Single secure environment session generating multiple indicia

• US 10,417,728 B1
• Filed: 04/17/2014
• Issued: 09/17/2019
• Est. Priority Date: 04/17/2014
• Status: Active Grant

• Current Assignee: Auctane LLC (Stamps.com, Inc.)
• Original Assignee: Stamps.com, Inc.
• Inventors: Yoggi, Pradipe, Dias, Dennis Lanning, Arutyunyan, Grigoriy
• Primary Examiner(s): Agwumezie, Chinedu C
• Application Number:
  US14/255,713
• Time in Patent Office: 1,979 Days
• Field of Search: 705408
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 2250/05 using cryptography
• CPC Class Codes: G06Q 50/60 Business processes related to postal services shipping G06Q10/083; franking apparatus G07B17/00
• CPC Class Codes: G07B 17/00024 Physical or organizational aspects of franking systems
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00064 Virtual meter, online stamp; PSD functions or indicia creation not at user's location
• CPC Class Codes: G07B 2017/00959 Cryptographic modules, e.g. a PC encryption board
• CPC Class Codes: G07B 2017/00967 PSD [Postal Security Device] as defined by the USPS [US Postal Service]

Abstract

Systems and methods which are adapted to generate multiple indicia in a single secure environment session are described. Embodiments provide for generation of a plurality of postage indicia in a single postage security device (PSD) transaction, whereby the PSD loads and unloads corresponding virtual PSD information a single time for generating the plurality of postage indicia (i.e., in a single secure environment session). The indicia generated in a same secure environment session according to embodiments of the invention may comprise a plurality of indicia requested by a same, single user. Additionally or alternatively, the indicia generated in the same secure environment session may comprise a plurality of indicia requested by multiple different users.

Claims

1. A method comprising:

receiving, by a server system, a bulk indicia request for generation of a plurality of value bearing indicia data, wherein each value bearing indicia data of the plurality of value bearing indicia data comprise indicia data representative of an amount of pecuniary value; and

generating, by the server system, multiple value bearing indicia data of the plurality of value bearing indicia data in a single secure environment session of a secure processor-based crypto module, wherein the generating multiple value bearing indicia data in a single secure environment session comprises;

configuring, under control of the logic of the server system using data of a crypto module configuration record, the crypto module as a security device for a particular value account;

receiving, by the logic of the crypto module configured for the particular value account, the bulk indicia request for the multiple value bearing indicia data;

generating, within a secure environment of the crypto module by the logic of the crypto module configured for the particular value account, the multiple value bearing indicia data using the particular value account;

updating, by the logic of the crypto module configured for the particular value account, the data of the crypto module configuration record to reflect generation of the multiple value bearing indicia data;

outputting, from secure environment of the crypto module to the logic of the server system, the generated multiple value bearing indicia data; and

offloading, by the logic of the crypto module to a database of the server system, the crypto module configuration record having the updated data from the secure environment, resulting in the crypto module being de-configured as the security device for the particular value account.

2. The method of claim 1, wherein the generating multiple value bearing indicia data in the single secure environment session further comprises:

generating indicia data in addition to the multiple value bearing indicia data, wherein the additional indicia data comprises an audit indicia including information regarding a total value of the multiple value bearing indicia data.

3. The method of claim 1, wherein the plurality of value bearing indicia data comprise postage indicia, wherein the crypto module configuration record comprises a virtual postal security device (PSD) record, and wherein configuring the crypto module comprises configuring the crypto module as a PSD having a postage value represented therein.

4. The method of claim 1, further comprising:

generating the bulk indicia request from multiple separate requests for indicia.

5. The method of claim 4, wherein the multiple separate requests for indicia are from different users, and wherein the generating the bulk indicia request comprises:

queuing separate requests for indicia from the different users; and

aggregating two or more of the queued separate requests sharing a common characteristic into the bulk indicia request.

6. The method of claim 5, wherein the aggregating two or more of the queued separate requests is performed after determining that at least a threshold number of separate requests sharing the common characteristic have been queued.

7. The method of claim 6, wherein the common characteristic comprises users desiring indicia of the aggregated two or more of the queued separate requests for indicia are serviced by a same indicia generation service provider.

8. The method of claim 6, wherein the common characteristic comprises a same value for each indicia of the aggregated two or more of the queued separate requests.

9. The method of claim 5, wherein the aggregating two or more of the queued separate requests is performed after determining that a predetermined period of time has elapsed for queuing the separate requests.

10. The method of claim 4, wherein the multiple separate requests for indicia are from a same user, and wherein the generating the bulk indicia request comprises:

queuing separate requests for indicia made with respect to the user; and

aggregating two or more of the queued separate requests into the bulk indicia request.

11. The method of claim 10, wherein the separate requests comprise requests made by separate processing threads operable within a client device of the user.

12. The method of claim 10, wherein the aggregating two or more of the queued separate requests comprises aggregating queued separate requests sharing a common characteristic.

13. The method of claim 1, further comprising:

dividing the bulk indicia request into a plurality of smaller batch indicia requests, wherein the multiple value bearing indicia data of the plurality of value bearing indicia data comprise all indicia of a smaller batch indicia request of the plurality of smaller batch indicia requests.

14. The method of claim 13, wherein a number of indicia in a smaller batch indicia request of the plurality of smaller batch indicia requests is based upon an operational capability of the crypto module.

15. The method of claim 13, wherein a number of indicia in a smaller batch indicia request of the plurality of smaller batch indicia requests is based upon a desired performance characteristic of the generating multiple value bearing indicia data.

16. The method of claim 13, further comprising:

combining value bearing indicia data returned in response to each smaller batch indicia request of the plurality of smaller batch indicia requests into a bulk indicia request response.

17. A method comprising:

receiving, by a postal server, a bulk postage indicia request for generation of a plurality of postage indicia data; and

generating, by the postal server, multiple postage indicia data of the plurality of postage indicia data in a single secure environment session performed by a postal security device (PSD), wherein the generating multiple postage indicia data in a single secure environment session comprises;

configuring, under control of logic of the postal server using virtual PSD configuration information data, a crypto module as the PSD for a particular value account;

receiving, by logic of the PSD configured for the particular value account, a request for the multiple postage indicia data;

generating, within a secure environment of the PSD by the logic of the PSD configured for the particular value account, the multiple postage indicia data without passing any generated postage indicia data outside of the PSD until all postage indicia data for the multiple postage indicia data has been generated;

updating, by the logic of the PSD configured for the particular value account, the virtual PSD configuration information data to reflect generation of the multiple postage indicia data;

outputting, from the secure environment of the PSD to the logic of the postal server, the generated multiple postage indicia data after all postage indicia data for the multiple postage indicia data has been generated; and

offloading, by the logic of the PSD to a database of the postal server, updated virtual PSD configuration information data from the secure environment, resulting in the crypto module being de-configured as the PSD for the particular value account.

18. The method of claim 17, wherein the generating multiple postage indicia data in the single secure environment session further comprises:

generating indicia data for an indicia in addition to the multiple postage indicia data, wherein the additional indicia comprises an audit indicia including information regarding a total value of the multiple postage indicia data.

19. The method of claim 17, further comprising:

generating the bulk postage indicia request from multiple separate requests for postage indicia.

20. The method of claim 19, wherein the multiple separate requests for postage indicia are from different users, and wherein the generating the bulk postage indicia request comprises:

queuing separate requests for postage indicia from the different users; and

aggregating two or more of the queued separate postage requests sharing a common characteristic into the bulk postage indicia request.

21. The method of claim 19, wherein the multiple separate requests for postage indicia are from a same user, and wherein the generating the bulk postage indicia request comprises:

queuing separate requests for postage indicia made with respect to the user; and

aggregating two or more of the queued separate postage requests into the bulk postage indicia request.

22. The method of claim 17, further comprising:

dividing the bulk postage indicia request into a plurality of smaller batch postage indicia requests, wherein the multiple postage indicia data of the plurality of postage indicia data comprise all postage indicia of a smaller batch postage indicia request of the plurality of smaller batch postage indicia requests.

23. The method of claim 22, wherein a number of postage indicia in a smaller batch postage indicia request of the plurality of smaller batch postage indicia requests is based upon an operational capability of the PSD.

24. The method of claim 22, wherein a number of postage indicia in a smaller batch postage indicia request of the plurality of smaller batch postage indicia requests is based upon a desired performance characteristic of the generating multiple postage indicia data.

25. The method of claim 22, further comprising:

combining postage indicia data returned in response to each smaller batch postage indicia request of the plurality of smaller batch postage indicia requests into a bulk postage indicia request response.