System and method for controlling the storage of data within a portable memory

• US 5,801,364 A
• Filed: 08/16/1995
• Issued: 09/01/1998
• Est. Priority Date: 01/03/1994
• Status: Expired due to Term

• Current Assignee: Stamps.com, Inc.
• Original Assignee: E-Stamp Corporation (LTWC Corp.)
• Inventors: Kara, Salim G., Gressett, David M., Whitney, Jonathan W.
• Primary Examiner(s): Hajec, Donald T.
• Assistant Examiner(s): TREMBLAY, MARK STEPHEN
• Application Number:
  US08/515,988
• Time in Patent Office: 1,112 Days
• Field of Search: 235/375, 235/492
• US Class Current: 235/375
• CPC Class Codes: G01G 19/005 with electric or electronic computing means
• CPC Class Codes: G01G 19/4148 for controlling postal rate in articles to be mailed franking apparatus with means for computing G07B17/02
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G07B 17/0008 Communication details outside or between apparatus coin-freed apparatus for franking per se G07F17/26
• CPC Class Codes: G07B 17/00362 Calculation or computing within apparatus, e.g. calculation of postage value
• CPC Class Codes: G07B 17/00508 Printing or attaching on mailpieces printing mechanisms B41J; security printing B41M3/14; marking methods B41M5/00; inks C09D11/00; record carriers with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00096 via phone lines
• CPC Class Codes: G07B 2017/00137 In a LAN
• CPC Class Codes: G07B 2017/00177 from a portable device, e.g. a card or a PCMCIA
• CPC Class Codes: G07B 2017/00201 Open franking system, i.e. the printer is not dedicated to franking only, e.g. PC (Personal Computer)
• CPC Class Codes: G07B 2017/00258 Electronic hardware aspects, e.g. type of circuits used
• CPC Class Codes: G07B 2017/0037 Calculation of postage value
• CPC Class Codes: G07B 2017/00419 Software organization, e.g. separation into objects
• CPC Class Codes: G07B 2017/00443 Verification of mailpieces, e.g. by checking databases
• CPC Class Codes: G07B 2017/0058 Printing of code
• CPC Class Codes: G07B 2017/00588 Barcode
• CPC Class Codes: G07B 2017/00596 Printing of address
• CPC Class Codes: G07B 2017/00604 Printing of advert or logo
• CPC Class Codes: G07B 2017/00935 Passwords
• CPC Class Codes: G07B 2017/00951 : Error handling, e.g. EDC (Error Detection Codes)

Abstract

A system and method for printing a postage indicia, including a desired postage amount and encrypted information, onto a piece of mail. The mail when inserted into the normal mail system can be verified as having legally issued postage through realtime access to a central registered user database. A user takes a powerable postal dispensing device to an authorized agent of a postal authority in order to obtain a replenishment of the amount of postage stored within the portable postage dispensing device. A desired amount of postage is entered into the dispensing device by an authorized agent through a host processor-based system. The user is then able to access this stored postage at the user'"'"'s location through a complementary host processor-based system. The authorized agent uses a PC bond system designed to allow data to be entered into the portable dispensing device only upon exercising a series of comprehensive checks based, in part, by data stored within the portable dispensing device. The postal dispensing device has an operating program which defines all aspects and extents of its possible behaviors. Access to its facilities is allowed only after stringent security measures have been met.

Claims

1. A first CPU system operable from a set of instructions contained within a memory to load data into a select portable processor of a plurality of portable processors, said data representative of monetary values for use by a second CPU system when the select portable processor is connected to said second CPU system, said first CPU system comprising:

means for temporarily attaching the plurality of portable processors to said first CPU, said attached portable processors including said select portable processor;

means for interacting with each of said portable processors according to a different authority level of a hierarchical set of authority levels which authorize different operations, wherein a first one of said authority levels associated with a first portable processor of said plurality of portable processors includes authorization to enable operation of said first CPU system according to said set of instructions, a second one of said authority levels associated with a second portable processor of said plurality of portable processors includes authorization to enable a particular operator to control the first CPU with respect to the data representative of the monetary value to be loaded, and a third one of said authority levels associated with said select portable processor includes authorization to enable the distribution of said data representative of monetary values by said second CPU system;

means operable upon the attachment of said plurality of portable processors to said first CPU and under control of said set of instructions for determining if the proper hierarchical set of authority level portable processors have been temporarily attached to said first CPU; and

means controlled by said proper determination for allowing said first CPU to load said monetary value data into said currently attached select portable processor.

2. The invention set forth in claim 1 further comprising:

means controlled by said first CPU system for formatting any said third authority level portable processors connected to said first CPU system prior to loading said monetary data therein.

3. The invention set forth in claim 2 further including:

means for determining if said select portable processor which is currently connected to said CPU has previously been formatted by a CPU operable as said first CPU;

means for determining the amount of said monetary value data currently loaded into said select portable processor connected to said first CPU;

means for determining if said monetary value data currently loaded in a connected portable processor is in excess of a certain value, wherein said determination of excess value is made if said connected portable processor has been determined to not have been previously formatted by said format determining means; and

means controlled by a positive determination by said last-mentioned means for preventing the further loading of data into said portable processor.

4. The invention set forth in claim 1 further including:

means, including data stored within at least one of said portable processors, for determining a time limit for said first CPU loading of value data to any said third authority level portable processor of said portable processors.

5. A system of controlling the refill of data into a portable processor where the data refilled in said portable processor represents a monetary equivalent value and wherein the portable processor is operational in conjunction with a plurality of different CPU systems, each of said CPU system controlled by a set of application program instructions which are not common to each other and wherein certain ones of said CPU systems are designated as master systems and are operable to increment said monetary equivalent value data in said portable processor temporarily connected thereto and wherein the other ones of said CPU systems are designated as remote systems and operate to decrement the monetary equivalent value data stored in said portable processor temporarily connected thereto in accordance with directions obtained by a user of said remote CPU, said system comprising:

means for concurrently temporarily connecting a plurality of said portable processors to any one of said master CPU systems, wherein only one of said temporarily connected portable processors contains said monetary equivalent value data and wherein the other ones of said temporary connected portable processors contain therein data representative of authority levels for controlling said refill of value data into said temporarily connected monetary equivalent value data containing portable processor; and

means for reading from said temporarily connected authority level data containing portable processors data pertaining to authorized refilling of said monetary equivalent value data into said temporarily connected monetary equivalent value data containing portable processor.

6. The system set forth in claim 5 wherein said reading means further includes:

means for matching at least one set of data obtained from said connected master CPU system with at least one set of data obtained from a first one of said temporarily connected authority level data containing portable processors; and

means for preventing said refilling of said monetary equivalent value data if said sets of data fail to match.

7. The system set forth in claim 6 wherein said matching means further includes:

means for matching at least a second set of data obtained from said connected master CPU system with at least a second set of data obtained from a second one of said temporarily connected authority level portable processors.

8. The system set forth in claim 7 wherein said data sets in a first one of said temporarily connected authority level portable processors pertain to said connected master CPU system;

and

wherein said data sets in a second one of said temporarily connected authority level portable processors pertain to an authorized postal authority user having authority to control said refilling of said monetary equivalent value data at said connected master CPU system.

9. The system set forth in claim 7 wherein said set of data obtained from said first one of said temporarily connected authority level data containing portable processors is formatted as a valid response for a portable processor having a first authority level, and wherein said set of data obtained from said second one of said temporarily connected authority level data containing portable processors is formatted as a valid response for a portable processor having a second authority level.

10. The system set forth in claim 9 wherein a time limit for said valid response associated with said first authority level is included in said first set of data obtained from said master CPU system, and wherein a time limit for said valid response associated with said second authority level is included in said second set of data obtained from said master CPU system.

11. The system set forth in claim 6 wherein said first set of data obtained from said master CPU system includes a password associated with authorized use of said first one of said temporarily connected authority level data containing portable processors as provided by a first operator, and wherein said second set of data obtained from said master CPU system includes a password associated with authorized use of said second one of said temporarily connected authority level data containing portable processors as provided by a second operator.

12. The system set forth in claim 5 wherein said monetary equivalent value data is a prepaid amount of postage credit.

13. A method of controlling the refill of data into a credit storage portable processor of a plurality of portable processors where the data in said credit storage portable processor represents a monetary equivalent credit and wherein the credit storage portable processor is operational in conjunction with a plurality of CPU systems each controlled by a respective set of application program instructions, wherein at least a first CPU system of said plurality of CPU systems is operable to increment said monetary equivalent credit data in said credit storage portable processor temporarily coupled thereto, said method comprising the steps of:

temporarily coupling a first portable processor to said first CPU system, wherein said first portable processor is associated with a first user of said first CPU system, and wherein said first portable processor interacts with said first CPU system and said first user to authorize operation of said application program instructions associated with said first CPU system beyond said authorization interaction with said first user and said first portable processor;

temporarily coupling a second portable processor to said first CPU system, wherein said second portable processor is associated with a second user of said first CPU system, wherein said second portable processor interacts with said first CPU system and said second user to authorize said second user to utilize predetermined aspects of said application program instructions associated with said first CPU system;

temporarily coupling said credit storage portable processor to said first CPU system;

determining if interaction of said second portable processor with said first CPU system and said second user authorizes said second user to utilize a monetary value refill aspect of said application program instructions associated with said first CPU system; and

incrementing said monetary value credit in said credit storage portable processor in an amount selected by said second user if said second user is determined to be authorized to utilize said monetary value refill aspect of said application program instructions.

14. The method of claim 13, wherein said credit storage portable processor coupling step comprises the steps of:

obtaining from said coupled credit storage portable processor a value of the monetary equivalent credit data already stored therein;

determining under control of said application program instructions associated with said first CPU system if the coupled credit storage portable processor has been previously coupled to a CPU system operable as said first CPU system for refilling of monetary value credit data; and

inhibiting said incrementing step with respect to said credit storage portable processor if it is determined that the credit storage portable processor has previously been coupled to a CPU system operable as said first CPU system and said obtained value exceeds a preestablished amount.

15. The method of claim 14, wherein said credit storage portable processor coupling step comprises the steps of:

determining under control of said application program instructions associated with said first CPU system if the coupled credit storage portable processor has data stored in predetermined locations matching a fixed predefined set of data; and

inhibiting said incrementing step with respect to said credit storage portable processor if it is determined that the data stored in said predetermined locations does not match said fixed predefined set of data.

16. The method of claim 15, wherein said predefined set of data includes a strike-up count incremented each time any amount of monetary value credit is decremented from said credit storage portable processor.

17. The method of claim 13, wherein at least a portion of said monetary value credit incrementing must be performed within a predetermined time in order to complete said monetary value credit incrementing step.

18. The method of claim 13, wherein at least a portion of said interaction between said first portable processor and said first CPU system must produce a valid response within a predetermined time in order to authorize said operation of said application program instructions associated with said first CPU system beyond said authorization interaction with said first user and said first portable processor.

19. The method of claim 13, wherein at least a portion of said interaction between said second portable processor and said first CPU system must produce a valid response within a predetermined time in order to authorize said second user to utilize said predetermined aspects of said application program instructions associated with said first CPU system.

20. A method utilizing a general purpose computer for increasing prepaid credit data stored in a user portable processor operable with a prepaid credit distribution system, wherein said general purpose computer is a credit server of said prepaid credit distribution system, and wherein said user portable processor is a portable processor of a plurality of portable processors specifically operable with said prepaid credit distribution system, said plurality of portable processors also including at least a master portable processor and an agent portable processor specifically operable with said prepaid credit distribution system, said method comprising the steps of:

coupling ones of said plurality of portable processors to said general purpose computer, wherein said coupling step includes coupling at least a master portable processor, an agent portable processor, and a user portable processor to said general purpose computer;

authenticating a first password associated with said master portable processor coupled to said general purpose computer;

authenticating a second password associated with said agent portable processor coupled to said general purpose computer;

determining if said user portable processor has been previously coupled to a credit server of said prepaid credit distribution system for increasing prepaid credit data and if prepaid credit data currently stored in said user portable processor exceeds a preestablished amount; and

incrementing said prepaid credit data currently stored in said user portable processor upon successful authentication of said first password and said second password and a determination that said prepaid credit data currently stored in said portable processor does not exceed a preestablished amount if the user portable processor has not been previously coupled to a credit server of said prepaid credit distribution system for increasing prepaid credit data.

21. The method of claim 20, wherein authentication of said first password enables further operation of said general purpose computer as said credit server of said prepaid credit distribution system.

22. The method of claim 20, wherein authentication of said second password enables a particular operator to control said general purpose computer as said credit server of said prepaid credit distribution system.

23. A general purpose computer for increasing prepaid credit data stored in a user portable processor operable with a prepaid credit distribution system, wherein said general purpose computer is a credit server of said prepaid credit distribution system, and wherein said user portable processor is a portable processor of a plurality of portable processors specifically operable with said prepaid credit distribution system, said plurality of portable processors also including at least a master portable processor and an agent portable processor specifically operable with said prepaid credit distribution system, said general purpose computer comprising:

means for coupling ones of said plurality of portable processors to said general purpose computer, wherein said coupling means is adapted to couple at least a master portable processor, an agent portable processor, and a user portable processor to said general purpose computer;

means for authenticating a first password associated with said master portable processor coupled to said general purpose computer;

means for authenticating a second password associated with said agent portable processor coupled to said general purpose computer;

means for determining if said user portable processor has been previously coupled to a credit server of said prepaid credit distribution system for increasing prepaid credit data and if prepaid credit data currently stored in said user portable processor exceeds a preestablished amount; and

means for incrementing said prepaid credit data currently stored in said user portable processor upon successful authentication of said first password and said second password and a determination that said prepaid credit data currently stored in said portable processor does not exceed a preestablished amount if the user portable processor has not been previously coupled to a credit server of said prepaid credit distribution system for increasing prepaid credit data.

24. The system of claim 23, wherein authentication of said first password enables further operation of said general purpose computer as said credit server of said prepaid credit distribution system.

25. The system of claim 23, wherein authentication of said second password enables a particular operator to control said general purpose computer as said credit server of said prepaid credit distribution system.

26. The system of claim 23, wherein said incrementing means comprises:

means for generating a valid credit server security packet to enable said coupled user portable processor to increment said prepaid credit data stored therein.

27. The system of claim 26, wherein said incrementing means further comprises:

means for determining if a response indicating successful incrementing of said prepaid credit data by said user portable processor is received by said general purpose computer within a preestablished time of communicating said valid credit server security packet to said coupled user portable processor.

28. The system of claim 26, wherein said valid credit server security packet comprises information selected from the group consisting of:

identification of said master portable processor;

identification of said agent portable processor;

a date as available at said general purpose computer;

a time as available at said general purpose computer;

identification of said general purpose computer; and

identification of a location of said general purpose computer.

29. The system of claim 23, further comprising:

means for preventing the operation of said incrementing means if it is determined that data stored in predetermined locations within said coupled user portable processor does not match a predefined set of data.

30. The system of claim 29, wherein said stored data includes a strike-up counter incremented each time any amount of prepaid credit data is decremented from said stored prepaid credit data.