Pitney Bowes Inc.

Other

Walter J Baker

Robert A Cordery

Leon A Pintsov

Richard W Heiden

Joseph L Gargiulo

Frederick W Ryan, Jr

David K Lee

Wesley A Kirschner

Steven J Pauly

Gary M Heiden

Feliks Bator

Christopher S Riello

Kevin D Hunter

John A Hurd

Frank M D'Ippolito

Kathryn V Lawton

Louis J Loglisci

Chunhua Li

Morton Silverberg

Steven A Supron

David W Hubbard

Gary S Jacobson

Monroe A Weiant, Jr

Michael A Brown

Carl A Miller

Samuel W Martin

Robert W Sisson

Robert G Arsenault

Roger J Ratzenberger, Jr

Sung S Chang

George T Monroe

G Thomas Athens

Ian A Siveyer

Arthur Rubinstein

William V Pickering, Jr

Sambasivam Thillaikumaran

Kathyrn V Lawton

Lyndon A Walker

Thomas O Matthews

Albert P Jacques

A network connectivity device that when coupled to a mail processing machine enables a cloud application running on a personal computer or other device to interface with and control the mail processing machine without requiring any software to be installed on the personal computer other than a web browser. The network connectivity device plugs into a standard USB port on the mail processing machine to allow wired or wireless connectivity to a network. There is no software or other code required to run on the personal computer other than a standard web browser running a hosted web application. The network connectivity device allows the mail processing machine to be found and addressed by the hosted web application. This allows a user to control operations of the mail processing machine, as well as giving the mail processing machine network connectivity for outside world communication activities.

System and method to enable external processing device running a cloud application to control a mail processing machine

A method includes receiving at a sub-program a request from an external entity the request comprising at least one parameter and a return address, utilizing the return address and an address list associated with the sub-program to authenticate the external entity, and processing the request if the external entity is authenticated.

Apparatus and method to limit access to selected sub-program in a software system

In a value dispensing system, a system and method for securely loading and executing software in a secure device that does not include any non-volatile programmable memory is provided. A non-secure portion of the value dispensing system stores software for loading into the secure portion when needed. Commands being sent to the secure printer are monitored to determine if the secure has the necessary software to execute the command. If the secure device currently does not have the necessary software to execute the command, the command is delayed and the proper software is loaded from the non-secure portion to the RAM of the secure device. A signature associated with the software is verified to ensure the authenticity of the software. If the signature is verified, the command is passed to the secure device, and, utilizing the software in the RAM, the command is executed by the secure device.

Method for securely loading and executing software in a secure device that cannot retain software after a loss of power

A control system for a mailing machine includes a user interface having a display, a memory having a screen region, a plurality of screens stored within the screen region and a control program for displaying the plurality of screens on the display and for controlling the operation of the mailing machine. Each of the plurality of screens has pre-function data and background function data, respectively. The pre-function data includes image data relating to a screen image for display. The control program uses the pre-function data to identify a pre-function to be executed before displaying the screen image and uses the background function data to identify a background function to be executed during the display of the screen image.

Mailing machine including an embedded control system having a screen control architecture

System and method for securely backing up and reliably retrieving vault data in a metering system that includes a host processor operatively coupled to a vault. Whenever a transaction is completed by the vault, the vault cryptographically signs the vault data, including ascending register, descending register and piece count and sends the cryptographically signed vault data to the host processor where it is stored in a data file assigned to the vault. Each storage of the cryptographically signed vault data is indexed to create a historical log of vault transactions. If the vault is lost or damaged so that vault data cannot be retrieved from the vault, the cryptographically signed vault data is retrieved from the host processor data file and verified.

System and method for disaster recovery in an open metering system

A system for providing items of value, charging the items to a smart card, and for recharging the smart card. The system includes a station for providing the items of value, which may be postal services, and debiting the cost of the items to a smart card; the smart card being charged with funds equivalent data. The station also communicates with a Data Center for recharging the smart card. Users of the system communicate with the data center to request recharge of a particular smart card and in response to an authorized request the data center generates an encrypted authorization message which includes an identification number, the amount of recharge requested, and control data which preferably includes a control sum formed by adding the amounts stored in a descending register, which stores the amount available on the smart card, and an ascending register which stores the total of the amounts by which the card has been charged since initialization. Thus, the authorization message may be used only once. From time-to-time the Data Center transmits authorization messages to each station on the system. When a particular smart card for which an authorization message has been received is connected to a station, the smart card compares the control data with the control data stored on the smart card and if there is a match updates the funds equivalent data in the descending register of the smart card. To provide security against transmission of false authorization messages to a station, the authorization messages are encrypted, preferably using a public key encryption system.

System for smart card funds refill

A method for thresholding a gray scale matrix representative of an image to generate binary matrix representative of the image. Elemental features of the image are determined and characterized, and a plurality of thresholding algorithms is selected. For each algorithm a sequence of binary matrices is generated as scaling factor applied to the algorithm is varied. Features of each binary matrix are determined and characterized and compared to elemental features of the image. For each determined feature which matches a an elemental feature of the image a score is incremented; and for each determined feature which does not match the score is decremented. The binary matrix having the highest score is selected.

Method for thresholding a gray scale matrix

A Key Management System for generating, distributing and managing cryptographic keys used by an information transaction system that employs cryptographic means to produce evidence of information integrity. The system comprises a plurality of functionally distinct secure boxes operatively coupled to each other. Each of the secure boxes performs functions for key generation, key installation, key verification or validation of tokens. Computers, operatively coupled to the secure boxes, provide system control and facilitate communication among the secure boxes. A plurality of separate logical security domains provide domain processes for key generation, key installation, key verification and validation of tokens produced by the transaction evidencing device within the domain using the key management functions. A plurality of domain archives, corresponding respectively to each of the security domains, securely and reliably record key status records and master keys for each domain. The Key Management System installs the master keys in the transaction evidencing device and validates the tokens. The secure boxes include a key generation box for generating, encrypting and signing a master key; a key installation box for receiving, verifying and decrypting the signed master key and for installing the master key into the transaction evidencing device; a key verification box for verifying the installation of the master key in the transaction evidencing device, a token verification box for verifying the tokens, and at least one manufacturing box for generating domain keys and distributing the domain keys among the secure boxes for each of the domains.

Cryptographic key management and validation system

A value dispensing system comprising a portable data carrier and a terminal. The portable data carrier including a memory having stored therein accounting information indicative of an amount of value available for dispensing. The terminal including a memory and means for dispensing value and adapted to receive the portable data carrier and process a transaction which dispenses a given value in response to a digital token generated by the portable data carrier using a first cryptographic key. For the value dispensed, the postage evidencing system creates a transaction record having a secret portion which is indicative of the amount of value available for dispensing on the portable data carrier wherein the secret portion of the transaction record is encrypted using a second cryptographic key derived from the first cryptographic key, and the transaction record is stored in the terminal memory.

Method and apparatus for storage of accounting information in a value

A method of manufacturing a secure box in a Key Management System that includes a plurality of functionally distinct secure boxes initializes a first manufacturing box if one does not exist. The method creates in a manufacturing box at least one logical security domain including encryption keys needed to perform Key Management System processes within the domain, and provides a target secure box with the capability to perform at least one Key Management System function from a plurality of functions required by the Key Management System. The method authenticates the target secure box to the manufacturing box, installs a unique secure box identification in the target secure box, and creates at least one logical security domain in the target secure box corresponding to a logical security domain in the manufacturing box. The method sends a command from a Key Management System computer to initialize the target secure box to perform a domain process for at least one of Key Management System functions provided within the target secure box, and initializes the target secure box in each domain process indicated in the command from the Key Management System computer. The method installs in the target secure box the encryption keys required to perform a key generation process within the domain. For example, target secure box may be provided with at least one of a key verification function, a key installation function, a token verification function, a key registration function, or a secure box manufacturing function.

Method of manufacturing secure boxes in a key management system

A method of manufacturing transaction evidencing devices, such as digital postage meters, includes the steps of generating a master key in a logical security domain of a Key Management System; installing the master key into a digital postage meter; verifying the installation of the master key; and registering the master key to a logical security sub-domain in the Key Management System. The step of generating the master key further includes the steps of generating a domain; generating at least one sub-domain; installing the domain in secure boxes of the Key Management System; generating a master key and test token within the domain; and recording the master key in the domain archive. The step of installing the master key further includes the steps of installing the master key into a digital meter; and associating the master key with a unique device identifier. The step of registering the master key to a logical security sub-domain in the Key Management System further includes the steps of assigning a sub-domain to the digital meter; installing a postal identifier into the digital meter; associating the postal identifier to the unique device identifier; generating a registration token in the digital meter based on the postal identifier and the unique device identifier; generating registration tokens using the master key recorded in the archives; verifying that the registration tokens are identical; and recording the master key in the sub-domain. The steps are repeated for each domain assigned to the digital postage meter.

Method of manufacturing generic meters in a key management system

A system and method of fault tolerant key management of cryptographic keys includes a key distribution computer and primary and secondary key management computers coupled to the key distribution computer, Primary and secondary server computers are each coupled to the primary and secondary key management computers, One of the primary and secondary key management computers is operational at a time, The operational one of the primary and secondary key management computers writes key data received from the key distribution computer to an archive database in each of the primary and secondary server computers, The method includes the steps of requesting storage of key data by an operational one of the primary and secondary key management computers; monitoring the operational status of each of primary and secondary server computers; writing key data to an archive database in each of the primary and secondary servers that are operational; writing key data to a log file in an operational one of the primary and secondary servers when one of the primary and secondary servers is not operational; monitoring a return to operational status of the non operational one of the primary and secondary servers; and writing to the archive database of the non-operational one of the primary and secondary server computers the key data stored in the log file of the operational one of the primary and secondary server computers.

System and method for fault tolerant key management

An apparatus for producing items in selected configurations and a system, and method for controlling the same. More particularly, an apparatus for producing mail pieces and a system and method for controlling it to produce mail pieces in a variety of configurations are disclosed. The apparatus includes a laser printer and folding sealing apparatus controlled by a data processor. The folder sealer apparatus combines sheets printed by the laser printer with pre-printed sheets and envelope forms, which also may be printed by the laser printer or may be windowed envelopes, folds the sheets as necessary and folds and seals the envelope form about the folded sheets to produce a mail piece. A user inputs a configuration for the mail piece which is translated by the data processor into a data structure and transmitted to the controller of the folder sealer apparatus. The controller controls devices comprised in the laser printer and the folder sealer by executing state routines in accordance with the data structure to produce the mail piece in the defined configuration. Concurrently the data processor transmits text from an output file to the laser printer for printing on printed sheets and envelope forms. The data processor also controls the laser printer to print an address for the mail piece either on an envelope form or on a printed sheet in a position where it will be visible through the envelope. Thus the apparatus is controlled to process an output file stored in the data processor into a mail run having a selected configuration.

System and method for producing items in selected configurations

An apparatus for producing items in selected configurations and a system and method for controlling the same. More particularly, an apparatus for producing mail pieces and a system and method for controlling it to produce mail pieces in a variety of configurations are disclosed. The apparatus includes a laser printer and folding sealing apparatus controlled by a data processor. The folder sealer apparatus combines sheets printed by the laser printer with pre-printed sheets and envelope forms, which also may be printed by the laser printer or may be windowed envelopes, folds the sheets as necessary and folds and seals the envelope form about the folded sheets to produce a mail piece. A user inputs a configuration for the mail piece which is translated by the data processor into a data structure and transmitted to the controller of the folder sealer apparatus. The controller controls devices comprised in the laser printer and the folder sealer by executing state routines in accordance with the data structure to produce the mail piece in the defined configuration. Concurrently the data processor transmits text from an output file to the laser printer for printing on blank sheets and envelope forms. The data processor also controls the laser printer to print an address for the mail piece either on an envelope form or on a printed sheet in a position where it will be visible through the envelope. Thus the apparatus is controlled to process an output file stored in the data processor into a mail run having a selected configuration.

System and method for controlling an apparatus to produce items in

Growing community of inventors

Stratford, CT, United States of America

Walter J Baker