controlling printing by the printing mechanism based on data received from the meter vault, the printing mechanism control module being removably mounted in the mailing machine for easy removal via a quick disconnect connector; wherein the meter vault and the printing mechanism control module are in electrical communication via the mailing machine. The mailing system can also include ciphered communications between the vault and the printing mechanism.

Modular mailing system

This invention prevents the accounting unit of a postage meter from deducting funds when a mailpiece has been removed. The foregoing is achieved by giving the postage meter the intelligence to stop printing the postal indicia and deducting the value of the postal indicia just before the indicia is printed. This would eliminate the loss of funds due to problems between trip command and actual indicia printing. The apparatus of this invention utilizes a sensor to detect the presence of a mailpiece at a printing position and a detector to determine the location of the indicia printing plate or the time that an ink jet printer is going to print so that the system will be able to prevent the printing of a postal indicia and deducting the value of the postal indicia just before the indicia is printed.

Loss of funds prevention for postage meters that use transfer printing

A mailing system is includes of a mailing machine operating under the control of a microcontroller having a communication port with a first channel and a second channel. The mailing system also includes a meter vault which operates under the control a microcontroller mounted in a secure housing and having a communication port with a first channel and a second channel. A printer is included which operates under the control of a microcontroller mounted in a secure housing and having a communication port having a first channel and a second channel. A printer interface is included for providing a number of independent communication paths. A first path provides communication between first channel of the mailing machine and the first channel of the meter vault. A second path provides communication between the second channel of the mailing machine and the second channel of the printer, and a third path for providing communications between the second channel of meter vault and the first channel of the printer.

Growing community of inventors

Southbury, CT, United States of America

Maria P Parkos