EP1254433A2

EP1254433A2 - Proof of postage digital franking

Info

Publication number: EP1254433A2
Application number: EP00991955A
Authority: EP
Inventors: George M. Brookner; Michael A. Brown; Eskandari Fetnah; Robert G. Schwartz; Eric L. Zuidema
Original assignee: Ascom Hasler Mailing Systems Inc
Current assignee: Hasler Inc
Priority date: 2000-01-24
Filing date: 2000-11-13
Publication date: 2002-11-06
Also published as: WO2001054071A3; AU2001236435A1; EP1254433A4; WO2001054071A9; WO2001054071A2; CA2403799A1

Abstract

A system for printing postal indicia. The system includes at least one postal security device (22) which is linked to a customer host (24); where both the security device (22) and customer host (24) are connected to a data center (20).

Description

PROOF OF POSTAGE DIGITAL FRANKING

BACKGROUND OF THE INVENTION

This is a continuation in part of co-pending U.S. application number 09/438,810 filed on November 12, 1999 which claims priority to U.S. application number 09/254,915, filed on March 16, 1999, now U.S. Patent, 6,009,417. This application also claims priority to co- pending U.S. provisional application serial number 60/180,653 filed on January 24, 2000.

1. Field of the Invention:

The invention relates generally to postage meters, also called franking machines, and relates more particularly to electronic postage meters printing digital postal indicia.

2. Brief Description of Earlier Developments

Postage meters are well known. Postage meters are extremely reliable and cost has been reduced to a minimum. A typical postage meter prints its postage by means of an intaglio-type metal or strong plastic printing plate or die plate, using specified fluorescent ink.

Most postage meter customers never have reason to call for repair of their postage meters. Postage meters are simple to operate and there is little to go wrong. They have been accepted by nearly all the post offices of the world. Postage meters benefit post offices by reducing the need for retail sales of postage stamps, and by making it easy for postal patrons to adjust to changes in postage rates. Present-day postage meters are able to accommodate mail pieces of varying thickness, and are able to print their indicia even if the surface of the mail piece is uneven.

Notwithstanding the reliability, low cost, and ease of use of present-day postage meter designs, some postal authorities have suggested that all postage meters presently in use be removed from service and that postage be printed by common computer printers using ordinary ink. This means that anyone with an ordinary computer printer can readily generate a plausible-looking postal indicium at any time and in any desired quantity. One approach for reducing fraud, when ordinary computer printers are used, is to incorporate cryptographically secure information into the postal indicium, and to read and verify that information on each and every mail piece. To be commercially viable, system configurations that generate cryptographically secure information for use in printing postal indicia must not only satisfy the requirements of the postal authorities, but must also provide user function more or less approximating that of present-day postage meters.

SUMMARY OF THE INVENTION

In one aspect, the present invention is directed to a system for printing postal indicia. In one embodiment, the system includes at least one postal security device connected to a data center and a customer host associated with a respective postal security device connected to the data center. The postal security device is adapted to provide secure data to be included in the postal indicia and the customer host is adapted to request the postal indicia from the data center and print the postal indicia including the generated data.

In another aspect, the present invention is directed to a method of printing postal indicia. In one embodiment, the method comprises requesting postal indicia from a remote data center over a first communication channel. It is determined if a content of an accounting register in a postal security device connected to the data center satisfies a predetermined condition. If the predetermined condition is satisfied, secure data from the postal security device to be included in the postal indicia is provided. The postal indicia including the secure data is transmitted from the data center to a remote customer host for printing.

BRIEF DESCRIPTION OF THE DRAWINGS

The foregoing aspects and other features of the present invention are explained in the following description, taken in connection with the accompanying drawings, wherein:

FIG. 1 is a block diagram of a first embodiment of a closed-system type of postage meter.

FIG. 2 is a block diagram of a second embodiment of a closed-system type of postage meter.

FIG. 3 is a block diagram of a third embodiment of a closed-system type of postage meter. FIG. 3A is a block diagram of a variant of a closed- system type of postage meter.

FIG. 3B is a block diagram of a network postage meter system incorporating features of the present invention.

FIG. 4 is a block diagram of a first embodiment of an open-system type of postage meter.

FIG. 5 is a block diagram of a second embodiment of an open-system type of postage meter.

FIG. 6A is a block diagram of a third embodiment of an open-system type of postage meter, with an internally mounted postal security device (PSD) .

FIG. 6B is a block diagram of a third embodiment of an open-system type of postage meter, with an externally mounted PSD.

FIG. 7A is a block diagram of a fourth embodiment of an open-system type of postage meter, with an internally mounted PSD.

FIG. 7B is a block diagram of a fourth embodiment of an open-system type of postage meter, with an externally mounted PSD.

FIG. 8 is a diagram of a fifth embodiment of an open- system type of postage meter.

FIG. 9A is a block diagram of a first embodiment of a hybrid of a closed-system and open-system type of postage meter. FIG. 9B is a block diagram of a second embodiment of a hybrid of a closed-system and open-system type of postage meter.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

Referring to FIG. 1, there is shown a block diagram of a postage meter system 10 incorporating features of the present invention. Although the present invention is directed to the embodiment shown in FIG. 3B of the drawings, the present invention will be described with reference to the embodiments shown in the drawings and it should be understood that the present invention can be embodied in many alternate forms of embodiments. In addition, any suitable size, shape ore type of elements or materials could be used.

A proof-of-postage generating system 10 is described wherein funds, application of those funds, the replenishment of those funds and the auditing of those funds are secure against attempts at fraud. As shown in FIG. 1, the system 10 can be a Closed System (CS) wherein the proof-of postage printing means are housed within the system computational means or within a cryptographically secure boundary. Alternatively, referring to FIG. 4, the system 10 can be an Open System (OS) wherein the proof-of postage printing means are external to the system computational means.

As will be described in more detail below, what is provided is a Postal Security Device (PSD) 22 within which is housed physically secure, as well cryptographically secure, funds and associated accounting registers. The PSD 22 itself can be utilized within a dynamic system which provides for the interchange of data between a funds provider source, a computational funds tracking and maintenance source and a printing source. Each embodiment described below, whether an Open System (OS) or Closed System (CS) , provides all necessary security against fraudulent attacks against the system. This invention is intended to provide the customer with a number of alternative approaches in order to optimize the customer's use, tracking, and replenishing of the customer's franking funds within the environment surrounding the dispensing of postal funds for proof-of- payment for the services required. The proof-of-postage (postal indicium) is digitally generated data. The digital data can be represented as an image (generally, a printed image) on the mailpiece requiring proof-of- postage. The proof-of postage may be represented as a graphical image, human readable information, various bar codes (both one dimensional or two dimensional codes) , optical character recognition ("OCR") characters, etc., or any combination thereof.

The Postal Security Device 22 of the present invention will support methods of applying postage in lieu of the present-day approach, which is typically a self-contained electromechanical or mechanical postage meter, which imprints indicia on mailpieces. Described below are a number of system integration designs incorporating features of the present invention wherein the PSD 22 is a small element of both large and small systems capable of supporting the needs of both large and small businesses, as well as the private citizen.

Referring to Figs. 1-3, a closed system approach provides a printing device 25 within the franking device 24 or within a cryptographically secure boundary as executed by a vendor. The franking device 24 is dedicated to the imprinting of proof-of-postage that takes the form and aesthetics required by the regulating body, and may include other related information, at times referred to as audit information and reports. Generally, the cryptographic content of the printed indicia image contains information unique to that transaction and PSD 22.

Referring to FIG. 1, the Postal Security Device 22 is attached as a "dongle" to the self contained franking device 24. A "dongle", as referred to herein, describes an adaptive interfacing device that connects to and uses a communications port while still allowing the port to be used by other devices. The content of the cryptographic data transmitted between the PSD 22 and franking device 24 is verified for authenticity (e.g. signature certificate) , whereupon the printing mechanism 25 within the franking device 24 delivers the appropriate image to the mailpiece, letter or invoice. Crediting new funds to the PSD is managed by an interface (modem) 21 connected to the franking device 24 which communicates cryptographically with a host Data Center 20. The data center 20 provides funds for the PSD 22 through the franking device 24. The communications between the franking device 24 and Data Center 20 or between the franking device 24 and PSD 22 are cryptographically encoded. All transactions are verified by the crypto- code structure and certificate authorization schema as required by the regulating body. The PSD 22 may be moved from one franking device 24 to another so long as each franking device 24 is authorized/keyed to function with the PSD 22. The PSD 22 generally has the ability to account for funds and history related to the franking device 24 that it is or has been attached to.

Those skilled in the art will appreciate that the communications channel 31 between the franking device 24 and the data center 20 need not be secure. The channel 31 may be a dialed voice telephone call over a public switched telephone network, with modems at each end of the line (not shown) . Alternatively, the channel 31 may be any communication channel such as an ISDN line, or a TCP/IP session placed over any suitable physical medium and underlying protocol, such as frame relay. The communications between the franking device 24 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention and which is incorporated herein by reference.

Referring to FIG. 3B, the postal security device 22 can also include an accounting register 23 to account for and indicate postage value, and a cryptographic device (not shown) . The cryptographic device is adapted to provide secure communications between the PSD and a remote host 20 for adjustment of the contents of the accounting register. The cryptographic device can also be adapted for generation of the validating data or information to be included in the postal indicia. The postal security device 22 is disposed to account within the accounting register 23 for postage value provided in the postal indicia and only generate the validating data subject to the account. For example, if the accounting register 23 satisfies a predetermined condition, the postal security device will not generate the data. In one embodiment, the accounting register 23 of the PSD 22 is a descending register, and postal indicia are printed only if the value stored in tie descending register is greater than the amount of pos ;age value desired to be printed. In this way, the franking device 24 and printing mechanism 25 will refuse to print more postage if the accounting register 23 it is empty or almost empty.

Referring to FIG. 2, the Postal Security Device (PSD) 22 is internal to the franking device 24 and is adapted to conform to the same security requirements of the first embodiment. Crediting new funds to the PSD 22 is managed by an interface (modem) 21 connected to the franking device 24 which communicates over a cryptographically secure channel with a host Data Center 20 which provide funds for the PSD 22 through the franking device 24. The communications between the franking device 24 and Data Center 20 or between the franking device 24 and PSD 22 are cryptographically encoded with all transactions being verified by the crypto-code structure and certificate authorization schema as required by the regulating body. The communications between the franking device 24 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention. Generally, the PSD 22 is not accessible for removal from the franking device 24. Attempts to do so or to modify PSD contents will be met with its fail-safe ability to secure itself and its internal registers as required by the regulatory authority.

Referring to FIG. 3, the PSD 22 is interfaced to a personal computer 26. In this embodiment, the PSD 22 is credited with funds via communications (typically modem) between the personal computer (PC) 26 and associated Data Center 20. The communications between the PC 26 and Data Center 20 follow the cryptographic security rules and signature verifications required by the regulatory body. The communications between the PC 26 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention. Further, the secure communications between the PSD 22 and the remote franking device 24 are likewise secure.

The PC 26 is programmed so that it can receive a request from a user for the printing of postage, and forward information about the request to the PSD 22. The PSD 22 provides cryptographically secured data which will be contained in the postal indicium, and this data is provided to a printer 25 for printing.

Referring to FIG. 3A, the system can comprise at least two closed franking devices 24, each having a dedicated printing mechanism 25, preferably in a secure housing and networked to a Postal Security Device 22. Although the PSD 22 can be enclosed in the same secure housing as the printing mechanism 25, in this embodiment, a cryptographic boundary 102 is established which contains the PSD 22 and each of the at least two closed system franking devices 24. Another way to describe this is that the communications channel that networks the PSD 22 and the printers 25 is a channel which passes messages, each of which is cryptographically authenticated so as to provide the equivalent of a secure physical housing containing the PSD 22 and the printers 25. The PSD 22 can be in a personal computer, connected by modem 21 via a communications channel 31 to a remote data center 20.

Those skilled in the art will appreciate that it may not be necessary that the passed messages be encrypted. Instead, it may suffice that they are merely cryptographically signed or otherwise cryptographically authenticated.

The printers 25 can be used for any of a number of franking applications, including: mail transporting and franking, a static franking system, a semi-automatic franking system (e.g. insert ailpiece-eject mailpiece) , or combinations thereof.

Referring to FIG. 3B, in one embodiment, one or more PSD' s 22 can be connected to the Remote Data Center System 20. In the embodiment shown in FIG. 3B, the PSD' s 22 are connected directly to the Remote Data Center 320 tele-meter setting computer (not shown) . In an alternate embodiment, each PSD 22 could be networked to the Remote Data Center 320 to give the impression that the PSD 22 is located physically near the remote data center 320. Each PSD 22 at the Remote Data Center 20 can control and maintain the PSD account for its respective customer 326. In effect, having each PSD 22 connected to the Remote Data Center 320 reduces or effectively eliminates the need to require a physical PSD 22 at each customer site 326. As shown in FIG. 3B, the Remote Data Center 320 is networked to a customer site or host/PC 326. The connection between the Remote Data Center 320 and a customer site 326 can be any conventional communication channel, such as for example a LAN/WAN, a modem, an ISDN line or an Internet connection. Each PSD 22 could be connected directly to the Remote Data Center 320 computing system (not shown) .

Each customer host/PC 26 can include a printing device

(not shown) . The cryptographic boundary incorporates the data transmission data stream to/from specific customers and makes the transmissions from the PSD 22 cryptographically secure. The customer's printing products could include a mail transporting and franking system, a static franking system, a semi automatic franking system (insert mailpiece-eject mailpiece) or a combination thereof.

The PC 326 can be programmed so that it can receive a request from a user for the printing of postage and forward information about the request to the Data Center 20. The Data Center 320 will process the request with the corresponding PSD 22. The PSD 22 provides cryptographically secured data which will be contained in the postal indicium, and this data is provided for the Data Center 320 back to the PC 326 for printing by a printer.

It should be appreciated that the particular cryptographic standards employed in generating the data for the indicium are specified by the postal authorities, and thus the particular cryptographic standard employed is not critical to the invention. Likewise, the form of indicium (e.g. 1-D or 2-D bar code and other aspects of layout) are also specified by the postal authorities and thus are not critical to the invention.

Referring to FIGS. 1 and 3, the system 10 presents the opportunity for physically relocating the PSD 22 from a system configuration evidenced in FIG. 1 to the system configuration evidenced in FIG. 3, or vice versa. The PSD 22 has the capability of optionally containing pertinent information regarding the system adaptation to which it is incorporated, including such parametric data as host serial numbers, register readings, and the like. The PSD 22 noted in FIG. 3 could be located in or on the Franking Device 24, and the PC 26 would communicate to the franking machine's PSD 22 via any PC compatible communications link, such as for example RS232 or parallel interface port.

The Open System (OS) arrangement, will now be described. The selection of the particular open system embodiment can be determined by the needs of the customer. Referring to FIG. 4, a printing means 23 is provided outside a franking device. The printing device 23 can include any printing device or mechanism capable of reproducing the franked image content, makeup and resolution in accordance with the regulatory requirements addressing franked image content, makeup and resolution. The cryptographic content of the printed indicia image contains information unique to that transaction and specific PSD 22. As shown in FIG. 4, the PSD 22 is interfaced to a Personal Computer (PC) 26 communication port. Also interfaced to the same PC 26 is a printer 23 capable of reproducing the franked image content, makeup and resolution in accordance with regulatory requirements.

Crediting new funds to the PSD 22 is managed by an interface (modem) 21 connected to the PC 26 that communicates cryptographically with a host Data Center 20 which provide funds for the PSD 22 through the PC 26. The communications between the Data Center 20 and PSD 22 are cryptographically encoded with all transactions being verified by the crypto-code structure and certificate authorization schema as required by the regulating body. The communications between the PSD 22 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention. As shown in FIG. 5, the PSD 22 can be internally interfaced to a Personal Computer (PC) 26. Also interfaced to the same PC 26 is a printer 23 capable of reproducing the franked image content, makeup and resolution in accordance with regulatory requirements. The Postal Security Device 22 is subject to the same security requirements as are applicable to the system of Figs. 1 or 4. Crediting new funds to the PSD 22 is managed by interface (modem) 21 connected to the PC 26 which communicates cryptographically with a host Data Center 20 which provide funds for the PSD 22 through the PC 26. The communications between the Data Center 20 and PSD 22 are cryptographically encoded with all transactions being verified by the crypto-code structure and certificate authorization schema as required by the regulating body. The communications between the PSD 22 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention.

Referring to Figs. 6A and 6B, the PSD 22 can be internally mounted or externally interfaced to a networked host computer or server 27. Also, networked to the host 27 are one or more Personal Computers (PC) 26. The printing device 23 is interfaced to the host 27, as might be the case in a centralized mailing application. The printer 23 is capable of reproducing the franked image content, makeup and resolution in accordance with regulatory requirements.

This embodiment of the Postal Security Device 22 is subject to the same security requirements as in the other embodiments. Crediting new funds to the PSD 22 is managed by interface (modem) 21 adapted to the Networked host which communicates cryptographically with a host Data Center 20 which provide funds for the PSD 22 through the Networked host 27. The communications between the Data Center 20 and PSD 22 are cryptographically encoded with all transactions being verified by the crypto-code structure and certificate authorization schema as required by the regulating body. The communications between the PSD 22 and data center 20 may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the assignee of the present invention.

The networked host 27 provides its interfaced printer 23 with the indicia representing addressing and postage value information requested by the local PC 26 in accordance with indicia context requirements of the regulatory body. The PSD 22 depicted in FIG. 6B may be moved to any other Open or Closed system application interfacing the PSD 22 in a like manner.

Referring to Figs. 7A and 7B, in another embodiment of an Open System arrangement, the printing devices 23 are interfaced to local Personal Computers 26, rather than to a Networked host 27. FIG. 7A shows the Networked host 27 with its PSD 22 internally mounted, while FIG. 7B shows the PSD 22 externally interfaced to the networked host 27. However, the PSD 22 depicted in FIG. 7B may be moved to any other Open or Closed system application interfacing the PSD 22 in a like manner.

Referring to FIG. 8, in another embodiment of an Open System arrangement, the printing devices 23 are interfaced to either local Personal Computers 26 or a master/host workstation 27. A single PSD 22 can support one or more indicium application sources from a master workstation 27. This embodiment is typical of a decentralized office environment where indicium applications occur at different workstations 26. However, only one workstation 27 in the local network loop 33 need have the PSD 22. All work stations 26 have the ability to produce secure indicia. This embodiment of the Postal Security Device 22 is subjected to the same security requirements as in the previously described embodiments. Crediting new funds to the PSD 22 is managed by interface (modem) 21 adapted to the workstation 27 to which the PSD 22 is attached which communicates cryptographically with a remote host Data Center 20 which, in turn, provides funds for the PSD through the workstation 27 to which the PSD 22 is attached. The workstation 27 to which the PSD 22 is attached provides its interfaced printer 23 and/or one or more of its interfaced workstations 26 with the indicia representing addressing and postage value information requested by the associated workstation 23 in accordance with indicia context requirements of the regulatory body. The PSD 22 depicted in FIG. 8 may be moved to any other Open or Closed system application interfacing the PSD 22 in a like manner.

Referring to Figs. 9A and 9B, hybrid systems may be employed in which a Closed System (CS) franking device is interfaced to an Open System (OS) Personal Computer-based system which may take the form of two different embodiments, dependent upon the needs of the customer. Such a system provides the ability for a closed system, such as that shown in FIG. 2 whose PSD 22 may be internal to the franking device or where the PSD is external to the franking device, such as that shown in FIG. 1. The embodiment in FIG. 9A shows the franking device interfaced to an external Personal Computer (PC) 26 which requests and recei res proof of postage data from the CS franking device 24 for application to a mailpiece being processed through its (the PC's) own dedicated printer 23.

Alternately, as shown in FIG. 9B, the PC 24 may be networked to one or more Personal Computers 26 with each PC 26 accessing one or more printers 23. The printing device relates to any commercially available printing device capable of reproducing the franked image content, makeup and resolution in accordance with regulatory requirements addressing said franked image content, makeup and resolution. In each embodiment, the cryptographic content of the printed indicia image contains information unique to that transaction and specific PSD.

The PSD 22 via the "dongle" or other adaptive interfacing device can connect to a franking device using a communications port while still allowing the port to be used by other devices. The interface may be connected to a device not previously predisposed to accepting installation of the PSD 22.

The PSD 22 can be credited with new or additional funds via a modem 21 within or external to the PSD host.

The PSD 22 can be credited with new or additional funds via a communications port (e.g. RS232) on the PSD host. The host, in turn, utilizes its internal or external modem to contact a remote central Data Center for downloading of funds to be credited to the PSD 22.

The PSD 22 may be removed from its host and connected to the parallel or serial port of a PC 26 with modem communications ability wherein the PC would communicate with a remote central Data Center to download funds into the PSD. The PSD would then be returned to its operational host.

The PSD may be connected directly to a PC wherein:

a postage metering device obtains a postmark (indicium) data from the PC, operating in a Closed System (CS) environment;

the PC software can obtain a postmark (indicium) data from the same PSD in either an OS or a CS; or

the PC can be networked and share a single PSD with associated PC's/workstations in an OS.

Using the system of the present invention, while a PSD is connected to a postage metering device it is able to output postmarks (indicium) data to a PC connected to the postage metering device's communication port (e.g. RS232) when operating in an Open System (OS) franking environment.

The postage metering device can be configured as a Personal Computer (PC) and is capable of being networked to one or more PCs to support multiple OS franking workstations .

It should be understood that the foregoing description is only illustrative of the invention. Various alternatives and modifications can be devised by those skilled in the art without departing from the invention. Accordingly, the present invention is intended to embrace all such alternatives, modifications and variances which fall within the scope of the appended claims.

Claims

CLAIMSWhat is claimed is:

1. A system for printing postal indicia comprising:

at least one postal security device connected to a data center, the postal security device adapted to provide secure data to be included in the postal indicia; and

a customer host associated with a respective postal security device connected to the data center, the customer host adapted to request the postal indicia from the data center and print the postal indicia.

2. The system of claim 1 wherein the postal security device includes an accounting register indicative of postage value, and is adapted to account within the accounting register for postage value provided in the postal indicia.

3. The system of claim 2 wherein the data center is adapted to adjust the contents of the accounting register in response to a customer request for postal indicia.

4. The system of claim 1 wherein the postal security device includes a cryptographic device adapted to provide secure communication between the postal security device and the data center.

5. The system o : claim 4 wherein the cryptographic device is adapted to generate the secure data included in the postal indicia.

6. The system of claim 2 wherein the postal security device is adapted to provide the secure data only when the contents of the accounting register satisfies a predetermined condition.

7. The system of claim 1 wherein a communication channel between the customer host and the postal security device is cryptographically secure.

8. The system of claim 1 wherein the customer host does not include a postal security device.

9. A method of printing postal indicia comprising the steps of:

requesting postal indicia from a remote data center over a first communication channel;

determining if a content of an accounting register in a postal security device connected to the data center satisfies a predetermined condition;

providing secure data from the postal security device to be included in the postal indicia if the predetermined condition is satisfied; and transmitting the postal indicia including the secure data from the data center to a remote customer host for printing.

10. The method of claim 9 further comprising the step, of adjusting the contents of the accounting register in response to the request for postal indicia.

11. The method of claim 9, wherein the step of providing a secure data further includes the step of accounting within the accounting register for a postage value included in the postal indicia.

12. The method of claim 9, wherein the step of providing secure data further includes the step of using a cryptographic device in the postal security device to generate the secure data.

13. The method of claim 9 further comprising the step of connecting a respective postal security device to the remote data center for each of a plurality of postal indicia customers.

14. The method of claim 9 further comprising the step of using an Internet connection for the first communication channel .