System and method of verifying cryptographic postage evidencing using a fixed key set

• US 6,058,193 A
• Filed: 06/28/1999
• Issued: 05/02/2000
• Est. Priority Date: 12/23/1996
• Status: Expired due to Term

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Ryan, Frederick W. Jr., Cordery, Robert A., Pintsov, Leon A., Lee, David K., Pauly, Steven J., Weiant, Monroe A. Jr.
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): Callahan, Paul E.
• Application Number:
  US09/340,592
• Time in Patent Office: 309 Days
• Field of Search: 380/277-285, 705/401, 705/405, 705/410, 235/431, 235/435, 235/470, 364/468.22, 364/478.03, 364/478.14, 364/478.15, 364/479.07, 364/601, 364/604, 364/704, 364/709.06, 283/69, 283/72-75, 283/93, 283/113, 283/17, 178/79, 178/89
• US Class Current: 380/284
• CPC Class Codes: G07B 17/00435 Details specific to central, non-customer apparatus, e.g. servers at post office or vendor
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00427 Special accounting procedures, e.g. storing special information
• CPC Class Codes: G07B 2017/00443 Verification of mailpieces, e.g. by checking databases
• CPC Class Codes: G07B 2017/0075 Symmetric, secret-key algorithms, e.g. DES, RC2, RC4, IDEA, Skipjack, CAST, AES
• CPC Class Codes: G07B 2017/0087 Key distribution
• CPC Class Codes: G07B 2017/00879 using session key
• CPC Class Codes: G07B 2017/00887 using look-up tables, also called master tables with pointers
• CPC Class Codes: G07B 2017/00919 Random number generator

Abstract

A method for controlling keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document comprises the steps of generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys; generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device; calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; encrypting the verifier token key set with a privacy key; and distributing the set verifier token keys and the privacy key to verifiers. The token keys are a function of the verifier master keys and a code valid for a limited time. The pointer algorithm is an appropriate symmetric key cryptographic algorithm and the code is function of a date dependent parameter. The master keys are distributed to postal and vendor data centers.

Claims

1. A method for providing keys used in the verification of encoded information generated by a transaction evidencing device and printed on a document, the method comprising the steps of:

generating a plurality of random verifier master keys to obtain a set of verifier master keys consisting of a fixed number of keys;

generating at least one pointer by applying a psuedorandom algorithm to data unique to the transaction evidencing device;

calculating a plurality of verifier token keys to obtain a verifier token key set corresponding to the set of verifier master keys; and

distributing the verifier token key set to verifiers.

2. The method of claim 1 wherein the token keys are a function of the verifier master keys and a code valid for a limited time.

3. The method of claim 2 wherein the code is function of a date dependent parameter.

4. The method of claim 2 comprising the further step of:

distributing master keys to postal and vendor data centers.

5. The method of claim 1 wherein the pointer algorithm is an appropriate symmetric key cryptographic algorithm.

6. The method of claim 5 wherein the pointer algorithm is triple DES.

7. The method of claim 1 wherein the steps of distributing the set of verifier token keys and the distribution key to verifiers comprises the further steps of:

setting up a session key with each verifier; and

encrypting the distribution key with each verifier session key.

8. The method of claim 1 comprising the further step of:

selecting at least one of the verifier token keys for verification of the encoded information printed on a document.

9. The method of claim 8 wherein the step of selecting the verifier token keys includes using data unique to the transaction evidencing device that is printed on the document being verified.

10. The method of claim 1, wherein the data unique to the transaction evidencing device is an identification number of the transaction evidencing device.

11. The method of claim 1 comprising the further steps of:

encrypting the verifier token key set with a distribution key; and

distributing the distribution key to verifiers.