Infrastructure for postage meter communication, accessible through service provider

• US 20070094153A1
• Filed: 10/25/2005
• Published: 04/26/2007
• Est. Priority Date: 10/25/2005
• Status: Abandoned Application

• Current Assignee: Neopost Technologies S.A. (Quadient SA)
• Original Assignee: Neopost Technologies S.A. (Quadient SA)
• Inventors: Ferraro, Mark
• Application Number:
  US11/257,663
• Publication Number:
  US 20070094153A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00064 Virtual meter, online stamp; PSD functions or indicia creation not at user's location
• CPC Class Codes: G07B 2017/00854 Key generation
• CPC Class Codes: G07B 2017/00879 using session key
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088

Abstract

A system for providing postal and other services to postal security devices is established in which a secured communication connection is obtained through a service provider. The connection once established provides access to a central postal data center. As part of the authentication of a connection by the service provider, the service provider generates a session key having a discrete time limit. Expiration of the time limit terminates the session key. Security keys are provided to the service provider, with reference to public keys of the service provider, by the data center communication infrastructure.

Claims

1. A system for providing postal and other services to postal security devices (PSDs) comprising:

one or more networks connected to one or more customer servers;

one or more PSDs connected to a communication system through the one or more networks;

an infrastructure server for providing access to a data center containing accounting and other data relative to the operation of the one or more PSDs;

a service provider server accessible to the one or more networks to provide postal and other services to the one or more PSDs, wherein the service provider server further comprises a security software module having a security algorithm for execution by the service provider server, to allow authentication of a connection to one or more of the PSDs for the purpose of obtaining services and accessing the data center.

2. The system according to claim 1 wherein the security software module comprises a virtual private network.

3. The system according to claim 1, wherein the communication system establishes a connection to the service provider server through an Internet server.

4. The system according to claim 1, wherein the security algorithm causes the service provider server to generate a session key, the session key including a time limit, the session key terminating upon the expiration of the time limit.

5. The system, according to claim 4, wherein the session key further comprises a user name, a user service provider name, a time that this key was generated, and a digital signature on these items.

6. The system, according to claim 1, wherein the validation of a connection is based on a public key assigned to the service provider.

7. The system, according to claim 4, wherein the service provider server, infrastructure server, and customer server operate with a common time reference.

8. The system, according to claim 7, wherein the common time reference comprises signals from GPS satellite constellation.

9. A method of processing a postal customer request for services through a service provider comprising the steps of:

receiving a request from a customer at the service provider;

authenticating the request at the service provider;

generating a session key at the service provider, including a time limit after which the session key expires;

transmitting the customer request with the session key to a postal infrastructure connected to a data center;

checking session key time limit at the postal infrastructure and terminating connection if expired;

validating the service provider at the postal infrastructure; and

processing the customer request.

10. The method according to claim 9 wherein the step of authenticating the customer request is processed by a virtual private network.

11. The method according to claim 9, wherein the customer establishes a connection to the service provider through an Internet server.

12. The method according to claim 9, wherein the step of authenticating the customer request comprises the execution of a security algorithm that causes the service provider server to generate a session key, the session key including a time limit, the session key terminating upon the expiration of the time limit.

13. The method, according to claim 9, wherein the session key further comprises a user name, a user service provider name, a time that this key was generated, and a digital signature on these items.

14. The method, according to claim 9, wherein the step of validating the service provider is based on a public key assigned to the service provider.

15. The method, according to claim 9, further comprising the step of providing a common time reference to the service provider, infrastructure, and customer.

16. The method, according to claim 15, wherein the common time reference comprises signals from GPS satellite constellation.